This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File:                     ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier:          wp3CJ9WTmh1CwEmEThpzHRclvYVki9JgNZPGtdt26tI=
Subject key identifier:   83:FE:13:02:87:61:39:23:3F:D5:9F:A0:99:DE:6A:0D:EC:C0:BF:6B
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer:       /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial:       019C42462F738E2B4B8739758E3C4681AB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number:          01AE
Signing time:             Mon 09 Feb 2026 12:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:21 +0000
Files and hashes:         1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
                          2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: wCjHFdOe6j2zSSP1GSkgCVnZwtAMIsh5L6x0sM+6nrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2f:73:8e:2b:4b:87:39:75:8e:3c:46:81:ab:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
        Validity
            Not Before: Feb  9 12:00:21 2026 GMT
            Not After : Feb 10 12:00:21 2026 GMT
        Subject: CN=83fe1302876139233fd59fa099de6a0decc0bf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:84:f4:f2:bd:56:73:38:07:be:2a:9d:d2:
                    76:7f:56:5e:04:5f:74:07:6f:b2:3e:e3:b7:f7:99:
                    be:89:c6:8e:0d:58:f8:4c:cc:3a:7a:57:ab:18:40:
                    6c:75:ba:2a:06:c2:6c:db:64:30:25:22:ef:fa:eb:
                    5b:ef:da:65:f2:c1:b6:35:8b:13:df:54:2f:82:b9:
                    59:d8:e4:59:4c:19:86:ad:d5:56:d9:88:a7:5f:80:
                    6a:f0:81:67:0c:8a:d4:52:c4:00:5d:ab:9f:07:2c:
                    fc:be:76:fc:0a:20:90:56:82:cd:f8:fb:1c:35:c0:
                    60:ea:77:8b:a7:bf:8f:0d:a0:42:a0:ab:c3:84:f2:
                    7c:70:bf:b2:8d:77:46:fa:b2:f0:b7:b5:ce:c0:6e:
                    fa:66:2a:b1:72:ba:10:88:9c:d6:15:a7:c4:fb:87:
                    26:d3:2e:73:a4:94:16:37:6a:7c:c6:58:c1:80:8e:
                    f9:4e:8c:7c:eb:cf:c8:87:cc:bc:07:ad:f9:80:21:
                    a9:9c:ec:de:e7:fd:f2:50:70:42:8c:8f:09:f5:69:
                    23:f0:43:e3:72:12:26:b2:0c:bd:6e:a2:80:cf:3e:
                    8b:6d:8b:11:51:71:4d:14:ff:01:a8:79:8e:01:2e:
                    7e:c8:6f:d6:9c:25:99:9b:73:ac:22:e9:2e:da:0d:
                    5e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FE:13:02:87:61:39:23:3F:D5:9F:A0:99:DE:6A:0D:EC:C0:BF:6B
            X509v3 Authority Key Identifier:
                keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:b3:94:88:26:31:c9:17:2e:6e:d7:68:12:17:46:b4:23:
         90:73:29:2e:c7:c9:ae:ba:70:73:dd:84:c3:15:7f:ba:91:1d:
         66:91:94:e5:d5:86:20:71:41:87:15:85:45:1e:58:b9:44:04:
         fe:b9:8c:31:ba:60:65:e4:00:c8:d9:46:a4:b5:21:2e:89:d1:
         46:20:1a:be:02:8f:dd:d2:da:9f:9c:73:91:38:78:8e:22:56:
         66:8b:97:52:96:82:61:14:3e:c1:7e:0a:84:c3:47:9b:60:42:
         0e:e3:bb:0e:8f:50:68:84:05:30:74:63:53:b3:03:62:4f:ee:
         f1:e8:6d:50:5e:ec:72:11:0f:6b:e6:8f:50:c2:62:e2:4b:15:
         05:3f:d6:85:45:28:f9:64:0c:a7:3e:a0:5c:8f:10:ba:9e:94:
         a8:c5:47:e8:36:25:85:0b:23:bf:d5:67:b0:b3:0c:d9:f3:34:
         24:de:b4:8d:a1:d3:58:e4:bc:e4:5b:37:95:ec:68:62:87:56:
         c2:fb:4a:9b:cc:96:2d:e0:ff:23:34:6b:64:e7:20:78:3c:c0:
         e5:e9:a7:73:02:22:0e:42:a9:7f:a8:d5:6a:0c:10:10:84:08:
         1c:af:b4:c8:d3:0e:77:06:09:78:61:25:31:a3:28:c1:4d:6c:
         d4:18:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:27 2026 by rpki-client