This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          +osmJbaTRyPWW/wAtts0FeGkg8Momj3h+RjHUUSmTk4=
Subject key identifier:   B1:49:68:E6:E4:C3:26:0B:A9:96:FC:6D:BE:4E:85:9D:47:97:40:0C
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       019BF42BD1173C6CA340E0A251F76A4BA443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          0B7F
Signing time:             Sun 25 Jan 2026 08:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:10 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: ms/qtw0DUjlO7O7/BZTiOjJv13WnMiSoDMsnmvJ3V18=)
                          2: yvh8j0ru32STHkWQnm2Nc1JWsT8.roa (hash: FISLrTpMa+KbZhejkAGsnxJPhn0mOMJzBiWHhlwWO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:d1:17:3c:6c:a3:40:e0:a2:51:f7:6a:4b:a4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Jan 25 08:01:10 2026 GMT
            Not After : Jan 26 08:01:10 2026 GMT
        Subject: CN=b14968e6e4c3260ba996fc6dbe4e859d4797400c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:ba:bb:c2:37:6c:ca:ad:61:00:6b:7b:11:
                    73:a3:58:ed:22:5b:f3:62:23:e0:9a:e3:94:95:0e:
                    7f:18:c9:a7:65:f0:39:99:c5:58:23:bd:20:78:91:
                    30:90:cd:08:74:d5:ad:78:dc:aa:22:53:f7:47:dc:
                    cd:2a:2b:77:49:74:6d:eb:10:69:17:e0:eb:5f:65:
                    51:2d:90:db:f3:3e:4b:c1:9f:12:dc:9d:c3:b1:bd:
                    5f:13:26:43:0b:eb:3b:4b:b7:30:ab:58:75:e8:4f:
                    12:63:6e:52:15:eb:e1:9e:6f:6a:3f:db:5f:62:7d:
                    1f:b6:5f:bb:02:fa:a2:13:53:6a:d3:4b:9d:02:8d:
                    fa:85:2c:05:54:a5:2a:d0:64:4b:02:6e:8b:44:10:
                    8f:ea:97:dc:4c:fc:83:10:e3:9a:9f:f1:5e:f5:cd:
                    22:de:16:36:4f:1c:f9:09:fa:ae:6a:ec:b2:65:1d:
                    a9:ea:c4:ad:99:83:70:a7:77:d8:e8:e6:99:97:e7:
                    1c:6d:06:05:72:e4:87:9b:2c:5f:12:36:21:8c:72:
                    4b:39:e9:02:20:96:61:0f:0a:e7:fb:83:7e:15:b8:
                    27:39:11:ac:cb:f8:40:51:ea:3f:95:e6:a8:57:d8:
                    22:6f:a8:b5:14:22:e0:4e:76:a4:f4:ff:f4:5e:57:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:68:E6:E4:C3:26:0B:A9:96:FC:6D:BE:4E:85:9D:47:97:40:0C
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:a8:dc:3d:37:a1:cb:67:8e:ce:f0:08:13:05:62:81:f3:
         fc:a2:98:1e:5b:79:3e:01:7d:90:bd:45:f4:dc:95:97:fd:9e:
         81:df:8f:db:09:b5:ed:f7:20:6d:fc:df:b7:78:69:86:3c:53:
         1e:60:21:38:cc:ac:08:41:cd:59:10:17:b3:8b:1b:5f:45:17:
         63:0e:00:9b:d5:e6:47:97:d9:6b:15:d7:f3:5b:54:9f:2b:73:
         69:6e:a2:db:37:f0:47:6a:e6:72:6c:ab:b6:7e:ff:14:08:85:
         e6:15:7b:41:40:45:57:12:f8:13:1e:e3:ed:48:7e:c0:89:68:
         22:c0:b3:0e:24:c1:8a:1f:77:43:67:77:72:b6:23:96:e7:bb:
         ae:5c:7e:da:f4:d3:c5:55:42:e9:a4:18:00:43:97:4b:65:b6:
         04:7e:df:b4:e4:86:e0:56:b1:1c:1a:cb:df:c8:3b:0c:ac:99:
         d0:8a:17:5d:38:f1:12:e9:fc:8e:41:0f:cd:14:96:5b:fb:13:
         b3:bf:f6:9a:dd:f6:80:68:b7:3a:b6:83:43:7f:89:36:40:b0:
         14:67:b0:8c:1d:ed:c0:ac:27:02:67:0f:cb:19:1b:3f:a5:61:
         f7:f6:21:38:61:74:de:2f:c2:1d:95:7c:f2:30:8d:79:29:e1:
         f0:b4:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:37 2026 by rpki-client