This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File:                     jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier:          yTtgCOgjkbIFBLzvlrg1R/2B8WfvCGhoISd2abj6q3Y=
Subject key identifier:   B8:48:3B:A5:C8:4F:15:7B:03:C6:8B:5B:7F:9B:74:48:C0:2E:2E:D3
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer:       /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial:       019C427D85CCA73946007B96FC5C419E5FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number:          0934
Signing time:             Mon 09 Feb 2026 13:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:48 +0000
Files and hashes:         1: GDYQT_SfN5tMHZpuub3a8jDMqOU.roa (hash: H7jT70GlU7Stcvy2ABi9zYCoyueoBEvW2I5oAX+8wHc=)
                          2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: kxYm/dhhIcmymQ1gMNfWHE007Vo7Qbq1EGrCpMkzNLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:85:cc:a7:39:46:00:7b:96:fc:5c:41:9e:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
        Validity
            Not Before: Feb  9 13:00:48 2026 GMT
            Not After : Feb 10 13:00:48 2026 GMT
        Subject: CN=b8483ba5c84f157b03c68b5b7f9b7448c02e2ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:94:1a:8a:3e:f8:58:08:1a:f6:eb:df:eb:
                    25:8a:ae:68:b1:22:33:57:43:f0:4d:56:ca:fd:e8:
                    41:cf:1d:b8:19:57:36:00:4d:97:a0:30:2b:ee:9e:
                    ac:b8:a1:38:20:52:be:03:3d:f1:e0:4e:f5:7d:0d:
                    85:5d:64:b5:20:be:12:3a:fc:e4:d6:81:e0:3c:28:
                    19:2e:aa:d8:92:22:0e:1e:3a:30:39:a4:13:61:4e:
                    4f:60:a7:d5:7b:eb:da:d0:e1:38:43:48:78:93:d6:
                    88:94:30:8d:fc:1e:8b:c8:dc:e5:f7:a4:36:2c:f4:
                    e1:38:d8:1f:88:7e:f7:57:2e:b0:04:ae:12:dc:2a:
                    1a:62:10:39:aa:6c:36:b5:cd:5f:cb:ef:95:69:df:
                    da:32:de:ba:b9:cc:f8:00:7d:ba:6c:48:44:3a:fb:
                    b1:64:9d:da:ad:55:eb:26:c5:48:16:b9:4d:bc:87:
                    32:cd:4e:8b:4a:ba:65:c8:2b:f0:af:d8:3e:d5:e2:
                    0d:0e:2d:e5:ec:e5:10:33:53:ff:24:40:4a:60:16:
                    88:c1:ff:4c:86:fa:28:37:ab:67:17:c6:de:ac:28:
                    bb:54:e2:8f:50:c3:17:ab:e8:20:86:f1:89:29:27:
                    02:c2:38:b1:30:96:05:c9:4e:e0:8e:d6:4a:2b:fe:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:48:3B:A5:C8:4F:15:7B:03:C6:8B:5B:7F:9B:74:48:C0:2E:2E:D3
            X509v3 Authority Key Identifier:
                keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7e:1b:8b:41:d0:ee:ab:4c:bb:77:a6:61:b3:da:a0:48:e4:
         9c:ae:87:5c:b6:d3:ff:43:1f:29:66:62:34:f3:d7:fd:97:e2:
         00:70:ed:f5:e7:47:21:2c:29:1d:43:04:a2:df:e9:ba:52:e2:
         dd:65:42:68:18:dd:33:7f:e2:05:d3:95:7c:75:59:92:bd:64:
         5c:4b:2a:4a:45:da:71:df:97:84:b7:13:f3:30:c3:4a:ef:5a:
         57:e0:16:57:6b:8d:4c:83:90:b6:1a:b2:bb:0c:54:58:bb:7a:
         c7:23:f3:d9:7b:39:ba:36:3d:35:d7:3d:07:d0:40:bb:3b:52:
         01:bd:4a:12:6b:94:84:47:7e:bd:c3:18:d0:79:b4:dc:97:21:
         60:ea:2f:93:de:a4:07:c2:2c:7d:69:fb:07:db:b0:dd:df:d8:
         12:15:b0:d7:21:91:03:e9:44:fd:da:f9:7e:db:b9:ee:92:38:
         52:38:39:14:ba:5f:03:de:91:ec:d7:0b:e7:c8:a1:c3:40:2f:
         3c:84:2e:ee:2e:38:c9:5f:69:bf:bb:37:d0:97:55:81:53:aa:
         3f:a2:f6:fd:30:94:d0:32:ad:74:38:3a:9e:dc:dc:5e:b9:22:
         0b:96:2e:d5:22:21:44:3e:15:20:39:82:24:d8:02:1d:7b:ff:
         58:fd:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:13 2026 by rpki-client