This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File:                     jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier:          aB1lLE7a2v9PRbGpaTWOPlyZzNIIRbNR4i0n4E2cwLI=
Subject key identifier:   25:17:73:3F:75:ED:69:04:7F:23:AA:3C:9B:62:57:84:82:FE:60:89
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer:       /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial:       019C438FB344C2923352D5B15EB335BFBC30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number:          053D
Signing time:             Mon 09 Feb 2026 18:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:16 +0000
Files and hashes:         1: Np2VeCA0za46WaMwCq5AiCS9fps.roa (hash: lQMOEsMg/PNxQNTWDe3yj7HDtXyMvTPb38KH4IbDlUE=)
                          2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: Ht8QP5SC1kIEcAct7e43WKacY+e1D66yl14Ey2a+fhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b3:44:c2:92:33:52:d5:b1:5e:b3:35:bf:bc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
        Validity
            Not Before: Feb  9 18:00:16 2026 GMT
            Not After : Feb 10 18:00:16 2026 GMT
        Subject: CN=2517733f75ed69047f23aa3c9b62578482fe6089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:e5:87:a3:96:3b:20:7b:74:1a:58:7b:37:
                    b7:2a:7f:eb:f8:f8:84:42:18:66:d3:3d:e9:e6:22:
                    45:5e:a6:62:53:fc:ee:22:e8:84:fe:06:0b:a6:67:
                    27:04:88:1b:69:df:bc:c3:f5:b1:63:a6:63:81:60:
                    c4:6d:38:56:78:ba:ac:70:00:c0:a2:2b:be:52:ef:
                    7a:02:9e:3b:e4:b9:d2:01:cb:41:62:7d:fd:a9:d5:
                    5b:71:0d:b9:18:90:cd:f3:9d:75:b2:64:1d:b2:57:
                    b9:8e:4e:0f:0d:23:78:36:93:18:7b:da:47:31:4b:
                    c2:6b:d4:b3:d5:8d:ac:31:14:a8:38:99:df:30:23:
                    34:d6:95:cc:1b:9a:22:42:80:32:1a:b8:d8:57:4e:
                    44:01:b6:91:23:9e:4c:9a:6d:9b:68:d8:d4:46:94:
                    ec:e6:61:06:69:fe:d6:86:e3:14:0b:74:fb:68:b5:
                    2b:f0:98:67:5a:97:7c:19:50:1d:1f:f9:c2:9d:fb:
                    06:53:5e:5b:22:35:d5:a3:a3:15:3f:47:86:6c:bc:
                    3a:98:c5:75:8b:00:7e:75:df:01:07:59:27:5d:81:
                    34:79:68:b9:2c:e2:dc:81:a8:68:9c:e7:61:34:60:
                    43:4b:f6:d0:e0:8b:38:bf:1a:64:68:09:e5:8c:bc:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:73:3F:75:ED:69:04:7F:23:AA:3C:9B:62:57:84:82:FE:60:89
            X509v3 Authority Key Identifier:
                keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:cd:e4:88:03:d9:ac:26:57:01:42:01:a0:7a:25:54:0a:
         60:69:f3:a4:eb:76:f7:14:a9:79:7b:1a:a7:6f:2d:6e:28:d5:
         b0:7c:12:ee:8e:86:92:06:35:3a:87:a1:fb:9f:4c:49:91:d4:
         a5:35:64:db:c0:40:c5:79:6d:b2:1e:a7:9f:a0:39:27:40:02:
         29:1e:0f:fa:cd:35:1b:1e:6d:68:3f:ae:69:8f:8f:6b:2c:71:
         d5:7c:8b:10:de:54:4c:33:2a:b3:7d:c2:85:1d:cf:d1:bd:e2:
         e6:2e:09:39:4b:a9:af:ea:f4:29:60:56:d9:57:30:9a:ac:2e:
         ce:c2:d2:dc:ee:62:e3:a2:7a:3e:4b:88:6a:4a:39:ff:46:5a:
         9f:e0:e4:cd:1a:e5:a3:7d:08:e8:13:8b:9e:93:98:94:08:f3:
         0e:ef:d2:f5:0d:e8:3f:79:a4:fe:00:53:d7:0b:9c:6c:f5:36:
         0c:cb:c1:e3:53:a5:79:fc:e1:57:4c:df:88:ae:10:8d:24:45:
         d4:32:c9:e6:6b:51:58:14:54:5a:42:b0:01:4a:fc:e8:33:90:
         42:a3:9d:23:c0:31:09:77:c5:7c:10:2b:6c:ab:83:5b:49:63:
         ca:c7:be:13:ae:d6:a6:98:01:3f:78:92:28:79:dd:ea:0f:44:
         7f:8f:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:49 2026 by rpki-client