This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          v2cdVmT3jjUWlErFsEMXv3chVQTlmqWnNcQizVPFyGA=
Subject key identifier:   97:F0:B0:A5:58:4A:39:60:1E:D0:D7:D7:56:7E:6B:D5:15:67:D7:7F
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       019C427D6A42BDE025CA4DF914D883BA2CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0E30
Signing time:             Mon 09 Feb 2026 13:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:41 +0000
Files and hashes:         1: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: NRlHGgAExsGYaaZuobuevAB/2AexBbUSOhsjop/lCIk=)
                          2: OXWr1FYLi9PgXMi4UP0vp3p1d3o.roa (hash: miQSIT7p7E2EU0jg2TvL7PxHL5mubsweNJtdEmmfr8s=)
                          3: vemKapMmkStR7tolVhfdLCFIHqo.roa (hash: dA21yuRu1C5aB1w0/kkdpqei9cBkSg/W6yABWc5Hwig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:6a:42:bd:e0:25:ca:4d:f9:14:d8:83:ba:2c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Feb  9 13:00:41 2026 GMT
            Not After : Feb 10 13:00:41 2026 GMT
        Subject: CN=97f0b0a5584a39601ed0d7d7567e6bd51567d77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:f5:3a:64:a1:ba:e8:95:32:b8:cd:0b:38:
                    ad:e3:3d:13:4f:23:d3:ef:08:ce:87:52:4d:23:3a:
                    9a:84:79:87:5e:f9:5d:c1:24:d4:4c:8d:28:c5:6a:
                    05:be:f9:06:df:e7:87:8c:5d:73:e6:ff:1f:cd:20:
                    0d:af:d8:07:65:aa:c9:4d:b9:ca:2e:d6:37:95:97:
                    f4:6d:85:d9:c7:1e:5c:a8:2e:7c:cc:e8:19:e0:f0:
                    88:f1:52:03:d6:79:d2:db:f8:a2:9f:e7:21:a6:67:
                    b9:c3:c7:ff:68:2d:37:05:27:d8:3a:89:c7:a5:83:
                    37:63:40:98:7c:d4:bf:a5:3b:97:d7:a5:49:f2:da:
                    82:d1:a8:79:a4:0b:30:c0:09:fe:c0:52:ae:89:4e:
                    2f:b0:ae:0d:36:a1:da:e4:8b:db:0b:1f:a6:56:cf:
                    b9:11:0c:f2:ef:52:0f:a0:e8:18:24:4b:ff:6f:98:
                    93:9a:2d:35:cc:34:32:75:1e:6b:aa:60:71:49:d6:
                    b2:3e:07:db:eb:fb:04:03:38:46:c2:52:e6:fc:de:
                    fd:b2:a4:5b:02:f1:34:70:89:78:30:ca:03:ee:eb:
                    a2:c2:8f:92:e2:82:35:b3:0b:e6:77:4f:98:a1:6c:
                    70:da:ac:65:dc:1e:e5:cd:cd:2f:89:8c:77:ec:87:
                    46:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F0:B0:A5:58:4A:39:60:1E:D0:D7:D7:56:7E:6B:D5:15:67:D7:7F
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ec:09:a2:82:fd:5c:fa:1a:98:39:54:5a:99:9f:b0:80:a6:
         31:61:f1:6f:33:75:c5:17:52:ca:ec:52:8a:d0:5d:88:2e:82:
         14:7d:88:1d:cf:6d:5b:58:cd:e3:80:18:19:db:29:a2:04:34:
         5d:2b:07:0c:cf:52:e2:7d:f2:72:f3:36:cd:9d:53:69:07:90:
         72:5a:cb:59:b7:ec:8d:b6:4b:3c:b2:e8:ff:67:2f:38:ca:69:
         e4:77:32:f1:9a:a1:ab:66:5b:ac:e9:b4:3e:ce:46:55:14:d7:
         a5:e1:aa:9b:b8:da:13:3e:dc:e9:d3:ca:ef:58:c0:7e:fb:dd:
         83:2d:e3:2f:2e:41:92:c3:a3:b5:3a:b1:d6:54:10:d2:0d:24:
         47:e4:9d:38:9e:7c:62:e5:f2:bf:32:97:e5:55:bc:50:84:3e:
         7c:18:b6:87:09:1a:d0:91:de:c4:6c:4b:38:a5:14:cc:25:ff:
         53:8b:7c:c0:3e:d0:6a:09:21:61:c5:a5:07:7f:a2:7e:27:24:
         cd:3b:aa:41:b8:14:60:d5:e4:4f:0f:74:c5:42:cb:af:26:28:
         70:e5:65:43:11:cf:4b:da:1b:73:e4:fa:78:90:ff:5e:82:15:
         e4:32:c5:3d:06:63:c0:40:dc:a8:ab:a7:92:48:14:f2:7e:87:
         df:69:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:29 2026 by rpki-client