This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
File:                     jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft (raw, json)
Hash identifier:          fmB8a0tR5h5aAneauXdfWIjrh66XhWPSU9vP+N2W60Q=
Subject key identifier:   E3:3C:3B:4A:01:2A:76:36:17:3F:14:92:B5:3C:F2:24:DE:5B:C3:43
Authority key identifier: 8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64
Certificate issuer:       /CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
Certificate serial:       019C427D82E82DFFDFEF50BFEB2B249861D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
Manifest number:          1E
Signing time:             Mon 09 Feb 2026 13:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:47 +0000
Files and hashes:         1: BW4bwVhXPDw4rzSQMevzcSQRKfs.roa (hash: Q1Pxxz9J0e4LzgZJhmknDWkBzY1nDRnnJuEtnZDIv8I=)
                          2: DC8uPJEFDADbc7eU0WC635sNG_4.roa (hash: l9TwArS14WF8qyEIjsmb3OXqr5AUTtyP0F2ywy5w4vY=)
                          3: jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl (hash: 3fZTTJeGcyDwY4fo+nDq+arSxXKmTGEpueFdVVoVbUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:82:e8:2d:ff:df:ef:50:bf:eb:2b:24:98:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1b5809c6c54c9f1c4e8cb3bec41da02c03d764
        Validity
            Not Before: Feb  9 13:00:47 2026 GMT
            Not After : Feb 10 13:00:47 2026 GMT
        Subject: CN=e33c3b4a012a7636173f1492b53cf224de5bc343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:63:48:c3:5f:f3:7c:d2:98:a5:0e:0d:81:
                    9f:3a:50:57:e4:17:3a:e0:b5:76:33:de:26:77:e1:
                    ca:58:60:4f:3d:af:09:69:2f:de:20:3d:d4:c6:20:
                    27:43:3b:73:c5:9b:26:02:2a:1a:c2:8b:da:6d:a5:
                    de:4a:42:10:7a:78:58:93:1a:72:b9:27:33:60:d7:
                    1c:df:ac:26:0b:09:40:1d:b0:74:3c:07:62:f7:e7:
                    f7:f8:cc:8b:4f:fe:84:c6:75:22:d5:65:45:f3:2a:
                    5b:46:9e:6f:c3:9f:34:ca:1c:a9:68:6d:d3:e2:46:
                    02:6b:29:a8:af:a3:f7:ba:87:73:62:dc:74:27:8c:
                    52:67:f0:0a:5f:fe:f2:eb:cc:45:51:ae:25:29:52:
                    09:c4:c8:bd:a6:80:31:3a:67:bb:42:92:5d:3d:0b:
                    1e:23:33:cf:71:56:3e:f5:77:cf:7e:60:7f:fc:62:
                    97:69:41:d6:2a:53:23:28:5d:ba:ad:52:fc:d4:53:
                    5e:e8:02:bf:5d:95:ef:19:19:04:08:3f:e5:0b:d9:
                    b6:52:0f:b8:86:b2:8e:07:0e:e0:cb:6f:f9:bd:25:
                    5e:71:0b:37:db:c2:cf:a8:6e:7a:18:d5:f1:cf:46:
                    d2:0f:f4:69:8d:14:c8:29:73:28:12:ea:e3:63:fc:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3C:3B:4A:01:2A:76:36:17:3F:14:92:B5:3C:F2:24:DE:5B:C3:43
            X509v3 Authority Key Identifier:
                keyid:8D:1B:58:09:C6:C5:4C:9F:1C:4E:8C:B3:BE:C4:1D:A0:2C:03:D7:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRtYCcbFTJ8cToyzvsQdoCwD12Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fc65d8-d183-4737-af81-734cb2cbb3dd/1/jRtYCcbFTJ8cToyzvsQdoCwD12Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:12:ae:cd:3e:83:ae:fc:5a:0f:20:1e:e1:a1:3b:74:f8:
         ad:f4:27:a8:03:1e:0f:b0:32:6f:4d:ad:4f:af:d1:2a:c3:0f:
         80:4c:ad:2f:85:d2:ff:ba:2e:46:ba:5e:f7:ca:42:e4:b0:43:
         87:6c:5a:d2:5c:74:f3:f2:6e:b9:ff:df:59:9b:99:66:b0:82:
         2a:2e:65:a6:47:54:37:a2:00:b4:8a:05:7d:26:b7:f9:0d:44:
         e8:95:e8:6d:0f:d4:af:32:73:fd:ac:01:a0:90:3c:f3:9e:0f:
         3f:16:5a:a0:dd:c1:6f:d2:4b:5a:9e:76:3a:b1:8d:a1:6b:5c:
         aa:b7:03:d1:4d:43:44:61:03:2f:dd:b2:0e:51:bd:2e:76:81:
         11:09:5a:ee:41:45:57:36:80:00:ec:a2:52:d6:2d:bb:cb:d5:
         90:7a:4f:ee:eb:a5:37:34:82:7a:37:84:f0:c8:62:a0:85:d2:
         fc:4a:2e:b5:ea:7a:55:31:c4:1d:3f:a3:21:74:2c:5e:71:07:
         1b:ee:d2:fd:90:89:6b:94:1e:8b:3f:26:30:38:c6:6d:48:e9:
         95:c2:49:f8:b3:04:04:9b:d1:e1:d7:20:e0:fa:f2:ef:b9:53:
         d4:7e:52:2e:82:aa:dc:74:8e:86:79:cc:72:8e:7d:b5:dc:df:
         d2:b3:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:35 2026 by rpki-client