This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File:                     jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier:          EEhEpUYpX+jcuxKzcySMwC4osgOQH2EpWupRTtO0xto=
Subject key identifier:   2F:62:F1:25:E6:F5:C0:F4:18:79:11:DD:9A:EF:95:60:B4:3A:8A:21
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer:       /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial:       019C4246A22C6ACDEF6DAB2E2313A43A0379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:51 +0000
Files and hashes:         1: OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa (hash: 2qz4jxI2YE3EpG4tgKD3UnEwvItdboMyeyLo8EjTciU=)
                          2: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: nQLoScp/YG7wLCLzCRmTT0TUWl1vSNL4fDpe33hoC8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a2:2c:6a:cd:ef:6d:ab:2e:23:13:a4:3a:03:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
        Validity
            Not Before: Feb  9 12:00:51 2026 GMT
            Not After : Feb 10 12:00:51 2026 GMT
        Subject: CN=2f62f125e6f5c0f4187911dd9aef9560b43a8a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:e9:12:5b:bf:16:75:0f:42:97:f2:54:ea:
                    a8:1a:db:3a:2f:99:cd:42:67:d9:1c:3a:79:cd:e9:
                    e8:b5:40:9d:86:d6:6e:b3:d3:3a:25:5f:bc:b8:4f:
                    86:96:80:9b:0f:e9:90:16:5c:8d:14:16:51:b7:8b:
                    19:29:fc:98:a7:73:8a:ff:a5:7b:57:0b:e7:9d:a9:
                    6c:ae:09:5c:fc:d4:72:eb:5c:38:cc:1c:eb:59:5d:
                    b4:6e:6b:18:cf:51:67:e4:28:2f:e3:d2:b8:c5:77:
                    af:53:3c:f1:25:81:d9:e4:a0:35:e1:5b:d9:9a:ed:
                    df:06:1a:0e:a2:75:56:c5:a6:a7:ee:98:f3:32:6a:
                    86:4b:a1:74:cc:0b:6f:5c:84:2d:ea:60:21:e0:ff:
                    1d:82:11:89:41:ed:d2:1b:5e:2a:2c:db:57:54:5e:
                    0d:e6:9e:14:3d:64:66:7f:a9:9b:ee:00:b4:64:94:
                    24:de:85:74:24:66:a2:f2:7a:a9:84:18:8f:a9:09:
                    0e:77:5d:05:9b:7a:7c:13:8f:bc:ac:f5:8f:e7:0a:
                    e2:18:0f:5e:d4:7a:7b:57:5b:a6:c6:ba:f1:e0:f3:
                    2a:18:10:05:39:f8:40:74:24:bc:e0:90:b7:8d:1e:
                    a1:22:61:9e:7a:2a:4c:70:a5:58:e4:b2:70:3a:cb:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:62:F1:25:E6:F5:C0:F4:18:79:11:DD:9A:EF:95:60:B4:3A:8A:21
            X509v3 Authority Key Identifier:
                keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cb:26:c5:1e:d3:04:50:19:d3:0a:6c:d9:92:b0:a1:92:df:
         88:73:98:8d:4a:81:3b:58:bd:ce:d2:82:4e:4b:14:29:eb:3f:
         e0:71:95:82:f6:cd:1f:ad:a6:3c:b7:26:96:0e:8e:77:e3:df:
         26:20:69:58:f3:b1:da:ad:0c:02:03:70:3c:a1:20:c7:e3:bb:
         61:28:ec:ba:e8:5c:42:ce:0c:3b:50:65:7d:45:1d:6a:c7:55:
         64:38:1a:a7:24:5c:2e:35:95:77:06:64:79:a8:7d:aa:8c:62:
         23:34:9d:e2:a1:48:9f:8a:67:31:59:46:ae:4a:33:a6:52:e5:
         0e:65:7d:15:53:3e:6b:c0:c5:94:c0:bb:fc:19:3b:ad:1d:cb:
         2b:7e:78:4b:75:5f:38:db:1a:40:5d:3a:f9:0d:7d:9b:eb:32:
         0b:fd:fd:91:44:cd:2f:46:96:a1:c9:15:26:9f:9b:1a:94:8e:
         21:be:67:ce:54:9b:9e:4a:a4:5b:6f:7c:fe:ee:e6:0d:2c:ef:
         8d:e3:28:7b:5d:f1:ce:a3:90:0c:0b:fc:36:d6:c7:6e:11:d2:
         92:46:29:19:87:c9:de:01:ce:7c:89:41:b0:cb:29:f0:d2:ff:
         c6:e9:0a:1f:c3:1c:69:f6:df:7c:e0:12:6a:23:6d:5f:05:0f:
         af:72:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:21 2026 by rpki-client