This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
File:                     iltimkaYWIj_FL-p19yx61JmAKY.mft (raw, json)
Hash identifier:          mIg0HSIYsju42Y55PPSfESGP/0yoeYWfbsMe3yWwvW8=
Subject key identifier:   78:F8:33:16:C5:CE:A9:09:2B:97:71:6C:9E:F1:10:C1:B0:32:A0:DB
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Certificate issuer:       /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial:       019C427DF5FA8C1BE513F3A538B9384492A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
Manifest number:          09FE
Signing time:             Mon 09 Feb 2026 13:01:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:16 +0000
Files and hashes:         1: Sij9IlfqNvLqsGMh1vte9HHCsJE.roa (hash: ++kaPggqzwnpUTH7+GWX7uPn6wV3SaYRJ1kpXxDIl20=)
                          2: iltimkaYWIj_FL-p19yx61JmAKY.crl (hash: Tdk/LJ41AT6iJSWMeZ0cOSt8xo5Bf463pyoEL73jmdc=)
                          3: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (hash: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:f5:fa:8c:1b:e5:13:f3:a5:38:b9:38:44:92:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
        Validity
            Not Before: Feb  9 13:01:16 2026 GMT
            Not After : Feb 10 13:01:16 2026 GMT
        Subject: CN=78f83316c5cea9092b97716c9ef110c1b032a0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cc:50:18:c3:46:ac:cd:7b:88:1c:48:28:2b:
                    3e:ac:12:1f:42:31:51:d8:e4:dd:13:2c:fb:44:03:
                    6c:7c:3f:e7:a9:fc:38:a4:7a:4c:ce:e5:4a:d6:08:
                    74:54:e3:75:8c:31:7c:64:9d:7a:57:0e:35:8a:99:
                    93:6d:cf:48:be:5d:49:a0:b7:3e:18:bc:86:46:18:
                    be:a9:76:36:b4:cf:4b:7e:77:ae:9b:00:f4:45:4a:
                    97:18:e9:13:9e:0c:55:c8:a7:eb:e6:68:75:a9:dd:
                    09:c6:62:9b:cd:a5:1a:15:3b:cf:f6:e6:d9:07:9b:
                    76:c2:a1:50:de:47:3f:50:94:8a:48:f7:b9:a3:7f:
                    8d:c4:77:bd:14:b6:3a:42:1f:0a:e5:94:22:f3:93:
                    69:e6:46:49:f3:c7:5f:0f:54:89:62:3f:e1:80:71:
                    a5:61:e7:d5:d0:ab:94:89:62:e2:1d:2a:ac:7e:01:
                    76:de:1a:69:e7:25:08:34:68:4f:ae:d1:19:2f:1d:
                    f7:6a:6a:1c:52:75:ea:cb:58:ef:14:b4:08:ad:a6:
                    ac:62:45:b6:e0:d4:b9:3b:d1:9f:8a:c3:36:d6:46:
                    5f:5b:52:93:2b:a4:17:0f:92:0f:e5:50:45:de:3c:
                    db:d1:e3:5f:d7:c0:73:ef:39:a3:44:de:78:ef:4d:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F8:33:16:C5:CE:A9:09:2B:97:71:6C:9E:F1:10:C1:B0:32:A0:DB
            X509v3 Authority Key Identifier:
                keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:d9:1d:83:90:e9:b0:fa:04:18:68:79:04:8d:de:9a:bc:
         76:2e:b6:2a:00:8f:88:99:a8:7c:32:a2:67:9c:ca:aa:f9:e5:
         8c:6f:41:b0:83:9c:ff:79:4a:65:6f:63:47:10:95:b9:6b:59:
         fb:7d:66:5d:96:87:cc:80:1c:76:bd:77:01:12:94:8b:13:23:
         76:5c:d8:d2:aa:b1:27:aa:3c:a6:69:d4:f7:6e:0e:54:91:83:
         80:6d:b3:07:40:74:b2:12:d7:0f:13:10:84:a9:3c:b8:40:72:
         90:2d:2c:11:ad:44:42:54:87:76:85:f3:ec:40:85:0d:9f:1a:
         a8:59:ad:e2:ad:25:29:e3:97:31:e8:32:f3:61:05:e7:08:d7:
         13:1d:d3:96:f5:2c:c3:5f:55:c8:60:42:a7:4e:12:92:4c:b5:
         5a:22:b0:7d:ba:9a:56:5e:6e:02:94:62:60:ab:7b:05:b1:a8:
         38:79:d6:9a:12:fd:dc:97:03:80:5f:f3:01:60:1e:f6:9d:7b:
         5b:dd:d4:1c:37:e6:8e:d0:5a:0c:e0:54:0b:95:eb:4c:2d:da:
         97:6a:c1:68:e6:b8:86:2a:ff:62:fd:1e:c4:1e:14:1f:ed:84:
         27:39:90:fb:f8:6d:c8:9f:fd:38:19:1d:bc:8c:93:8f:c2:aa:
         94:9d:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:12 2026 by rpki-client