This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File:                     JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier:          Kth21/2dp+fYTJ5BJ/o2gShhyF+fObM/4U9B4S26Ilg=
Subject key identifier:   12:9E:91:38:F0:E3:49:AD:97:52:03:53:ED:9A:C4:20:F8:33:5B:34
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer:       /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial:       019C420FE38EC18E57F769CF1734D7B5D664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number:          136C
Signing time:             Mon 09 Feb 2026 11:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:03 +0000
Files and hashes:         1: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (hash: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M=)
                          2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: lx4ljfFA+6QyURs7GbBGP0kwaVvYChG2vCn6Vqop4Jw=)
                          3: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (hash: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e3:8e:c1:8e:57:f7:69:cf:17:34:d7:b5:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
        Validity
            Not Before: Feb  9 11:01:03 2026 GMT
            Not After : Feb 10 11:01:03 2026 GMT
        Subject: CN=129e9138f0e349ad97520353ed9ac420f8335b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:30:8c:84:9e:88:a9:54:8d:6f:ff:6c:22:
                    b6:37:93:7a:5c:20:1b:fa:b2:1a:99:f9:82:47:38:
                    e4:c5:79:f4:29:bf:73:a5:8b:08:d5:81:71:64:02:
                    6a:3e:96:64:a9:b9:3c:02:92:b8:b0:d9:e6:50:80:
                    9b:16:fd:ba:f4:8e:63:95:9c:35:73:2a:37:92:c6:
                    7b:0f:79:ce:54:79:26:b4:37:24:db:44:68:bf:cb:
                    e3:26:2d:19:32:63:32:01:32:7e:31:6d:80:5f:42:
                    12:c5:22:26:0d:99:86:1b:cb:0e:0d:86:30:f0:bd:
                    2e:4d:24:ed:ae:45:ee:f7:ea:1e:3a:1c:c2:ac:b4:
                    c8:53:12:10:6f:42:33:da:4d:f1:33:8f:9e:2d:28:
                    9c:18:45:21:3e:a9:31:51:15:d7:c3:c5:cc:4a:33:
                    25:b8:78:b3:e2:d7:72:4d:5b:ce:45:a4:6e:9e:38:
                    4e:20:fb:a5:c9:04:9e:e4:20:4d:35:82:ae:55:53:
                    92:64:35:3b:74:d0:bf:5f:7d:4d:2d:28:65:5c:54:
                    32:56:52:7e:fe:2f:01:bb:20:dd:4c:45:03:c0:5a:
                    60:eb:38:68:18:6d:64:23:ac:6d:74:aa:65:83:6e:
                    ef:17:35:2f:75:6d:81:4d:5e:91:9c:a5:85:96:61:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:91:38:F0:E3:49:AD:97:52:03:53:ED:9A:C4:20:F8:33:5B:34
            X509v3 Authority Key Identifier:
                keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:be:53:2b:a0:6d:a1:9d:3e:80:54:1e:ff:61:3b:21:2f:
         6a:05:eb:87:ca:84:9b:7a:be:ec:66:d3:ea:1d:61:db:2c:21:
         72:a6:bf:b2:8a:9e:be:7f:5a:31:20:69:7b:07:36:aa:74:e1:
         e5:19:eb:64:85:1b:70:54:17:87:94:02:d7:e8:d2:e5:4f:65:
         a7:f2:c4:83:a8:37:48:68:aa:d3:42:c3:fd:1c:da:c5:58:0b:
         28:51:28:a4:68:54:a2:14:8f:2e:34:d2:c2:37:d0:87:95:b8:
         4b:ee:f3:6a:53:1d:15:ec:b0:df:19:dc:ee:53:60:24:76:83:
         63:f8:82:62:3f:fd:31:ce:c7:31:a2:91:74:1c:c7:54:d4:b3:
         0d:84:b9:cb:cb:6d:5f:21:05:5b:a5:b0:e2:cb:3e:92:1c:58:
         af:1c:1c:56:84:cd:5c:9a:d3:bc:b4:28:30:98:b8:9d:eb:eb:
         3a:0d:33:57:dd:c5:1b:5f:a3:d3:46:0c:da:c5:43:00:fb:c1:
         f2:fb:29:09:e2:e3:d8:f9:01:97:53:cd:79:4d:0a:69:b5:df:
         9b:6e:b4:76:d1:96:58:1e:7e:51:37:a6:68:5b:ac:0a:2b:0c:
         9e:e7:12:4a:d5:c2:62:b9:00:ac:17:da:69:20:7b:37:25:cc:
         4c:d2:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:25 2026 by rpki-client