This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          y9VpImT7zT1AeVxLc3Sqwjjimz6kTgd8IXEtyEMb35s=
Subject key identifier:   8D:48:AD:50:CB:CF:D5:5B:22:66:8A:2E:47:39:63:08:F2:46:BB:60
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019C427DDF240C4F25BE83DF51BEDF447254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0822
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: Cr7Y5Bazckjdzf+0yErEO4X1mWMgEKgWtOCJU66okZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:df:24:0c:4f:25:be:83:df:51:be:df:44:72:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=8d48ad50cbcfd55b22668a2e47396308f246bb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:c6:50:1e:53:d8:75:93:40:a7:20:57:c2:
                    b3:06:11:04:d0:4e:6f:32:f9:da:44:1c:ec:a9:e0:
                    e1:a3:b2:59:59:30:65:0f:b0:e9:2a:9b:f3:c7:fd:
                    4d:e9:b2:cd:c9:c1:16:a3:07:fd:f0:a6:0a:9b:11:
                    d5:84:e2:4f:2c:3d:30:59:9a:bc:6d:f4:69:6a:db:
                    23:af:8a:e9:1c:94:71:cb:07:b2:33:b6:dd:30:d6:
                    c6:fc:3d:43:6b:b6:be:39:b2:8d:d2:44:83:82:51:
                    63:b9:52:6c:d3:51:eb:a0:93:b3:18:b5:0c:b0:33:
                    df:c7:53:02:ec:93:2f:f6:c4:39:2a:43:26:04:0d:
                    47:7c:a2:ec:37:01:dc:af:59:27:30:4a:a9:7e:92:
                    9b:a3:e8:77:ad:ea:dd:95:0f:ab:d0:da:aa:5b:75:
                    05:15:14:11:98:e7:4e:b4:d5:69:0c:5a:6a:98:0e:
                    31:e2:38:06:c4:9a:cc:4e:1d:4e:74:25:67:71:4a:
                    5f:e3:00:cf:d2:78:60:15:b6:d0:39:c3:c5:db:47:
                    a8:91:bc:e6:15:1b:2f:a6:a0:d7:26:71:38:fc:1e:
                    12:1a:f0:dd:18:52:2f:03:e5:d2:f5:49:ff:62:44:
                    43:dc:9d:a2:3a:e1:ed:81:04:16:57:1a:26:e5:7b:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:AD:50:CB:CF:D5:5B:22:66:8A:2E:47:39:63:08:F2:46:BB:60
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:1b:74:b5:ba:f6:f5:29:9f:fe:92:2a:43:46:62:74:82:
         6a:30:d3:94:67:c6:bb:ea:72:38:8e:fa:e5:20:2e:b6:60:aa:
         00:d7:40:c2:3f:ed:23:24:9f:b9:93:fe:94:68:ef:b5:f7:fd:
         a6:53:75:f7:ab:61:04:5c:24:cc:c2:07:98:5a:1d:fa:df:16:
         54:f2:66:4e:a4:01:82:a1:cd:5a:21:bf:3d:d8:d1:aa:c2:19:
         70:63:8f:ef:9e:09:5c:f3:06:c4:4b:88:57:06:9f:d0:f0:6b:
         9f:5a:7d:a0:d6:f9:ef:fd:8a:7f:43:e1:35:f7:ab:d3:6f:f4:
         cf:4d:64:32:6f:bb:20:a4:2a:88:dd:88:77:44:02:c5:7f:f7:
         66:c9:81:76:70:17:01:3f:fb:2b:4d:db:b3:94:66:b1:a0:e2:
         5a:61:c4:62:e0:70:89:15:d6:ca:14:50:1f:d9:0f:28:03:04:
         91:31:a3:6f:f0:b2:74:35:68:f2:c9:2c:9d:f1:90:63:be:e1:
         da:9a:94:97:29:60:21:b9:6b:62:6d:c6:17:2f:83:32:2b:08:
         9f:03:b8:c3:4f:d7:fd:35:74:ba:2f:44:cb:36:64:7b:34:cb:
         3c:f2:9b:92:da:d6:0a:20:55:71:05:7b:08:56:95:d8:d4:c2:
         d6:e6:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:30 2026 by rpki-client