This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File:                     JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier:          XkHXqYp/++4pAD7aVAJh+CcfB3WaNJtUf/h9jn5ZraI=
Subject key identifier:   EE:65:F1:EE:FC:10:4B:A1:F2:46:52:D4:38:D0:6A:11:D2:2C:F7:DA
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer:       /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial:       019C43901E603B8F1EF7D6245F05B083951D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number:          0FBB
Signing time:             Mon 09 Feb 2026 18:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:44 +0000
Files and hashes:         1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: F0SA8aMfQwJyG1RqaPk/RlHCjZ6Abl6IyO/8F5fipD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:1e:60:3b:8f:1e:f7:d6:24:5f:05:b0:83:95:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
        Validity
            Not Before: Feb  9 18:00:44 2026 GMT
            Not After : Feb 10 18:00:44 2026 GMT
        Subject: CN=ee65f1eefc104ba1f24652d438d06a11d22cf7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:98:7c:fe:af:09:a3:54:35:8b:3c:b1:21:
                    77:d3:02:a8:4e:97:ba:ea:75:a1:3a:60:5e:c6:25:
                    d4:68:45:82:7a:a8:88:22:76:53:1e:b5:8e:a8:d8:
                    8e:56:16:38:43:f5:27:98:d6:ae:1f:dc:f6:44:58:
                    8e:fb:0a:2c:1c:af:77:74:77:34:7c:07:46:7d:bf:
                    64:df:ea:d1:fd:82:84:db:96:0c:9f:37:54:84:d0:
                    f6:58:46:87:3a:4a:dd:c3:f2:bc:b5:bd:c4:65:76:
                    42:e9:94:25:50:d8:b8:30:aa:86:ae:72:ac:84:bc:
                    1d:bc:de:ef:cc:92:e5:5e:e5:87:11:06:33:b3:83:
                    40:37:68:15:1d:dd:53:62:7d:ed:60:3a:72:b9:bb:
                    63:6a:46:7a:e4:88:ab:c2:b1:f2:a9:15:b4:70:fe:
                    be:b7:58:c1:b5:bb:31:c1:9a:56:99:6b:af:fb:ac:
                    69:19:d5:33:51:c1:28:21:73:fd:d1:c1:4f:46:68:
                    3a:f4:39:76:97:5f:a8:46:6b:80:e6:6c:aa:15:bd:
                    01:44:ad:4b:80:c5:a2:7c:01:75:78:5d:1d:d9:0d:
                    2c:87:94:53:ab:44:8c:7b:8b:2a:32:83:e6:67:9b:
                    12:ed:bd:7b:02:1d:5e:cf:04:ae:98:2a:77:03:38:
                    5f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:F1:EE:FC:10:4B:A1:F2:46:52:D4:38:D0:6A:11:D2:2C:F7:DA
            X509v3 Authority Key Identifier:
                keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:be:90:08:0a:47:6e:22:8d:00:0f:c7:04:6c:d9:73:ac:
         01:07:31:df:10:b1:02:f2:20:b2:08:42:d9:af:bf:23:48:72:
         34:68:9c:bc:57:6a:8e:a9:b4:50:74:38:e8:b2:bd:ad:8a:dc:
         67:8a:7e:05:61:27:e4:00:e8:62:d1:5f:14:1c:6c:b7:de:be:
         72:65:56:7b:9e:05:46:22:b5:fa:9d:97:94:25:24:31:10:d5:
         60:27:3a:b3:0e:4b:a7:96:07:9d:23:5c:0f:dc:9f:fc:76:31:
         1f:18:81:00:45:ee:b2:f2:e8:43:d3:24:62:3a:ea:5c:31:e5:
         1a:21:9e:3f:ed:61:25:a0:a4:3e:a9:5c:17:d1:6b:06:e4:f6:
         09:6e:04:2f:3d:f3:b1:ab:f0:2f:f4:b4:ef:49:37:aa:a8:e0:
         cc:35:00:ef:4d:c2:4d:08:fd:12:21:9a:d5:c4:07:f0:aa:4c:
         77:55:ed:01:2b:46:03:a5:7f:3e:95:6f:17:9a:90:cc:24:18:
         28:a6:20:cb:c3:9b:53:17:31:f6:ec:ce:02:69:df:51:70:32:
         15:0f:aa:63:22:82:0f:8a:cf:50:22:85:c8:bf:ea:22:45:d7:
         38:d4:5f:82:ad:b6:22:ea:b9:8b:ff:d2:fc:19:0d:53:64:9d:
         8c:20:cb:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkB5gO48e99YkXwWwg5UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm
MjE1ZWIwHhcNMjYwMjA5MTgwMDQ0WhcNMjYwMjEwMTgwMDQ0WjAzMTEwLwYDVQQD
EyhlZTY1ZjFlZWZjMTA0YmExZjI0NjUyZDQzOGQwNmExMWQyMmNmN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS+YfP6vCaNUNYs8sSF30wKoTpe6
6nWhOmBexiXUaEWCeqiIInZTHrWOqNiOVhY4Q/UnmNauH9z2RFiO+wosHK93dHc0
fAdGfb9k3+rR/YKE25YMnzdUhND2WEaHOkrdw/K8tb3EZXZC6ZQlUNi4MKqGrnKs
hLwdvN7vzJLlXuWHEQYzs4NAN2gVHd1TYn3tYDpyubtjakZ65IirwrHyqRW0cP6+
t1jBtbsxwZpWmWuv+6xpGdUzUcEoIXP90cFPRmg69Dl2l1+oRmuA5myqFb0BRK1L
gMWifAF1eF0d2Q0sh5RTq0SMe4sqMoPmZ5sS7b17Ah1ezwSumCp3Azhf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5l8e78EEuh8kZS1DjQahHSLPfaMB8GA1UdIwQY
MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt
NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2
LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYy+kAgK
R24ijQAPxwRs2XOsAQcx3xCxAvIgsghC2a+/I0hyNGicvFdqjqm0UHQ46LK9rYrc
Z4p+BWEn5ADoYtFfFBxst96+cmVWe54FRiK1+p2XlCUkMRDVYCc6sw5Lp5YHnSNc
D9yf/HYxHxiBAEXusvLoQ9MkYjrqXDHlGiGeP+1hJaCkPqlcF9FrBuT2CW4ELz3z
savwL/S070k3qqjgzDUA703CTQj9EiGa1cQH8KpMd1XtAStGA6V/PpVvF5qQzCQY
KKYgy8ObUxcx9uzOAmnfUXAyFQ+qYyKCD4rPUCKFyL/qIkXXONRfgq22Iuq5i//S
/BkNU2SdjCDLyg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:42 2026 by rpki-client