This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File:                     iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier:          77Pc9xH9WdnvKUqoplfF4+zWV4qt6kmRFlpWGkP9PLc=
Subject key identifier:   94:F3:EF:73:6F:B0:4D:8C:B6:C1:E6:CB:A8:1F:F7:96:9A:A4:0B:99
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer:       /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial:       019C41D8C0A0F6C4FFCD558B1B9E6914B19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 10:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:49 +0000
Files and hashes:         1: SPmuoUXoA6tsZiCS0_pV74-AIEk.roa (hash: S9bFhQItClU/AaCIXnbTpcvt5Rg2XY1adevUwVNVVvo=)
                          2: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: h5Wn0XH0UR64MBkl6vjKtu/8K1ejuKbiwhBw8fumk3s=)
                          3: ip8Nz4oaOC3WF5YWfdlIj2uJ4es.roa (hash: L9aCvRxqO1gcLQJnMNhhLg422VtbcLvTCPUD+6YJIFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:c0:a0:f6:c4:ff:cd:55:8b:1b:9e:69:14:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
        Validity
            Not Before: Feb  9 10:00:49 2026 GMT
            Not After : Feb 10 10:00:49 2026 GMT
        Subject: CN=94f3ef736fb04d8cb6c1e6cba81ff7969aa40b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:0b:24:66:1c:00:45:66:db:11:d9:20:b5:
                    86:93:87:46:dc:17:ed:ac:90:f4:7f:18:e2:9f:0e:
                    c6:c0:27:03:8b:7e:2a:9b:b4:53:d2:22:ee:df:4e:
                    1f:1a:92:bb:3d:1d:b4:bd:d0:0b:d3:dd:55:52:bb:
                    d0:fe:c2:0d:ea:e1:e8:d1:44:9a:19:57:ce:db:5f:
                    3e:05:3c:77:1a:99:b7:34:ac:ea:9e:c9:e1:2d:d7:
                    38:77:74:96:89:3b:c3:6f:da:aa:5d:b0:67:b8:2b:
                    fa:bd:03:69:5b:b4:8e:ca:69:90:0b:8a:e5:c8:c9:
                    23:b9:51:6b:89:62:e7:f6:7c:50:fe:1f:25:8d:d4:
                    5e:2d:61:a6:d7:ee:fd:d2:08:7d:b9:24:09:08:86:
                    9e:7d:f8:4b:de:f0:67:16:e2:dc:eb:50:6f:27:f6:
                    f8:51:31:ce:35:2b:e6:bc:44:25:04:d9:82:01:1b:
                    83:4e:9b:47:5d:8d:35:d8:5d:e6:7a:cb:e1:12:a3:
                    f8:cb:e8:57:d9:5e:61:1b:1d:ac:e3:5e:ff:82:8a:
                    71:2c:10:29:81:b2:27:85:f3:de:a5:59:fc:e1:2a:
                    b8:27:72:4d:a1:de:9b:a7:86:88:fd:27:8a:a8:a5:
                    f1:8e:21:a7:6a:a0:a0:5a:b5:29:2a:0c:cd:19:ba:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:EF:73:6F:B0:4D:8C:B6:C1:E6:CB:A8:1F:F7:96:9A:A4:0B:99
            X509v3 Authority Key Identifier:
                keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:62:ee:c8:2a:ab:81:2d:d1:f7:cc:e7:aa:06:84:c8:b0:
         3f:75:a8:cf:10:4f:c5:9e:ec:0a:07:8d:8b:b0:e2:46:19:3a:
         80:6f:ae:f4:5d:a6:71:95:04:39:c6:56:bd:51:b0:7f:44:93:
         31:ad:7c:1f:a6:d5:0d:17:a0:55:64:e9:a2:09:74:d5:c4:4d:
         f0:5a:b1:15:77:0d:c9:a6:f3:63:57:dd:4d:11:cc:6e:10:bb:
         61:61:37:61:41:39:7c:ac:c8:8b:2d:05:06:35:f9:95:89:5c:
         a5:8c:3c:4c:88:9b:ce:79:81:7e:ff:7f:68:ad:3b:b8:51:16:
         fa:3e:d3:93:de:c1:96:f6:63:41:b8:ad:7a:01:02:cf:df:cc:
         af:d0:8b:61:97:3c:04:75:34:80:80:4c:03:1a:e3:0d:c9:aa:
         79:c3:14:99:e7:36:cf:16:60:48:a6:81:ca:68:c4:d5:60:cb:
         13:cb:b7:55:f2:65:e3:53:cc:68:e2:95:c9:2e:f8:f9:94:3e:
         7e:29:90:03:22:10:66:39:43:f8:0e:77:d6:c4:5b:e2:d1:06:
         94:52:65:a9:84:a6:e4:6a:1a:5a:0c:54:90:fd:67:1e:5f:0d:
         58:a7:ff:96:5a:fe:3e:4d:90:7a:29:5f:5f:64:ec:34:0b:51:
         b4:34:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:51 2026 by rpki-client