This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File:                     jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier:          etxwgnojMDVIp8roW1EoMjpT9zHDldb6KZNoqVuJDl8=
Subject key identifier:   DD:77:56:98:63:97:00:61:D6:E5:EE:39:C2:A7:41:45:7D:61:2A:AA
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer:       /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial:       019C439078E979C7D3ABF4772E85CF50EADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number:          0D0E
Signing time:             Mon 09 Feb 2026 18:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:07 +0000
Files and hashes:         1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
                          2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
                          3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 7uNGqdDx0FaJNWnVUyRzwztXX4mZ7qYZBMQxq0js9PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:78:e9:79:c7:d3:ab:f4:77:2e:85:cf:50:ea:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
        Validity
            Not Before: Feb  9 18:01:07 2026 GMT
            Not After : Feb 10 18:01:07 2026 GMT
        Subject: CN=dd77569863970061d6e5ee39c2a741457d612aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:27:f7:8e:52:08:64:6d:16:fb:aa:df:00:
                    83:08:a8:0f:d3:e3:a9:96:4e:42:ba:e8:43:34:66:
                    96:f6:47:0b:25:6f:7b:5c:99:4e:7e:9e:e6:25:1b:
                    b9:7f:28:47:78:f6:f2:45:6e:12:fa:e9:ab:7c:ce:
                    96:d9:68:09:e9:e3:1c:ea:1c:b2:04:40:8a:be:dd:
                    11:56:35:2c:ba:3f:18:32:c7:91:3c:e2:a9:10:23:
                    31:0a:9a:98:34:0d:64:41:33:10:d5:74:22:9a:b2:
                    6f:39:cb:b1:05:80:67:ed:b5:cd:73:6b:29:7c:61:
                    b7:bf:b2:bd:62:4c:b1:b5:8a:e0:0d:35:fb:9a:cc:
                    23:75:5b:dd:4b:4c:ec:fc:d1:75:64:07:07:31:16:
                    9b:c2:81:5a:87:b3:47:f9:28:96:79:8c:e7:53:72:
                    02:12:a7:ef:e5:a7:65:76:52:60:a6:28:be:49:5a:
                    bb:5c:27:72:b1:8e:ce:e2:ae:29:6e:a9:6b:8c:00:
                    55:92:20:9a:8e:58:c4:cb:0e:87:a7:48:80:8e:80:
                    5a:83:05:54:f8:12:e9:0c:db:c2:76:ce:ae:0b:bb:
                    f2:8c:41:20:a3:b3:a1:ba:f0:78:54:44:5b:56:bc:
                    fa:90:fd:84:00:10:02:1a:28:b5:61:65:87:c4:65:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:56:98:63:97:00:61:D6:E5:EE:39:C2:A7:41:45:7D:61:2A:AA
            X509v3 Authority Key Identifier:
                keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:0f:51:47:de:d5:c1:97:c6:ac:3b:7a:1d:fd:f8:77:32:
         1a:ce:27:87:c0:bc:c4:80:73:c1:c7:67:5a:98:34:2b:d6:04:
         af:e3:6a:cf:da:28:5f:ca:33:c9:38:61:e5:23:d6:df:b1:0f:
         9e:cc:cd:80:66:01:be:22:16:01:16:10:34:7f:95:8f:6a:06:
         1e:67:da:0d:27:89:18:68:18:1f:73:19:33:72:ff:f6:ee:a8:
         71:63:2a:72:b8:e2:cf:6d:f6:ed:5d:c6:2c:2b:e1:12:99:3e:
         95:13:e7:8e:8e:11:b1:21:59:5b:2f:ba:86:2a:c0:1d:00:32:
         dd:7e:f5:18:23:52:77:5f:ce:fd:e6:8b:a0:55:1c:2c:86:79:
         7f:58:4d:07:22:86:34:2b:30:c4:a1:47:a1:a3:1d:c8:f9:ed:
         66:36:1c:b2:01:30:17:93:d4:de:da:aa:ef:73:a1:fa:75:90:
         88:85:73:61:b6:67:91:c5:0f:9d:6a:d0:34:05:90:cf:34:ff:
         54:db:b1:9e:cd:a7:2c:44:14:9c:ad:19:94:41:75:8d:e9:20:
         03:06:59:e0:80:8d:85:c0:af:9a:d2:71:e8:99:03:7f:16:07:
         1d:6d:b0:98:cd:8f:22:2a:70:ee:dc:fc:3b:9d:f8:4d:8e:a8:
         ee:b3:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:55 2026 by rpki-client