This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          ypCEoMTNVAyuxRN/gnVSdZRwTK5FrmMrzTbdjwFCsA4=
Subject key identifier:   36:74:1C:18:94:C7:35:0C:C2:2B:E2:18:87:AE:F1:9C:93:5A:26:41
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019C420F365122F0CD2AFCA804B88F4100FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 11:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:18 +0000
Files and hashes:         1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
                          2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
                          3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
                          4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: p3GFhNJV0vOQmyQ90WAFcpK3yA1KYhEZuqK0O4lvsro=)
                          5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
                          6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
                          7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:36:51:22:f0:cd:2a:fc:a8:04:b8:8f:41:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Feb  9 11:00:18 2026 GMT
            Not After : Feb 10 11:00:18 2026 GMT
        Subject: CN=36741c1894c7350cc22be21887aef19c935a2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:38:78:38:63:7b:33:f8:f0:06:50:70:cb:
                    61:e1:9b:21:1b:08:47:31:aa:4c:67:7a:d3:93:9f:
                    ce:91:1e:2d:fe:b4:31:3b:c3:94:ea:8f:b7:08:ac:
                    e9:bf:8c:f7:44:ac:5a:32:a3:80:1f:02:35:b2:a4:
                    b6:ed:35:94:54:8a:64:d9:cf:f0:52:61:2a:66:51:
                    8f:6a:3a:e7:cf:c0:1e:8c:68:67:51:ad:93:7a:06:
                    aa:bf:6e:74:f1:b7:a0:8b:87:13:6f:c7:d7:79:5e:
                    88:5d:69:c2:4c:ed:75:46:b2:67:fd:ae:df:25:cf:
                    f0:6f:96:fb:99:71:c2:03:77:03:42:f0:86:ee:79:
                    a9:dc:24:b4:84:a2:1b:e4:bc:78:f7:5e:14:92:24:
                    9e:bb:71:71:ea:08:bb:a1:93:a6:67:3f:53:e7:28:
                    3a:ee:97:36:17:48:50:cf:0b:97:41:28:2c:be:76:
                    e9:ea:35:40:5b:f4:8d:4b:61:c2:82:b6:cd:b3:4c:
                    d6:4c:54:f6:99:46:66:40:2b:6d:79:78:81:dd:67:
                    5d:ea:46:f6:f2:a9:37:5f:cd:d5:66:f2:25:19:6c:
                    46:60:1e:8a:85:4a:31:b3:19:cd:e8:91:b3:9f:c6:
                    4f:24:c7:73:d1:27:4c:d6:87:12:d7:71:70:12:f2:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:74:1C:18:94:C7:35:0C:C2:2B:E2:18:87:AE:F1:9C:93:5A:26:41
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:25:29:86:a9:69:1b:60:5c:60:4f:9f:a7:f7:cc:93:32:
         99:96:34:2c:e2:91:88:23:a7:93:5a:2a:17:8a:c9:12:9b:5d:
         7a:81:32:ac:7c:99:66:57:4d:ef:b6:e1:d5:d6:31:67:5d:c7:
         de:78:34:2c:e1:81:86:7d:40:e6:4b:ae:2f:60:92:2f:0e:85:
         e1:65:35:61:32:97:0f:94:e6:c6:7e:65:49:95:26:2f:b5:09:
         98:10:69:90:76:66:b1:2f:01:4e:cb:8c:92:e4:59:69:6e:6f:
         1c:9c:1c:85:f1:9e:9e:dd:7f:f1:a3:32:46:34:19:1c:e6:29:
         e4:8a:91:7a:80:82:00:5e:00:10:e0:f3:84:fc:73:72:0c:d9:
         fa:d4:1e:7d:a0:61:2a:65:3b:a9:70:26:8c:d2:16:86:29:f8:
         24:37:b9:a4:fa:af:98:1e:5e:44:7c:6b:df:e5:bb:3f:78:a0:
         a7:7f:fb:39:02:59:54:7e:e3:74:ce:15:55:99:16:f0:f7:92:
         42:5c:2e:83:16:30:de:e7:02:58:74:54:af:67:da:7d:41:bd:
         d2:0e:48:4b:e0:60:e2:36:f4:d9:92:c7:3c:eb:59:25:15:1f:
         8e:06:4a:10:55:2f:d5:5a:68:0b:56:93:7d:df:50:c8:7f:68:
         26:8c:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:20 2026 by rpki-client