This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File:                     jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier:          prOtY1Ar6x73qzi8i6yxH6T+40vh09e5+sCbT9pGvhc=
Subject key identifier:   C2:D0:99:48:CA:A6:C5:A1:7B:AA:85:46:4A:D0:C0:BA:2C:C8:30:99
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer:       /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial:       019C4210363593CEE52492AB7CD121BA9075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:24 +0000
Files and hashes:         1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: zJb9CP1zCWE9LddB3/deOG1rs+CbvIpY36jErMnT70w=)
                          2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:36:35:93:ce:e5:24:92:ab:7c:d1:21:ba:90:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
        Validity
            Not Before: Feb  9 11:01:24 2026 GMT
            Not After : Feb 10 11:01:24 2026 GMT
        Subject: CN=c2d09948caa6c5a17baa85464ad0c0ba2cc83099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:26:42:96:02:2a:79:c2:a9:35:54:b3:52:67:
                    76:37:cd:88:af:63:08:d7:b2:c4:02:82:87:50:cb:
                    a6:1f:13:2a:7a:2d:22:7f:4b:ff:10:d7:df:13:e7:
                    b3:9c:aa:fe:9b:f7:1a:55:a3:71:a9:91:9c:1d:3e:
                    ea:c9:b6:d3:0c:20:78:e4:db:3c:d0:cd:90:ea:68:
                    01:23:44:4f:55:84:52:e2:8e:04:5b:ba:59:de:fc:
                    46:f9:24:17:14:2e:4f:3f:41:4d:6c:bf:86:b0:73:
                    b3:a8:61:59:58:fe:87:4f:98:74:a6:7f:92:63:60:
                    70:60:82:32:51:36:9b:41:b5:eb:3e:b9:5a:4d:0d:
                    6c:33:66:1d:c7:a1:5a:4b:f7:23:5f:fe:5f:e2:7e:
                    2d:43:d8:29:9a:48:42:38:85:04:09:b8:6e:1c:41:
                    fe:36:1a:88:7a:50:ff:5d:86:4b:c4:73:35:ba:27:
                    53:a7:a5:50:dd:ae:71:7a:6c:f9:1d:b8:23:13:f2:
                    35:e3:df:9b:28:c4:10:ee:91:29:76:91:22:1a:97:
                    ee:1f:39:19:35:4a:68:b1:37:5d:94:77:dd:c1:1f:
                    e8:f1:36:f2:9d:21:e8:14:46:bd:b0:d1:7a:e4:3c:
                    42:58:95:e4:67:d6:0c:43:40:38:33:d0:b3:63:7e:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D0:99:48:CA:A6:C5:A1:7B:AA:85:46:4A:D0:C0:BA:2C:C8:30:99
            X509v3 Authority Key Identifier:
                keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5e:0f:51:28:f8:bb:65:65:47:fe:95:e4:fd:a1:82:e4:75:
         22:7c:a1:d2:80:d6:56:d7:3c:67:c2:71:ff:f8:f9:ae:36:23:
         f9:f5:46:21:e2:d6:0e:b7:03:2d:ab:50:1b:9e:96:e8:ad:d5:
         38:7a:86:74:d6:a2:ed:8a:00:ce:ac:52:ea:d8:b2:66:bd:0b:
         f4:08:be:1c:f3:c3:79:dc:cf:ba:62:c7:eb:4a:44:09:0e:1d:
         bf:21:40:fe:6d:f4:36:ca:d3:fb:4f:05:b1:ad:08:1a:e1:52:
         6e:01:89:f5:ec:c5:e1:16:1b:55:45:61:da:e0:6c:d0:4e:86:
         16:15:bb:92:85:5b:e4:10:6d:78:9c:37:3d:80:c2:e1:f1:09:
         98:84:3d:26:8e:a7:f4:eb:a9:ad:b2:7e:5b:a8:cd:fb:df:64:
         05:15:d2:b7:62:90:63:91:a9:4e:e4:51:c9:48:ee:48:e1:0c:
         fc:78:f6:66:5b:cb:fe:14:96:5e:c5:3e:9e:f7:71:ca:08:a3:
         eb:dc:3b:d1:d4:16:3d:24:5f:6f:0b:e0:91:27:35:65:81:17:
         a5:de:62:db:44:0b:b5:a2:f0:e0:80:45:f6:40:66:07:a4:7e:
         0b:2e:39:53:3c:26:bc:80:14:e4:83:13:b1:9d:7e:8d:0d:e0:
         96:63:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:04 2026 by rpki-client