This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          32eJwnUPfXmDYnUc9OrVrZxUhVI93bx9Dmkbu3FLn6Y=
Subject key identifier:   E9:74:99:29:A4:FC:A4:F5:14:96:34:97:1F:F0:17:45:D5:9B:94:53
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       019C41A15A4471A9A3710062B3F2EAB562A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 09:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:19 +0000
Files and hashes:         1: 3L4WcN7gzhBNpVVNiXU_dlpvE-U.roa (hash: fWfFsGbI8ZEJSeb49tnQpRdHMLtKv9wl/8H4rcMy248=)
                          2: OLnzxAlUC3QhNrKWLOgcy2U30To.roa (hash: lX5neqnKug6Y4cQTPSta0w75qmPdh3MW8Tx/neXnEbc=)
                          3: XjQJl2a4wVJ5vbGz2VtG7fUNbWk.roa (hash: T4dfrQILAEkH/eyRrkFYsCcye4GAdljvbKUoaz/5NDg=)
                          4: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: JzPVkLJI1syk+4DFnjSLVTrB4UUxgye/U9SlcJL6GU0=)
                          5: nFEK6z-jx-S0HOWYHzz-ynE7Bmc.roa (hash: SlfRBt8iF6tZBTeqrGVg/w4P8tgE7MMFKcNAFRdvA84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:5a:44:71:a9:a3:71:00:62:b3:f2:ea:b5:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Feb  9 09:00:19 2026 GMT
            Not After : Feb 10 09:00:19 2026 GMT
        Subject: CN=e9749929a4fca4f5149634971ff01745d59b9453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:0a:18:e8:40:83:83:e2:95:ba:2f:8c:ba:
                    6e:73:c6:86:2f:03:d9:e2:ec:da:c7:0e:aa:ef:7d:
                    22:5e:9f:f9:40:4a:2b:e0:72:01:6e:e8:c1:47:55:
                    d0:e5:c9:53:33:53:26:aa:be:f2:fa:e1:c3:b6:bd:
                    0e:f2:e6:2d:16:43:80:38:c8:3d:6e:2d:02:63:78:
                    dc:b1:55:d9:35:a7:b3:17:bf:6b:e2:ea:8b:1c:38:
                    40:17:5c:b8:65:ac:83:e9:a6:c1:59:7b:da:27:20:
                    cd:81:28:d2:f2:f7:6f:e8:10:32:43:db:86:6a:24:
                    ed:c2:2d:14:10:f8:10:40:08:c5:c3:73:3f:b0:9c:
                    9d:2b:a7:0d:7a:43:09:7d:1a:c1:89:ef:bf:d8:a9:
                    97:c7:18:48:c7:9a:6d:35:b7:bb:54:71:44:fa:e5:
                    1b:d9:b2:72:be:83:fd:a9:e6:25:d8:df:c7:ff:f9:
                    af:d9:04:b9:40:41:8e:15:5d:f7:44:a2:7a:30:c3:
                    ba:1a:81:de:a8:29:10:72:24:b4:4f:2c:d1:77:69:
                    47:5d:aa:ef:b7:57:3a:0a:80:50:bc:ac:3f:42:1e:
                    00:c3:42:74:c1:ce:f3:6f:03:00:f8:07:62:c3:de:
                    58:41:5e:f3:d0:86:e1:a8:ab:ef:1a:95:6f:94:07:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:99:29:A4:FC:A4:F5:14:96:34:97:1F:F0:17:45:D5:9B:94:53
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:14:8f:bf:36:de:65:ab:42:a9:0f:96:d5:b7:ac:a4:99:
         b9:71:0c:8e:c5:c6:dc:3e:59:43:18:e8:f2:98:75:60:84:04:
         b0:69:17:30:f6:b9:84:d4:de:63:f3:49:90:98:16:c1:f9:87:
         eb:7d:33:c1:0f:12:6e:b0:a9:8e:ea:06:9c:8d:73:d5:3e:8c:
         72:6b:2c:9a:f1:8c:d9:a1:75:d2:dc:3b:84:b2:bf:53:14:9f:
         f3:39:4b:cc:d3:54:2d:be:3e:1f:1e:33:5f:02:17:6d:93:9d:
         d9:f6:1e:21:0c:26:fb:b0:b0:1e:77:e1:1b:48:15:eb:fe:f7:
         ba:30:8b:08:67:7f:b8:54:d7:0f:7d:a3:ab:de:54:2c:6c:7c:
         44:b7:eb:c2:5c:b1:0a:8d:33:01:c3:b7:57:af:25:75:ef:d4:
         11:29:b2:1b:1e:ef:8f:15:aa:f5:40:82:66:dc:9e:99:d9:71:
         84:ec:d3:50:79:b0:b0:72:61:39:d1:6a:ed:0c:69:33:23:3d:
         82:48:28:bd:65:5d:4c:01:2e:4e:ea:fb:07:24:90:87:29:03:
         44:5e:42:f8:25:94:ec:9c:b4:53:de:2b:a2:65:fb:fe:7c:1e:
         22:77:53:fb:03:ba:f1:30:ec:5d:63:ba:fe:e5:63:64:09:b5:
         6f:51:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:32 2026 by rpki-client