This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File:                     IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier:          0Nq/Yx9r0ZRquSX+qfU8kHAUhx3Jqp/oGD6NHBYoi7s=
Subject key identifier:   D4:AD:13:C6:8E:34:24:A9:68:E2:98:46:41:6C:43:67:C3:51:31:5D
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer:       /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial:       019C427D19BE3E37A75672320A5339D2FA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number:          0B59
Signing time:             Mon 09 Feb 2026 13:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:20 +0000
Files and hashes:         1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: iww/FuPM1sSUUcy+qi9nANjhvl41ohHEC/WTQK3FtLU=)
                          2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:19:be:3e:37:a7:56:72:32:0a:53:39:d2:fa:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
        Validity
            Not Before: Feb  9 13:00:20 2026 GMT
            Not After : Feb 10 13:00:20 2026 GMT
        Subject: CN=d4ad13c68e3424a968e29846416c4367c351315d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:3f:45:d0:35:3a:4b:cd:f0:8a:45:ae:53:
                    f5:85:4c:1c:26:51:69:16:64:be:15:9d:20:c3:fd:
                    ff:12:ff:a8:93:66:e9:63:f3:88:2d:42:86:7a:05:
                    91:5f:fd:93:81:a9:bc:69:b6:90:a6:20:5b:b1:c1:
                    df:d7:ee:20:71:01:2e:72:b7:11:f6:69:3e:74:89:
                    6e:a1:e2:61:c4:e2:0e:bf:1c:85:7a:7e:c4:21:36:
                    ed:f3:e2:c2:a8:8d:7f:17:1b:32:b1:8b:80:64:ab:
                    1c:6d:d1:c1:bc:0a:46:cb:de:63:8c:3a:3d:fe:0c:
                    ff:40:e5:aa:e6:78:33:7d:a9:c4:78:6e:b3:a4:66:
                    b8:bf:7f:de:2d:b3:d2:2e:c2:10:f1:86:6d:7a:5f:
                    d3:2c:e2:0c:03:cf:a2:d7:66:c9:a3:4e:1a:01:00:
                    59:63:09:90:a7:ec:d3:11:00:72:e6:45:5e:eb:02:
                    6e:d5:b2:fb:cb:43:3c:85:67:d8:2b:74:e9:97:98:
                    da:86:c2:9c:66:11:35:e8:10:6e:42:7f:9a:3b:8b:
                    bc:c3:c5:92:92:df:62:79:43:fd:71:97:18:d0:27:
                    3f:da:bb:f5:40:90:00:cc:7f:66:5e:be:e8:c5:1b:
                    8e:28:1b:cb:20:26:8b:75:79:e5:8c:2e:af:3d:52:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AD:13:C6:8E:34:24:A9:68:E2:98:46:41:6C:43:67:C3:51:31:5D
            X509v3 Authority Key Identifier:
                keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3f:73:5c:cc:11:c2:b3:33:e4:5e:ab:0c:54:af:93:9a:9f:
         a4:9a:8e:5d:2b:46:84:09:84:b1:0d:76:11:9a:bb:1c:ea:21:
         ce:ed:e5:1e:49:5b:34:15:cb:65:4a:b6:d2:25:ad:87:f7:95:
         cc:8a:7c:dd:71:f5:64:c0:52:75:9b:46:26:44:60:63:95:eb:
         a9:b2:cf:f3:f8:6a:e3:49:de:22:8d:74:54:29:3b:7b:71:01:
         fc:3f:61:5d:b0:5a:de:80:c0:79:4b:2a:5e:85:e9:2d:4c:70:
         94:aa:17:02:53:78:ba:fd:fd:29:f8:cc:d1:9a:13:8b:f8:cf:
         8a:12:3b:7a:f6:6f:94:41:f5:87:2b:3a:ec:dc:d5:3d:29:f2:
         03:d1:6f:30:e0:33:ba:7e:61:49:4d:58:92:3c:4c:ff:61:f2:
         b4:fa:61:dc:79:05:bd:ba:02:5c:c2:a3:3d:1c:d9:27:d9:84:
         5d:7c:8d:63:cf:73:1a:6f:f1:ff:72:89:88:6b:f4:f4:e5:a8:
         c6:eb:d7:63:15:02:6a:a6:9c:27:4f:b5:b0:11:ca:fb:72:d9:
         a3:66:fb:ef:bd:ff:b7:6a:5f:74:47:87:c9:ae:ab:4c:c0:4e:
         2f:a6:ae:d5:91:f4:87:b7:d8:4a:e1:7d:db:b7:60:6e:46:95:
         1b:1b:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:24 2026 by rpki-client