This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File:                     ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier:          nIL/cY77IaCCClxdhavs9rWg+WdPMdGsfmrclS205jI=
Subject key identifier:   C1:61:5A:48:22:DA:39:B9:07:29:6E:ED:82:80:0B:C2:CC:96:AD:C5
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer:       /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial:       019C43C6F951A06F826C244832FEF7ED7A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number:          0F38
Signing time:             Mon 09 Feb 2026 19:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:39 +0000
Files and hashes:         1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
                          2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: DEnbIMVU70rMR8HRnvp503WpzFdE11NqtyesPtMPFiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:f9:51:a0:6f:82:6c:24:48:32:fe:f7:ed:7a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
        Validity
            Not Before: Feb  9 19:00:39 2026 GMT
            Not After : Feb 10 19:00:39 2026 GMT
        Subject: CN=c1615a4822da39b907296eed82800bc2cc96adc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:e3:9b:b5:b2:08:a5:17:16:ed:b6:cd:2c:
                    57:89:23:46:1f:00:94:bb:88:f1:f7:07:f8:56:60:
                    10:0e:4a:61:31:72:de:8f:c6:79:cb:10:33:4a:0c:
                    5d:dc:32:78:a3:c1:4a:36:56:83:45:e6:c3:43:95:
                    8a:70:d1:cb:5a:2f:01:76:c9:1e:33:3c:06:74:1b:
                    54:12:8d:f7:8d:35:a9:fb:2d:55:37:cd:38:e6:41:
                    44:23:2f:92:65:ed:78:d2:58:e2:4e:b4:44:5a:62:
                    f3:18:7a:db:2f:d2:6e:0c:60:85:e3:57:30:7f:51:
                    75:ca:57:98:e9:bb:75:d6:09:bf:bc:f4:32:bd:9a:
                    ba:46:08:46:6b:ed:5b:de:7d:5d:b2:c3:af:1f:ae:
                    17:84:8f:e3:2a:f0:bf:ff:47:75:bd:c1:4f:5f:24:
                    ef:b4:8b:c9:e5:25:6b:7d:cc:8d:a2:61:d8:82:07:
                    21:61:13:81:62:4f:6f:1c:1a:06:81:76:1e:77:67:
                    2f:81:87:4b:b1:ff:8d:b2:c8:89:58:42:c5:ef:de:
                    1d:ec:4c:7b:bf:cb:3d:f9:a1:0e:34:d8:ea:88:5c:
                    83:e9:0e:ef:0e:10:4b:4b:7a:a1:a0:de:60:35:a4:
                    24:f8:76:d9:03:0c:b7:0d:3c:15:a5:5c:3e:1b:d1:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:5A:48:22:DA:39:B9:07:29:6E:ED:82:80:0B:C2:CC:96:AD:C5
            X509v3 Authority Key Identifier:
                keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2d:b1:d0:f3:38:11:ea:d6:c7:c2:47:65:3d:04:b2:a3:01:
         e5:b8:ad:bb:78:22:1c:a8:80:da:4c:14:40:c4:13:82:2d:50:
         6f:4f:61:cd:b8:98:88:b0:86:2c:25:27:42:20:86:df:47:0e:
         6c:0d:4a:02:93:39:a0:d5:2a:35:25:84:35:1d:f5:a7:77:78:
         5c:bb:ab:f3:a8:1c:aa:f5:70:02:ca:da:8f:60:c8:58:33:19:
         5d:62:ab:f2:ab:c6:04:2b:39:c3:d6:b0:f7:78:61:1d:c6:4b:
         3c:1f:14:58:60:ba:d2:eb:30:08:15:c8:b8:48:e9:43:28:92:
         74:ca:81:b1:41:9f:9d:5d:4e:44:3b:f0:05:ce:65:44:3a:9f:
         5c:3a:d3:a6:09:26:1b:1f:15:f6:45:33:9d:a2:bf:c6:60:5e:
         85:46:e3:f7:e6:8d:72:6f:a0:ef:fb:b4:91:5a:e4:5c:94:e2:
         93:55:7a:0e:42:4f:be:b7:0c:4d:5f:32:48:60:be:5c:a6:f7:
         21:a8:54:d7:bd:5a:c3:b2:87:8b:87:8c:33:4d:38:9e:57:70:
         f5:e2:9d:7c:c5:0a:9b:89:e7:1d:fe:bb:bd:93:e3:fc:f5:2f:
         9f:eb:b2:70:e5:71:06:b9:bf:c1:ec:4a:7c:8a:07:28:a4:c0:
         b8:c4:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:04 2026 by rpki-client