This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File:                     JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier:          EIDrPyP8hGU3o6DDdG6k5rKfEgnrnLq7yiKkx3vomj8=
Subject key identifier:   F8:8A:FC:53:F5:8E:27:62:EE:3A:9B:4D:A3:C8:BB:4D:AB:F8:BE:F5
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer:       /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial:       019C424649F5F7E267D764D5B66E859C536E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number:          0771
Signing time:             Mon 09 Feb 2026 12:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:28 +0000
Files and hashes:         1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: p8dcsQxKAw+K0jiU6Y2pP8afgjqeTA7b1GHQTZiBe2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:49:f5:f7:e2:67:d7:64:d5:b6:6e:85:9c:53:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
        Validity
            Not Before: Feb  9 12:00:28 2026 GMT
            Not After : Feb 10 12:00:28 2026 GMT
        Subject: CN=f88afc53f58e2762ee3a9b4da3c8bb4dabf8bef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:14:d5:04:c1:b2:f2:f7:94:3c:12:f0:c7:
                    ad:ab:f8:6f:10:19:4d:fb:22:c4:22:49:cf:7e:ff:
                    d2:da:e5:6a:07:6e:f7:d9:fe:6c:27:a1:7a:00:5c:
                    72:92:21:24:7d:eb:23:9a:d9:72:42:8d:bb:aa:84:
                    26:eb:a3:13:85:8a:25:f3:a4:b4:0e:a0:1b:56:b5:
                    7a:6e:fe:23:12:74:0b:9f:f3:9f:c6:32:85:43:c1:
                    36:ae:bb:bc:27:ba:d0:09:a7:e5:26:e7:7d:a9:f0:
                    5e:50:ce:5b:38:4a:61:b0:af:90:99:07:a3:3c:ee:
                    fe:6c:f4:a1:b2:56:72:bd:a9:e4:88:1f:08:44:2f:
                    65:24:11:cd:df:48:8c:d0:21:89:50:64:ea:34:7f:
                    2e:7a:89:fb:28:07:bf:b3:d2:75:cc:a2:85:29:0b:
                    87:a6:e9:57:3c:8b:f1:38:23:18:73:eb:b5:3e:64:
                    f2:64:cb:6c:53:fa:ab:77:2e:1d:1d:35:db:8d:67:
                    97:43:93:fd:5a:f2:26:9a:03:0b:6a:17:50:de:3c:
                    a5:8d:fc:5c:45:dc:07:f3:68:48:e6:f3:65:14:4d:
                    f7:e7:f1:d8:d3:29:f0:2c:b8:fe:52:70:23:30:96:
                    27:eb:aa:40:21:c8:98:57:80:33:84:0f:3b:74:8c:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8A:FC:53:F5:8E:27:62:EE:3A:9B:4D:A3:C8:BB:4D:AB:F8:BE:F5
            X509v3 Authority Key Identifier:
                keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:95:48:5c:3e:52:fb:42:55:cb:91:2d:18:c7:88:a2:7c:
         8a:06:a0:45:e4:b7:8b:96:5a:f0:bf:59:b8:9c:af:2f:f5:e1:
         0c:fc:48:42:81:3b:5c:ed:98:d0:1c:f0:b2:68:1f:69:ba:ba:
         3e:31:70:3e:04:de:26:88:e2:77:8b:df:35:64:81:96:f3:b5:
         b2:c5:f1:43:35:f7:c9:a9:1a:a0:db:a9:31:f9:98:1b:b8:95:
         14:53:13:74:21:5d:91:ba:54:75:a1:47:e1:51:15:67:49:d9:
         5a:3b:fb:cf:a2:99:02:c3:db:bd:ae:d0:41:05:7a:f0:cc:96:
         ee:b6:ff:f0:f7:d5:34:84:b5:14:cd:b0:3d:21:ac:f3:d4:ea:
         0d:5a:84:02:fb:8b:cd:a7:eb:38:82:35:e2:cc:8a:47:7f:16:
         37:48:fc:36:f9:29:50:80:be:bb:12:1e:4e:f7:8a:14:60:20:
         98:6a:74:26:01:27:72:d0:22:7d:92:01:7f:c7:ba:ad:04:43:
         68:69:a7:db:67:4f:bb:6c:59:a1:81:e8:35:31:d2:f4:47:10:
         97:b7:14:7d:33:ff:7d:0b:f8:3e:f5:39:7d:fe:db:cd:bb:c9:
         0f:f9:81:ee:e1:16:8c:b5:d5:f9:d4:87:fb:ca:d4:07:00:a6:
         59:d2:6f:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkn19+Jn12TVtm6FnFNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDI1ZGZjNjUyNDgzY2M3YmZmZDYxMzZmNDc3MzViZDE5
MGQ1YTEwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD
EyhmODhhZmM1M2Y1OGUyNzYyZWUzYTliNGRhM2M4YmI0ZGFiZjhiZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6YU1QTBsvL3lDwS8Metq/hvEBlN
+yLEIknPfv/S2uVqB2732f5sJ6F6AFxykiEkfesjmtlyQo27qoQm66MThYol86S0
DqAbVrV6bv4jEnQLn/OfxjKFQ8E2rru8J7rQCaflJud9qfBeUM5bOEphsK+QmQej
PO7+bPShslZyvankiB8IRC9lJBHN30iM0CGJUGTqNH8ueon7KAe/s9J1zKKFKQuH
pulXPIvxOCMYc+u1PmTyZMtsU/qrdy4dHTXbjWeXQ5P9WvImmgMLahdQ3jyljfxc
RdwH82hI5vNlFE335/HY0ynwLLj+UnAjMJYn66pAIciYV4AzhA87dIySuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiK/FP1jidi7jqbTaPIu02r+L71MB8GA1UdIwQY
MBaAFCXSXfxlJIPMe//WE29Hc1vRkNWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQt
MDAyYTEyYzI0MjQ4LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQtMDAyYTEyYzI0MjQ4
LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawqVSFw+
UvtCVcuRLRjHiKJ8igagReS3i5Za8L9ZuJyvL/XhDPxIQoE7XO2Y0Bzwsmgfabq6
PjFwPgTeJojid4vfNWSBlvO1ssXxQzX3yakaoNupMfmYG7iVFFMTdCFdkbpUdaFH
4VEVZ0nZWjv7z6KZAsPbva7QQQV68MyW7rb/8PfVNIS1FM2wPSGs89TqDVqEAvuL
zafrOII14syKR38WN0j8NvkpUIC+uxIeTveKFGAgmGp0JgEnctAifZIBf8e6rQRD
aGmn22dPu2xZoYHoNTHS9EcQl7cUfTP/fQv4PvU5ff7bzbvJD/mB7uEWjLXV+dSH
+8rUBwCmWdJv5g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:46 2026 by rpki-client