This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          JRlSYaItrlX5BLjs7TS53CdxBZO4XoqdzCmJIuunaUc=
Subject key identifier:   A2:FA:9F:DF:95:E6:50:13:88:24:60:30:BE:F0:95:91:40:78:0E:08
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       019C435912547AE9D2BB71BC78B9485FF751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          14B7
Signing time:             Mon 09 Feb 2026 17:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:36 +0000
Files and hashes:         1: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: NU6ofIXw3EhDs7px6xrU+u3ZlWvVtGoqjJ4+9949MRw=)
                          2: qmZ4U9hGV8VSwz5yK7CScI-NPoI.roa (hash: lBrjEmgGCnOGQAjqYMA0OP4JZ/cwhcFHf/zVri7F27g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:12:54:7a:e9:d2:bb:71:bc:78:b9:48:5f:f7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Feb  9 17:00:36 2026 GMT
            Not After : Feb 10 17:00:36 2026 GMT
        Subject: CN=a2fa9fdf95e6501388246030bef0959140780e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:fc:f5:74:62:5a:a8:cd:0e:99:c0:66:5b:
                    ee:f6:82:58:a4:05:24:bd:24:41:95:2b:0f:1c:35:
                    8a:a4:6a:7b:dd:84:95:3f:68:2c:b3:62:5a:a5:b7:
                    bf:48:3f:28:a5:18:a3:69:13:c1:91:76:f5:f7:3e:
                    ce:90:d3:1a:a1:4c:f3:22:9d:d8:93:c7:54:73:a7:
                    70:c1:3d:f8:85:a6:d7:0b:c2:c4:1c:43:63:4c:84:
                    2a:b4:8a:49:bd:ed:72:bf:40:48:0f:17:a9:27:31:
                    e5:f9:ba:6f:c4:22:85:2d:31:66:df:a3:af:aa:ec:
                    15:07:1a:86:77:85:0c:d7:e8:6a:7a:75:e2:c8:4b:
                    9f:0d:3b:10:ff:91:e0:61:a9:12:4c:51:6b:3d:11:
                    97:3c:68:3f:ba:1a:7a:3e:d0:23:cc:45:5a:5f:89:
                    aa:14:31:a0:8c:26:90:bc:ad:ff:b2:a6:5e:4d:2d:
                    fd:0d:1a:d0:24:c3:d1:fe:c5:bd:62:75:56:5f:d4:
                    b8:42:95:47:64:7c:dd:7d:ac:26:a0:42:4c:fa:b6:
                    2d:ad:a7:49:8c:e2:9d:58:ee:1c:39:05:d7:90:62:
                    15:0b:1e:fe:e6:14:d9:e5:75:e8:09:91:6d:49:4a:
                    63:bd:c0:f7:b0:9a:9b:59:70:c9:17:82:bb:97:52:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:9F:DF:95:E6:50:13:88:24:60:30:BE:F0:95:91:40:78:0E:08
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:29:4c:4c:2e:77:0d:4d:df:19:c7:8d:db:e9:1b:43:fc:44:
         19:d2:18:8d:b7:ce:e1:e1:f9:1c:f3:8c:11:b4:f4:44:4f:61:
         de:9d:57:39:5e:f8:e7:0f:d6:46:24:38:a8:8a:6d:46:ea:3a:
         32:3b:5c:1f:32:3d:6e:b4:c5:71:48:b7:15:6f:02:26:0c:1c:
         c8:46:c6:69:39:5f:03:0b:85:0f:b6:2a:4c:47:42:38:38:2b:
         b7:5f:ed:15:13:c4:04:b2:a1:04:03:fc:84:11:e5:38:fb:37:
         30:a4:55:87:ae:f5:92:b4:26:5e:a4:46:a8:c7:d6:02:dc:e5:
         6b:ef:a6:a2:53:c7:ec:5a:3e:df:d9:2f:ce:82:55:c4:de:1e:
         ea:31:fa:3f:e3:b8:23:0d:8a:2b:e9:f3:cd:92:8f:0c:cd:5f:
         5b:0a:bd:b4:4b:7e:ce:e6:9e:3c:50:d6:df:d3:a6:7b:c9:0c:
         cb:fd:28:1d:cc:92:47:34:68:9a:93:b4:e3:16:04:ae:ca:c5:
         e8:97:d6:cc:74:85:71:64:dd:75:b9:97:94:85:0a:06:57:e4:
         f5:0d:6d:3f:6d:0e:2c:58:e4:c2:70:43:51:45:9b:30:8f:d7:
         42:5c:ea:3a:c3:ec:77:fa:a0:c6:9a:28:27:74:a9:f0:54:1d:
         0e:55:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:44 2026 by rpki-client