This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File:                     S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier:          8utU3MUoQfD3VCKplFkooaQZujRn3pHgBqthSfkCfMI=
Subject key identifier:   2B:BC:F7:2D:46:E9:46:9C:75:83:6D:F1:6D:B5:86:14:92:87:13:56
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer:       /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial:       019C44DA2B733938B8B016A224DA27E52020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number:          0556
Signing time:             Tue 10 Feb 2026 00:01:14 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:14 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:14 +0000
Files and hashes:         1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
                          2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: 5v6dYnZOLcl0hw6zRnCiV7NPgbDXLscWIZqrNBVQU6E=)
                          3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:2b:73:39:38:b8:b0:16:a2:24:da:27:e5:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
        Validity
            Not Before: Feb 10 00:01:14 2026 GMT
            Not After : Feb 11 00:01:14 2026 GMT
        Subject: CN=2bbcf72d46e9469c75836df16db5861492871356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:ef:70:8b:5c:1e:f3:60:a4:52:a3:1c:e2:
                    c8:9a:30:ed:29:fe:e0:d1:f7:4b:72:4c:19:b0:74:
                    30:f2:21:47:10:48:5f:b3:32:0d:5c:2d:6e:13:20:
                    1f:11:6a:6d:b6:2c:f3:a1:8f:19:cc:60:28:fc:5e:
                    21:e4:7f:1d:24:51:91:ef:ed:a6:ff:be:90:b8:57:
                    46:09:99:71:a5:b5:fb:23:13:77:fa:ec:a1:4b:1a:
                    0d:6f:d5:7a:d5:d3:53:3d:80:35:52:e7:6e:3d:56:
                    a0:39:b8:e5:ca:8b:68:e3:98:5e:dc:cd:d6:6b:18:
                    68:17:d3:e6:0d:3a:92:55:22:3c:a9:83:19:67:8f:
                    09:ab:75:70:c8:30:32:68:12:d9:65:a1:36:73:72:
                    a7:50:7f:28:72:b0:fb:92:72:64:a4:76:76:84:1d:
                    02:0a:96:89:a0:6c:11:66:56:3f:87:3a:07:d9:a6:
                    3e:7d:11:37:99:a7:5e:c8:ed:7e:3e:f2:fd:27:66:
                    f7:79:53:d6:15:27:5c:c0:15:78:c9:60:29:29:fa:
                    3c:33:af:b2:49:86:c9:a9:a2:65:55:18:01:68:0b:
                    e9:f6:03:ab:d2:b2:54:f9:45:45:9d:39:7f:bd:5e:
                    03:c8:e8:4b:7b:f1:c0:6a:cb:df:3c:82:e7:9b:08:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BC:F7:2D:46:E9:46:9C:75:83:6D:F1:6D:B5:86:14:92:87:13:56
            X509v3 Authority Key Identifier:
                keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:f2:90:01:67:d7:e3:82:c5:29:46:6b:f1:77:bf:37:d1:
         14:c4:33:ad:22:71:76:ea:33:a2:12:bd:5c:dc:84:b1:d5:fa:
         41:ee:b8:0c:e2:06:20:6f:cb:98:5e:24:1b:11:12:03:53:ef:
         67:fd:74:5a:33:0f:42:de:fe:52:55:6b:97:1e:b8:82:d5:36:
         b6:bd:ea:92:74:bd:63:0c:35:ae:b5:3f:31:52:d3:e8:24:59:
         5b:ea:41:fd:5d:cd:21:47:60:88:35:8e:36:4f:27:a3:70:6b:
         a2:cb:fe:5c:10:76:9b:e0:b6:6d:23:ef:9e:79:9c:91:89:4d:
         03:ca:e8:7e:8c:f4:c3:f0:da:24:89:d7:30:94:ee:74:98:e6:
         d2:10:f6:58:4b:88:66:70:ab:ad:bf:98:78:2f:d7:4a:c2:91:
         2d:ed:8f:66:6e:55:3a:7d:95:f7:8e:be:65:11:da:82:11:e4:
         84:e4:bf:5e:9f:2e:29:e3:97:67:df:6e:b6:15:fd:6b:a0:3c:
         24:54:88:5b:95:2f:2f:22:89:93:16:56:34:0a:89:3e:ad:5f:
         4b:85:61:c3:bc:4a:42:b5:04:e9:22:b9:b6:fd:dc:3a:ae:bc:
         6d:b4:9c:d8:05:ff:d4:82:e1:e2:12:fc:c1:e0:2f:b6:6e:33:
         d1:ab:db:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:08 2026 by rpki-client