This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          110aH1nb6P6IxvXQy40SSsfmfbd2PuKKqyK95GeAMbc=
Subject key identifier:   0E:C9:7E:E4:A2:B2:4B:70:80:4D:8C:D0:EC:34:FC:12:E3:C3:6D:74
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       019C41D8FCF5022210BE44BEF6D2862AE629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 10:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:05 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: WEYCYWx5JRTfvos9PhRTUdIQSJy4vtGlKVS+6nQzkxE=)
                          2: waZwL5p70K3eubkjn4rt16lrpmo.roa (hash: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:fc:f5:02:22:10:be:44:be:f6:d2:86:2a:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: Feb  9 10:01:05 2026 GMT
            Not After : Feb 10 10:01:05 2026 GMT
        Subject: CN=0ec97ee4a2b24b70804d8cd0ec34fc12e3c36d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:7d:0b:db:de:92:aa:43:aa:00:2c:8b:27:
                    2e:a4:5c:02:1d:9a:80:8e:cc:bf:94:ec:dc:68:c2:
                    8b:0b:df:5c:6a:25:66:bc:ce:54:cf:25:80:8c:b0:
                    99:3b:64:f2:9d:68:6d:4a:1d:67:b4:59:9f:f8:f4:
                    62:88:0a:03:42:5e:99:88:59:23:fd:92:66:18:3a:
                    55:a7:98:8e:28:eb:78:87:95:de:63:8e:69:62:3e:
                    e6:cf:c5:59:84:52:1a:10:a2:d8:32:29:f1:64:a7:
                    7a:f0:ea:ef:bc:1f:5e:79:58:56:34:ae:d3:31:d2:
                    63:49:3c:a7:7e:f5:e0:4f:28:2d:c4:ce:5a:3d:31:
                    53:42:b7:e4:61:ef:c9:49:f9:a3:a4:f1:d7:3f:e7:
                    0a:9d:be:8f:3b:bf:5d:0e:b9:2d:09:59:4c:5a:e4:
                    ba:06:59:88:a2:93:53:8c:c9:9c:3f:9d:bf:cb:2b:
                    e4:23:12:9a:17:b4:cb:85:fc:86:fb:d0:d7:a2:8b:
                    1a:4b:c1:f2:04:fe:da:0d:65:f1:8f:05:e4:e4:93:
                    53:f0:4a:c5:38:93:cf:bc:39:91:c9:3c:37:f0:04:
                    71:33:d2:d0:2a:8b:ce:aa:28:6f:68:56:db:c6:a1:
                    4b:99:c9:9e:27:1a:26:10:14:59:3e:4e:08:1e:a8:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:7E:E4:A2:B2:4B:70:80:4D:8C:D0:EC:34:FC:12:E3:C3:6D:74
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:1d:b9:61:89:28:78:2d:b0:63:cd:a8:51:bf:9d:79:44:7b:
         7a:cf:c0:c8:af:01:3e:58:c1:0a:59:fd:84:42:9b:f4:e7:ce:
         be:62:be:73:b1:9f:ce:ac:73:d1:6e:58:0a:53:68:40:be:5d:
         76:8f:bf:63:1d:23:b1:a2:65:2b:aa:90:de:b6:6d:f6:f8:af:
         0d:0c:d4:6a:97:c3:92:7f:1a:7f:0d:50:b0:69:fa:14:29:01:
         9d:5a:a6:95:ad:a6:c9:8c:2d:c0:ad:27:70:60:c9:fb:3b:f9:
         bf:f6:bd:8c:8a:f9:96:f2:75:73:c8:e2:c6:69:03:e5:b9:cd:
         99:bd:73:55:42:8c:ec:90:fd:c3:06:83:c8:8d:e6:cc:cf:fa:
         d7:df:de:92:5d:f6:ec:1f:4d:29:8e:c9:72:10:55:a7:06:42:
         c5:29:23:ff:b6:59:e3:cf:c3:b9:6f:bd:9b:87:d5:3a:3b:40:
         8c:83:a7:09:b5:b2:80:66:18:61:6c:9c:20:36:ae:66:72:45:
         d9:f4:67:f7:28:da:9d:6e:34:28:81:17:5b:e0:b5:e6:54:89:
         97:a3:44:56:2a:00:1c:71:4e:be:ad:ca:07:01:c2:97:9e:57:
         35:36:fb:be:4f:0a:b4:08:f7:92:45:57:be:fb:d3:c8:b4:4e:
         d2:5e:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:16 2026 by rpki-client