This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          j7TOfLbKDQOElWP85zE243+spC8r856w22OYu6Q6W7I=
Subject key identifier:   40:BB:BD:0C:69:D8:74:BF:48:19:19:6E:95:7B:2B:01:38:0C:12:48
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       019C43C6C4577C1D1FA980A829D621898806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1865
Signing time:             Mon 09 Feb 2026 19:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:25 +0000
Files and hashes:         1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
                          2: 8FXA3L_y6fWlVvjuoMZYug9-ctc.roa (hash: LjYIRZujlxSVqdlmuA5Ws4SCBiAXV3LI+Wur00HvyGs=)
                          3: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
                          4: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: eN/Xf8zZ1Wnd9L+v3kl6dlPLd+UiJlo24N/nFKOCdr8=)
                          5: Ozhq2p5IGxLu9SXZZWP-BQ3lnTU.roa (hash: nQ9HqhgH+f3l+gbd/M6Z4MBCuyUEvgkkT7lgov09bOs=)
                          6: dAe3HPTGugiWeZyg7mjQe7JB42Q.roa (hash: 5l0sP1hOQxhlGzCJfn6QQfk0vrbk6qBCDCkNS+AsWRo=)
                          7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:c4:57:7c:1d:1f:a9:80:a8:29:d6:21:89:88:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Feb  9 19:00:25 2026 GMT
            Not After : Feb 10 19:00:25 2026 GMT
        Subject: CN=40bbbd0c69d874bf4819196e957b2b01380c1248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:d1:00:5d:e4:c9:74:28:7b:d4:66:f8:ec:
                    02:c2:70:da:5e:87:76:8f:e6:e0:2f:4e:eb:c0:ef:
                    19:93:be:12:24:80:d9:13:bd:3b:69:e5:7f:85:0c:
                    d3:ab:a5:b3:dd:24:bd:62:62:d1:24:2e:18:e9:d1:
                    fe:c7:21:62:e1:5c:ad:77:e8:86:ec:41:b5:54:e8:
                    56:ba:09:30:88:04:f2:2e:f5:7b:cf:6d:0f:bf:81:
                    1a:84:e3:03:1e:bd:d6:45:4c:02:38:6c:d6:c7:33:
                    ad:2f:9b:9d:39:b6:d5:99:d1:a2:6d:bc:ca:1a:48:
                    cf:54:f4:a4:aa:6e:bf:3c:80:58:a4:7e:7a:f5:4c:
                    33:6a:7f:84:94:f2:dd:f6:92:10:8f:f0:b2:5b:30:
                    75:73:cd:66:ca:a6:c0:9e:f3:63:40:e8:94:a4:1f:
                    ef:ce:a7:35:87:d3:41:07:f8:1c:48:df:8a:2a:00:
                    8b:7c:dc:ee:bd:12:8e:0b:7e:2b:4e:c9:55:91:9c:
                    8c:82:7e:15:05:64:10:68:d0:1d:e4:ac:e4:30:7f:
                    5c:97:4e:4f:7d:26:f7:32:f0:03:dc:9c:45:0a:23:
                    eb:a4:2f:16:82:ca:6e:de:0f:30:42:13:6e:a9:07:
                    74:dd:90:fe:8b:be:8c:66:66:75:22:89:3c:23:6a:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:BD:0C:69:D8:74:BF:48:19:19:6E:95:7B:2B:01:38:0C:12:48
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:e4:36:05:bd:99:1b:95:6a:0a:34:7c:4e:41:4a:38:58:
         ae:e2:e6:9b:91:55:1d:ac:15:03:ce:ff:ea:56:45:ea:e1:ed:
         6b:cf:4e:d8:cf:4d:23:65:b2:20:d8:dc:12:7a:ae:17:13:b7:
         68:a0:07:25:04:e3:02:48:c3:06:b6:71:bf:16:23:32:0a:55:
         fa:dc:76:67:6a:a0:7c:ed:cf:6b:dc:f0:b8:35:ca:b1:cd:c2:
         a9:df:e0:0c:ac:ba:eb:c2:38:52:8c:7e:43:97:dc:0c:46:34:
         2b:77:13:36:9c:27:30:22:01:a9:48:c2:bb:b2:7d:27:17:6f:
         44:cf:0b:80:ff:9a:09:13:b0:d6:77:72:41:b9:d1:e3:35:e4:
         74:ee:c2:24:0f:c8:b0:42:92:52:71:b7:4b:86:d0:59:b9:d5:
         b5:6a:00:78:9c:fe:18:33:b4:c0:ef:0e:c1:0c:75:e9:27:39:
         e6:c4:1e:d1:a3:6c:7d:eb:a4:4b:7f:0a:68:69:9f:ea:25:34:
         a8:03:cd:19:8f:99:80:9f:b9:55:a4:54:0f:42:c7:02:8d:78:
         46:4c:25:b5:f2:80:8b:29:12:f3:d1:41:6a:64:0b:28:85:cf:
         e7:0b:e9:5c:75:f9:ff:67:64:28:4e:65:b8:39:86:4e:00:b5:
         0d:ec:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:48 2026 by rpki-client