This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File:                     jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier:          hZVT9oJBJZOxE+mj65UgtVvhVKp5sLm55MnkWZunLLI=
Subject key identifier:   5E:6A:D9:D6:A6:66:CD:A9:60:BD:CD:44:AF:17:C7:B8:F5:AB:F1:E0
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer:       /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial:       019C43FE8B0D4B8E3E4CDB44BA8FDF7EE755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number:          04BC
Signing time:             Mon 09 Feb 2026 20:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:21 +0000
Files and hashes:         1: Lm0YXMaLWclKoRURyg7-1BSKMMM.roa (hash: lcsnHzqJgV0Pr0+CJVRqQvA5eNcE3/rEZUnHTRT4+/4=)
                          2: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: /fsoSHt468kYOgkIuOKwxzOecBIy2I5fe6YWAPWnYWQ=)
                          3: s_i-4HgM08ZomafIARg5DCNgTzI.roa (hash: wSP0h+XQV0/zt4QIiT80nzFtCCr+jVfJzFx1wPlXOiY=)
                          4: uXDu77cxLGO111ouG3WizVkTwpM.roa (hash: jqcMrYd4GN+J0MgnqBXSyT/iy1d2bJSyGgMM3hAUiNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:8b:0d:4b:8e:3e:4c:db:44:ba:8f:df:7e:e7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
        Validity
            Not Before: Feb  9 20:01:21 2026 GMT
            Not After : Feb 10 20:01:21 2026 GMT
        Subject: CN=5e6ad9d6a666cda960bdcd44af17c7b8f5abf1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:63:8f:c6:a9:4f:64:73:b8:f8:ab:ae:47:
                    e9:5c:ca:2b:5e:7d:d6:e6:0f:bc:c4:f7:16:7c:d3:
                    2f:04:50:88:04:69:01:78:c0:e9:ec:46:f5:8f:8d:
                    0d:6f:76:9f:5e:a2:06:4d:4e:de:c1:94:c1:93:25:
                    04:01:df:6a:af:b6:76:98:34:05:ae:7a:6f:87:5d:
                    78:8e:f5:fb:a7:ea:71:f7:c0:40:ab:97:a1:60:c2:
                    ea:06:00:98:0a:0c:38:58:e1:ee:e4:b4:47:81:86:
                    74:3e:c8:c6:7c:f5:b3:67:c3:56:30:7c:cd:1d:dd:
                    97:96:9b:9c:75:99:f2:14:42:2e:71:a0:76:f4:fd:
                    94:d8:50:91:c9:b2:4c:8d:53:c3:7c:31:fc:2f:70:
                    28:9d:f5:6d:f0:7b:e4:45:60:27:7d:37:e4:65:1f:
                    05:7d:f5:29:aa:e1:30:51:d7:ce:94:c4:48:fc:a7:
                    74:4b:03:8b:02:4f:51:27:da:d9:37:1e:a3:45:8d:
                    a6:94:89:66:9a:a1:d2:32:79:be:60:91:8c:b7:7a:
                    d2:9a:ed:1a:c0:af:0e:3e:e0:8e:9a:99:9a:ea:96:
                    ae:cf:7f:f4:e4:37:e3:59:e1:a3:f7:81:52:4d:fc:
                    68:47:04:ab:b6:4d:d5:2d:33:f7:82:a1:d7:d0:4a:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:D9:D6:A6:66:CD:A9:60:BD:CD:44:AF:17:C7:B8:F5:AB:F1:E0
            X509v3 Authority Key Identifier:
                keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:78:a0:97:7a:b7:f5:13:12:d5:66:71:45:85:b4:c5:7f:18:
         37:a1:56:a3:1d:5b:3a:dd:31:96:7a:2c:24:67:61:2f:4b:6f:
         f7:80:ad:91:69:65:b2:3e:3a:bc:03:c6:10:24:74:ab:fb:c0:
         f8:45:6d:49:95:55:05:7f:cf:24:6d:70:5c:46:98:6c:61:4b:
         17:de:4e:6e:a5:38:5a:09:70:48:65:29:4b:e2:0b:a6:e8:98:
         13:b8:23:f4:fe:7c:14:b5:60:4d:8a:75:fd:44:97:3d:c7:81:
         96:38:55:c1:a1:59:14:2f:f7:55:d2:fd:55:0f:33:ec:f7:00:
         b2:20:94:87:61:ce:18:2d:64:fd:35:ec:ff:c5:50:c3:bc:9f:
         f2:f1:82:2a:f1:ec:56:aa:5b:ba:ee:71:aa:79:63:bd:6f:85:
         ef:3e:10:17:f1:38:79:77:ab:f3:b2:2c:80:0f:7a:f0:0e:f2:
         4e:9a:4b:f3:e1:03:bf:64:14:5f:b6:86:6a:0e:04:da:f8:e9:
         3c:8c:8f:32:89:3f:30:17:70:c9:59:81:8e:f1:a6:c2:a3:fb:
         5d:b3:b7:ae:3f:34:a2:47:ec:cb:77:37:1a:b1:d8:d3:52:20:
         5b:94:28:7b:62:ef:82:84:b8:6b:0d:15:d0:dd:a1:95:8c:d4:
         9c:ee:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:52 2026 by rpki-client