This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File:                     JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier:          LE8/wI0J2hb5iCA1y2RSwZcweViUpKSWYIgLp9HJoJk=
Subject key identifier:   0A:31:18:16:BB:9D:37:8E:5F:E8:29:40:4C:47:03:6B:8D:65:D8:77
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer:       /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial:       019C42EB416228E83555562B6ED80B884EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number:          16E5
Signing time:             Mon 09 Feb 2026 15:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:39 +0000
Files and hashes:         1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: 3HqvRvFeqIN1Y4ELssLVnc+7PrWTP1+00RspGkVJVII=)
                          2: KsLpYaplYWekI62QRi3E0G61Ms4.roa (hash: PFuTGnOnXeAK/sML2FBSdaIxc5MVu6TA5GmDr9dlzjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:41:62:28:e8:35:55:56:2b:6e:d8:0b:88:4e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
        Validity
            Not Before: Feb  9 15:00:39 2026 GMT
            Not After : Feb 10 15:00:39 2026 GMT
        Subject: CN=0a311816bb9d378e5fe829404c47036b8d65d877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:bd:3f:82:c0:02:41:02:bb:52:59:9b:f2:
                    91:7a:ce:51:12:2c:51:9b:41:4c:09:0b:91:1d:69:
                    b2:72:d6:42:db:ec:d8:07:12:34:87:3c:b3:59:1e:
                    b0:31:37:c7:c9:02:d3:fe:5b:db:ae:62:19:c9:58:
                    a9:9e:1a:63:7b:c2:55:6d:af:60:b6:08:d7:38:e5:
                    c3:33:16:e7:90:0d:a2:f7:e3:4d:0c:8a:b3:82:9e:
                    ca:a0:f1:e3:d1:48:60:3d:ce:0e:95:f5:8a:29:b0:
                    75:0b:8b:97:20:f8:c5:e6:9c:20:5b:02:2f:23:c8:
                    2b:a9:31:13:ef:e2:09:8d:d8:18:5a:ec:62:ec:20:
                    ef:2e:b7:d1:f3:4a:e2:e5:b9:a4:c5:56:a7:e1:18:
                    46:22:a0:ae:f4:ef:0a:92:ea:0f:fc:c3:85:13:63:
                    b3:5c:eb:08:ce:58:ee:2d:9f:f0:ad:0f:a3:fc:27:
                    44:d8:5d:65:fa:9c:d9:82:dc:f6:8e:08:cd:36:4b:
                    a5:d5:59:b6:a0:95:56:9b:3f:23:7e:7b:c5:3d:fb:
                    c8:ad:1a:cc:05:98:5d:9d:31:28:19:5a:1e:80:e1:
                    34:29:59:0f:67:7f:5c:a0:da:9a:84:eb:87:7a:95:
                    3b:ba:30:4a:3e:6a:c7:66:f9:e6:64:75:d9:a3:1a:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:31:18:16:BB:9D:37:8E:5F:E8:29:40:4C:47:03:6B:8D:65:D8:77
            X509v3 Authority Key Identifier:
                keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:e5:d4:2a:01:d0:31:e5:16:b2:ef:e7:c4:19:df:36:01:
         6e:46:4c:52:8a:74:a9:48:8e:4e:73:31:af:54:5f:e9:43:ba:
         2f:d3:cd:5c:dc:88:95:45:52:ee:8e:3b:0a:63:5b:14:53:5f:
         50:76:e9:74:9b:73:0e:ff:1f:47:35:f1:97:8d:a3:73:c0:10:
         c9:2c:f5:38:b8:bb:3f:0b:ec:dc:1f:c3:61:a6:cc:78:33:69:
         9d:f6:ae:34:d8:87:c4:60:6a:a8:04:14:ad:43:5b:14:c7:35:
         c6:2d:00:d5:67:b7:55:a2:37:1d:da:dc:5e:90:34:07:c2:74:
         8b:09:09:cb:7d:bd:2f:f1:aa:a2:bc:f9:80:71:a6:36:62:a5:
         61:9b:9d:d0:de:38:47:8e:fd:b8:e7:68:62:25:06:c8:fe:0d:
         4c:b7:e4:96:de:3e:d3:9d:da:44:16:4d:e8:e1:70:35:49:20:
         4d:3c:c1:47:70:52:7c:59:bf:14:2f:ae:e5:27:b2:20:a2:37:
         01:3b:0f:c6:16:17:48:a2:8d:9a:11:80:d7:76:74:b9:a1:45:
         e4:1b:3e:32:ec:4d:5d:c8:75:cf:7b:30:b7:56:2f:45:f1:28:
         71:1d:ba:66:df:da:0d:13:9b:27:ff:e3:7d:28:c2:a3:1a:79:
         c5:77:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:26 2026 by rpki-client