This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File:                     jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier:          fBrM0vnD715pmLnZSSdaD8YyZuWIePuFK50f2b3srrE=
Subject key identifier:   AA:F4:10:68:27:F0:15:90:28:DB:ED:EB:4A:8C:D0:D5:96:F1:AC:5B
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer:       /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial:       019C427D4BADFE450C411ADDD59E1E1AD41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number:          0B01
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: mha0uhxPsm/wUjP+bCZc+i36yiftgZ+Z7iEJuMX8ugU=)
                          2: zVm1lqtYpLPgcCC6R2FQhhyeTpw.roa (hash: Mr6zA1SBW1abbeTreFoPgkXQSAh5HCSCpxdgGGoFjUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4b:ad:fe:45:0c:41:1a:dd:d5:9e:1e:1a:d4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=aaf4106827f0159028dbedeb4a8cd0d596f1ac5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:a2:59:ad:7e:c6:ac:11:bc:ac:55:22:a0:
                    b5:3c:9c:55:bc:9c:03:d6:ce:88:20:ee:b2:a8:6e:
                    fa:2d:01:bf:b8:b2:51:d7:f7:7a:38:a5:f6:94:f7:
                    b8:5e:92:70:46:b2:08:46:ea:16:4f:1b:57:c5:2e:
                    2f:b0:16:b4:36:d1:62:34:b9:36:3e:71:82:fd:54:
                    f2:d5:ca:40:c7:b6:08:a6:67:19:5e:c5:ad:75:54:
                    7d:af:9c:96:7c:79:13:2c:79:34:5d:49:6c:e8:94:
                    e2:5e:7b:c2:95:f1:0d:dd:18:2e:ed:d3:37:3a:a7:
                    61:3f:c1:a4:e1:62:de:6d:8c:7e:0c:e0:f5:38:f5:
                    6c:14:31:13:21:68:3c:d7:45:48:2f:2d:cf:22:ba:
                    de:e6:64:91:95:b0:b3:57:2a:f8:eb:fa:19:cf:17:
                    bd:1c:af:a3:5e:73:93:69:40:7a:aa:f5:64:7a:63:
                    1d:74:5e:7e:b7:aa:8c:4c:27:7f:6a:22:ee:30:41:
                    3c:1e:3f:1d:76:ae:12:f7:23:86:1d:4d:12:2b:94:
                    51:23:cc:f1:5b:32:89:28:54:5b:ee:68:09:f0:67:
                    ca:62:43:5e:ab:b7:6d:04:ea:97:22:77:7c:c9:10:
                    0e:13:b0:fd:a6:bb:d6:fd:0a:dd:9b:df:1c:da:76:
                    01:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:10:68:27:F0:15:90:28:DB:ED:EB:4A:8C:D0:D5:96:F1:AC:5B
            X509v3 Authority Key Identifier:
                keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8d:3f:96:b4:6a:69:b7:8d:f6:26:81:35:2f:2a:d3:ca:a3:
         ac:28:1c:09:0c:af:c0:e4:d1:bf:66:4b:e5:ca:d4:f9:03:79:
         71:c9:13:93:20:50:d4:64:b8:5a:46:92:1e:ac:47:74:86:7d:
         c3:9a:4a:a9:b6:26:8b:5b:c7:04:5e:3f:99:e1:43:2b:8c:5e:
         4c:c9:1f:60:34:9b:18:d5:12:d0:b2:cc:fd:ca:b5:e1:25:8d:
         f8:2e:a5:6b:41:a3:06:00:56:cc:f7:ab:71:44:2f:2a:2f:02:
         a6:18:3b:4c:8a:99:ee:99:14:de:cb:1d:83:a0:6a:8c:7e:e9:
         b0:a5:44:bb:13:cd:21:80:fd:6d:ed:eb:bb:6a:43:6e:c6:be:
         03:56:e9:db:d4:be:10:f3:1e:ba:97:7e:a1:ba:e8:df:c3:08:
         e1:d5:4f:88:5b:64:14:9c:81:ee:cd:a9:83:b4:7a:69:00:af:
         9f:4e:eb:b6:2c:5f:e1:e5:8d:69:33:93:18:e0:bd:34:74:73:
         09:15:c4:48:27:53:fe:df:45:af:4d:2d:49:2e:6a:8c:85:63:
         af:50:f8:0a:cf:24:f5:18:26:bc:2f:6d:b7:9b:f9:64:a0:71:
         7f:42:a6:db:47:f3:03:6f:18:aa:36:31:63:0c:07:db:77:00:
         83:d0:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:23 2026 by rpki-client