This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File:                     jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier:          nmLZ/CDe1HZbDS5qbdyYjzRCYRW5HcIlMJeDVIRyPKo=
Subject key identifier:   39:0B:BB:1C:29:2B:22:64:F4:A1:1F:E0:9E:0E:0F:B3:F7:ED:C1:BA
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer:       /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial:       019C21A8DD6E92803F1753B8AA09B6479157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number:          110E
Signing time:             Tue 03 Feb 2026 04:00:40 +0000
Manifest this update:     Tue 03 Feb 2026 04:00:40 +0000
Manifest next update:     Wed 04 Feb 2026 04:00:40 +0000
Files and hashes:         1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: duvHioRwPie8QQLC5GMQ4+AsfeVeVeE7jmQJxOQbocA=)
                          2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
                          3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:a8:dd:6e:92:80:3f:17:53:b8:aa:09:b6:47:91:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
        Validity
            Not Before: Feb  3 04:00:40 2026 GMT
            Not After : Feb  4 04:00:40 2026 GMT
        Subject: CN=390bbb1c292b2264f4a11fe09e0e0fb3f7edc1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:21:d7:a4:38:75:b9:0d:96:cc:3a:cf:80:
                    ee:e2:fc:e9:93:a2:21:f8:c1:00:a2:6b:fc:f9:88:
                    9f:a9:cf:b7:55:92:dd:05:be:58:de:c5:d1:7f:c5:
                    ff:2b:c3:6f:c2:f7:64:a9:29:db:fa:f7:ed:27:25:
                    4a:e1:2c:15:ac:8c:1a:4d:d7:54:a6:62:1b:ae:28:
                    b8:c9:3a:f6:da:c5:c2:08:5d:52:5d:c3:28:12:4b:
                    39:47:8a:1d:46:f4:d1:29:d7:98:81:40:2a:b6:77:
                    0a:30:b9:26:f8:28:12:1e:9f:0b:f3:e4:97:ea:e6:
                    9c:db:b9:1b:3a:ee:93:84:b0:7b:16:23:81:7a:b2:
                    fd:a9:16:c9:12:9d:23:82:63:9b:bc:fe:18:40:a5:
                    43:23:6f:d7:34:c7:7a:23:eb:4c:d0:62:dc:af:a4:
                    5c:57:c8:e5:ee:10:1c:8c:d4:90:cc:67:27:f1:af:
                    df:a2:cd:af:97:1b:ca:e4:92:89:de:d7:a9:5a:78:
                    13:6c:30:64:19:b0:67:27:67:30:6d:0c:1f:2c:1d:
                    f8:70:de:66:9a:67:5f:b2:55:fd:02:fd:32:72:89:
                    7d:c1:62:12:cf:3f:1a:ad:01:f6:1f:2d:59:3d:94:
                    90:50:d8:83:5f:e8:1a:ee:0b:37:08:24:2f:20:2c:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:BB:1C:29:2B:22:64:F4:A1:1F:E0:9E:0E:0F:B3:F7:ED:C1:BA
            X509v3 Authority Key Identifier:
                keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:c4:86:2b:47:0f:b7:39:1c:a3:54:45:ae:cc:77:19:2b:
         66:0c:4d:59:5a:a3:4c:23:f1:69:a5:7e:1e:1c:06:4e:db:a4:
         3d:83:24:18:30:95:d3:c9:60:36:63:c1:4e:b9:4e:e4:da:7f:
         ef:dd:bf:f7:d6:6a:b5:55:8e:7a:49:6e:84:c0:e4:c1:89:01:
         25:f9:2a:a2:6c:0f:d3:e1:59:b5:a1:01:c0:3d:3a:47:8b:23:
         49:b7:7c:78:71:ef:4f:4b:c9:20:85:3b:ff:16:43:fc:d3:1a:
         59:6e:41:ed:27:c3:77:be:50:e4:99:62:b0:97:ca:5c:f4:2e:
         46:b9:95:e8:03:75:fb:3c:cc:19:3f:d3:04:e6:da:cb:bd:39:
         78:00:12:8f:bd:52:f7:09:3b:64:e9:30:50:87:c9:d8:6f:15:
         40:c5:24:b4:8a:04:f6:ce:37:23:c7:1f:7d:5c:e3:d1:c9:f7:
         f9:ce:21:52:1e:08:c2:4b:fc:d3:65:92:dd:ce:62:46:24:b0:
         e6:1c:c9:8d:a7:c4:1f:f0:1a:e8:c2:a3:6b:6a:7e:f1:ef:fa:
         8e:90:66:9a:ae:0b:e7:40:b6:a6:61:07:38:d4:c3:bb:4d:04:
         62:d4:16:b1:c7:fb:43:d2:8d:04:93:49:14:db:d7:27:73:d3:
         fd:66:a5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 07:15:33 2026 by rpki-client