This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File:                     JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier:          DtBoRx4Ualc7jhvaMSAfjH0mzIp3f12PNNTLLcDWcBI=
Subject key identifier:   62:9B:3E:C8:E0:B8:6B:7D:0F:8F:53:67:8F:67:FF:B8:EC:3E:90:D7
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer:       /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial:       019C45477CC5CF5AE2E347C290FB8ECB4D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number:          0CC2
Signing time:             Tue 10 Feb 2026 02:00:38 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:38 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:38 +0000
Files and hashes:         1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: djtINRwXwQl+HrO2gAZ+vDHRs0HgiwfvkPa80D4U5oU=)
                          2: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:7c:c5:cf:5a:e2:e3:47:c2:90:fb:8e:cb:4d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
        Validity
            Not Before: Feb 10 02:00:38 2026 GMT
            Not After : Feb 11 02:00:38 2026 GMT
        Subject: CN=629b3ec8e0b86b7d0f8f53678f67ffb8ec3e90d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:37:23:9c:e5:46:b1:7a:d1:7d:f8:e2:6c:1c:
                    1a:66:a9:2e:0d:68:21:24:ef:94:54:a1:2d:52:aa:
                    9f:59:6b:eb:22:92:f0:24:77:ce:8d:38:9c:a0:d3:
                    0e:52:4a:a8:c5:0e:0e:30:28:2e:b3:de:ea:07:d1:
                    8d:61:8f:b9:60:b6:11:c4:6a:3c:72:93:c5:e5:08:
                    35:6b:74:4f:22:6a:e0:37:50:ae:fa:28:90:45:86:
                    f6:39:2b:83:84:90:eb:7a:90:6d:89:ae:ea:62:b8:
                    13:fd:b8:bd:b2:99:db:de:28:8f:31:2e:55:49:f4:
                    25:22:c2:3c:c1:0c:1b:ba:f7:38:66:b1:6e:27:75:
                    f9:8b:48:7d:ae:63:a4:e2:da:5e:55:f0:fe:bc:57:
                    11:0a:c5:10:e2:0d:d0:e4:92:71:94:65:4d:10:6d:
                    2a:84:d5:a4:77:22:d9:58:61:58:52:bf:8f:e3:e6:
                    58:0a:44:07:d9:70:c4:d1:91:f5:08:24:2b:33:07:
                    b4:f5:5d:7d:7d:21:40:5d:22:68:52:c4:c1:42:49:
                    52:19:f5:13:f2:6b:36:d6:67:e5:17:b5:2e:4a:d2:
                    11:26:57:ae:4f:29:3d:4e:38:11:a9:72:48:56:ef:
                    85:c6:5d:4e:c3:ac:ad:ae:19:73:e2:f9:c7:b3:ab:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9B:3E:C8:E0:B8:6B:7D:0F:8F:53:67:8F:67:FF:B8:EC:3E:90:D7
            X509v3 Authority Key Identifier:
                keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:3f:8c:70:9c:40:1c:bf:b4:d9:69:2d:18:b4:68:3e:75:
         73:07:5b:4f:73:63:f1:61:41:55:11:c1:06:73:26:71:9c:e6:
         c9:05:65:21:7c:4c:17:74:89:d9:5a:f1:c4:9a:d6:42:d5:fa:
         31:de:9c:6d:4d:86:2c:18:bc:0f:2c:24:51:8c:18:17:3a:65:
         80:a4:fb:8d:a2:f5:18:24:5d:23:97:b1:cd:fe:49:40:65:59:
         a8:dd:62:b7:61:d0:ad:81:4d:0d:d6:ad:4a:18:49:5e:04:51:
         83:a0:bf:b1:ff:b5:14:e5:28:a5:7b:6a:34:8a:75:fb:2c:f6:
         56:4f:d1:00:21:8e:cd:79:3a:a4:42:d2:64:c7:07:da:a0:8e:
         8c:47:28:ea:c5:5c:03:44:df:54:a2:5d:dc:5f:1e:c5:43:04:
         61:e6:97:83:2f:bd:d2:c9:9e:7c:ea:e8:4e:dd:98:d1:16:1c:
         43:bc:3c:db:1b:94:a2:14:6d:40:68:d5:71:ac:ad:2e:68:73:
         03:ed:33:8c:3f:7d:71:7b:b2:2e:c5:d1:88:4b:09:e5:ff:fc:
         62:e5:6d:63:da:01:00:77:8e:b6:5b:7c:aa:9e:4c:79:c5:c7:
         a3:a7:b0:cf:e3:7d:bc:90:6f:92:dd:43:ad:45:e7:fc:51:86:
         6b:34:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:49 2026 by rpki-client