This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          InJhqkMxfwJK/8YOuLwyKnuYktoYahnZ1eZmOLFUh0A=
Subject key identifier:   BB:60:16:F3:CE:B6:33:D5:DF:BD:21:F2:04:28:73:7A:94:49:1F:4C
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019C446BA19DBB8C08929193F1157B72F6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 22:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:30 +0000
Files and hashes:         1: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: AwNOnVAKJ8SgAAesJRjDAiQzLMpDRCUB5r49h60IYAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:a1:9d:bb:8c:08:92:91:93:f1:15:7b:72:f6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Feb  9 22:00:30 2026 GMT
            Not After : Feb 10 22:00:30 2026 GMT
        Subject: CN=bb6016f3ceb633d5dfbd21f20428737a94491f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:88:3e:7c:9b:9e:c1:db:d1:7d:04:77:8f:
                    52:1a:ff:22:c5:87:84:84:61:3a:03:58:5c:a8:b3:
                    af:df:7c:10:7d:c6:1d:47:7a:82:24:85:41:fb:a2:
                    dd:0d:8f:27:66:96:c8:3f:07:fa:81:0f:9f:5e:76:
                    25:6f:e8:c3:2f:66:ec:13:db:14:4d:8b:0f:6f:b1:
                    4e:07:95:e1:83:26:1d:23:f2:ea:21:3f:59:14:44:
                    cb:f5:89:89:ba:93:13:e1:59:6e:d4:64:dd:8e:83:
                    79:88:06:77:17:d6:56:20:29:d3:99:a8:9d:94:65:
                    c9:3c:8f:e4:c0:da:31:0c:a2:20:fb:9b:50:66:cc:
                    74:66:77:00:3d:69:23:35:6f:b8:e7:d0:bd:ff:04:
                    86:08:f9:de:10:dd:5f:15:78:ca:8f:dc:31:07:89:
                    46:58:1a:3f:cf:07:6b:18:6a:f0:b0:58:a3:a3:e9:
                    20:73:fb:59:e3:04:9b:76:91:ae:17:29:fe:dc:bd:
                    51:89:e0:bf:b4:ff:62:41:0d:dc:63:08:2c:31:ca:
                    2a:71:81:a5:c1:c3:ec:a6:e5:3a:fc:4b:ed:f3:54:
                    73:b5:2d:6c:6d:1b:c0:e8:7a:d5:86:ce:d1:c6:86:
                    f2:f4:68:6d:67:57:5f:93:64:3d:fd:20:28:94:dc:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:16:F3:CE:B6:33:D5:DF:BD:21:F2:04:28:73:7A:94:49:1F:4C
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:c0:47:3c:ae:35:0f:41:9e:ed:8e:74:ea:4f:b8:14:97:
         5a:b0:43:da:d5:46:f2:30:2f:64:e4:63:97:c2:e4:18:c2:63:
         42:12:3d:ec:95:af:f4:02:c0:3b:f8:8a:86:ec:bc:91:07:96:
         d1:65:b9:9e:18:97:93:6f:d8:b5:50:db:5a:b7:fe:17:b0:c6:
         6c:f8:fb:49:7e:c6:d4:53:25:52:6d:f7:9b:3e:28:6d:56:00:
         c2:e9:80:74:7f:fe:55:37:7c:d5:2a:d7:76:45:70:ca:d6:0f:
         5b:9e:98:d2:58:b7:5e:29:c2:72:04:ee:87:75:1b:81:21:3f:
         da:20:8f:3f:9a:55:5a:d3:2a:3a:b7:a9:c1:f1:14:93:23:99:
         b2:e8:28:de:df:76:bc:37:c0:c2:78:47:78:81:a3:40:ed:e2:
         ee:a7:10:85:0d:d1:38:8a:44:3d:a1:a0:32:cc:88:50:0f:b0:
         4d:63:33:3c:7c:bc:55:7b:7f:5b:3b:4f:05:40:0c:ec:9b:28:
         78:0c:34:27:3e:0d:7b:92:f0:46:96:8d:44:28:40:a1:2b:6b:
         01:30:ca:13:bd:b7:06:4d:3d:47:a4:c8:3f:d0:ad:c2:98:ab:
         6a:15:40:22:40:52:51:0d:37:45:99:86:b2:4e:1f:8f:e6:a0:
         e4:71:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:48 2026 by rpki-client