This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File:                     jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier:          C6KYAr6VpCqeDEm5QBYi+N6N57a5XM7sIVLvuqW4OBc=
Subject key identifier:   31:82:87:55:47:A9:4B:36:0A:DF:ED:CF:BE:53:CE:99:79:97:C5:8A
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer:       /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial:       019C4321E3579006C20BD2E8F0826CBA08AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number:          0596
Signing time:             Mon 09 Feb 2026 16:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:20 +0000
Files and hashes:         1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: QGdqQfsh9zuH2R2EZ/EXJGJEOaCrJa+26DboNITTZbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:e3:57:90:06:c2:0b:d2:e8:f0:82:6c:ba:08:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
        Validity
            Not Before: Feb  9 16:00:20 2026 GMT
            Not After : Feb 10 16:00:20 2026 GMT
        Subject: CN=3182875547a94b360adfedcfbe53ce997997c58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:93:a0:00:e3:a1:c6:c0:81:9e:87:d1:62:
                    53:32:57:07:db:a9:d7:6d:eb:f9:b5:51:fa:5d:4a:
                    dc:9c:bb:b3:3b:59:77:09:00:9e:67:03:d9:f2:33:
                    49:ed:02:63:e9:ea:40:a5:d0:f0:55:2e:df:ce:d0:
                    07:7b:c0:e0:c8:08:80:fd:11:24:61:5d:78:a2:5e:
                    d9:9e:79:bd:75:ef:9c:a5:e1:24:29:23:33:fa:e1:
                    1e:fc:c2:70:a5:40:dc:5d:80:95:9b:df:e1:59:83:
                    df:26:f5:ef:d2:94:65:98:19:9b:16:db:db:fa:a4:
                    5a:18:d3:b3:b4:85:53:16:dd:8d:1c:9a:7d:4c:d2:
                    a6:fb:59:71:fe:91:15:11:72:09:7c:dd:fe:fb:ec:
                    da:42:76:61:28:af:42:27:c9:22:18:28:e9:57:58:
                    04:79:2b:29:d5:bd:89:08:f9:4f:9f:30:07:e5:23:
                    c3:58:0a:b7:79:2f:bb:b5:04:e8:da:11:9b:50:f4:
                    a8:eb:0c:16:bf:81:0b:72:61:4d:4a:74:d0:4c:6a:
                    29:a7:a0:17:db:bc:fd:3e:f1:59:e5:c1:e4:2d:31:
                    42:ed:3b:f7:86:94:10:5f:b1:d3:a2:bc:b9:6e:70:
                    b5:15:68:86:ae:f2:8a:5f:e3:78:cb:9b:ff:2f:f3:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:87:55:47:A9:4B:36:0A:DF:ED:CF:BE:53:CE:99:79:97:C5:8A
            X509v3 Authority Key Identifier:
                keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:c4:7c:0a:4a:16:12:22:ba:5f:fc:9c:8a:58:54:da:aa:
         f6:6f:de:75:6c:f1:1e:7c:1f:ae:f6:62:56:95:d4:62:d4:f9:
         d7:16:c8:7b:db:40:b8:0c:d3:05:aa:af:b2:67:7d:f6:91:cd:
         0b:42:3e:a4:22:bb:6e:dc:54:0d:10:49:6f:3e:9b:4e:4c:f7:
         c4:89:17:21:97:a4:28:9f:10:43:64:e8:e9:e7:ec:ea:f0:04:
         03:7a:69:db:50:ee:09:e0:76:f2:d3:82:3f:8b:e4:ee:db:cc:
         aa:5d:ab:38:28:be:c8:5d:0c:8c:20:b1:81:88:ab:27:22:b7:
         d5:3e:7e:52:21:45:ca:1d:11:66:92:60:8c:8c:a8:15:f4:a8:
         a8:10:db:26:cb:cb:cf:23:33:86:4e:79:ed:c0:68:1c:1c:62:
         a2:c5:51:a7:14:52:39:ea:d3:5a:16:0d:6a:66:9f:59:da:fe:
         59:90:ce:ec:59:40:2f:4d:b3:a2:11:bb:11:16:6e:69:74:32:
         98:be:8c:56:a2:12:cf:0c:b3:93:ad:2f:6a:dc:4a:cc:ec:22:
         6d:ea:21:34:23:df:55:20:76:c9:b5:c4:49:14:d1:64:2d:29:
         fc:26:ce:c6:7e:b2:cd:9e:1e:b1:f4:0f:e0:8e:b9:0c:83:2b:
         53:7f:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client