This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          YROPHgHsKehBJEsJYyTKWXuN2e+O/CPPJB0DSNNQV5I=
Subject key identifier:   4D:2D:0F:F3:50:91:2F:A6:EC:DD:D6:BC:13:37:2F:36:3D:BF:A9:C3
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019C270619F7104630B2E350F895CFA59E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          08DD
Signing time:             Wed 04 Feb 2026 05:00:37 +0000
Manifest this update:     Wed 04 Feb 2026 05:00:37 +0000
Manifest next update:     Thu 05 Feb 2026 05:00:37 +0000
Files and hashes:         1: BmoelkPQt4i3BlkcahPvi7qWXN4.roa (hash: z9IVfQbmn+DFxr8Krtk/I8KiP3Zb6ONjO0YjL8dGC3M=)
                          2: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: 8rZrUR/XUtUQenzFDQ4GF/eryqpiLRDzZaidl2/RKf0=)
                          3: mNu3U5HOimkLMXrE7Xd3w0-SVZA.roa (hash: Q8HW68vvE5dt2JCgiuU6uY8uDN63CVOq6IX7sRD6oHI=)
                          4: zzcGdYNOZhe1jEco9OqFbyYvT9k.roa (hash: J+hhTkidSQB0Te9LHI8bfOqIwkK9dHKinjSyKGXTXTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:06:19:f7:10:46:30:b2:e3:50:f8:95:cf:a5:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Feb  4 05:00:37 2026 GMT
            Not After : Feb  5 05:00:37 2026 GMT
        Subject: CN=4d2d0ff350912fa6ecddd6bc13372f363dbfa9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:51:a5:47:9e:27:d5:cb:18:bc:c2:d4:3d:
                    42:f2:4a:8d:54:01:1f:43:39:93:32:ec:7b:6d:2c:
                    87:58:c1:da:5e:84:7d:48:90:7c:da:27:85:b5:9b:
                    14:18:87:d9:17:c9:aa:93:f2:b7:00:06:9f:13:a7:
                    d1:37:83:68:40:ff:15:ae:d7:ca:79:1c:47:1d:f7:
                    89:a1:65:3e:91:df:30:bf:11:d7:08:5d:08:6b:30:
                    99:af:6f:36:d2:23:c0:b6:1c:b0:18:c2:19:37:09:
                    a7:34:d5:25:67:4f:dc:6c:d8:3f:f2:13:96:5d:7d:
                    86:69:cf:81:ec:6c:a2:6c:5a:ca:1f:62:01:22:7e:
                    f1:61:61:7f:38:97:f3:f7:44:bb:c6:67:9f:8e:4f:
                    fe:05:9c:b7:b1:a3:0c:ea:a0:d9:f0:1a:c9:c9:bb:
                    0d:0b:c3:25:bb:93:98:a3:6b:36:e0:f8:a5:6c:02:
                    50:9b:21:e0:de:e6:cf:f0:cc:5e:13:15:77:e3:4b:
                    3f:ce:26:cc:e2:3f:12:74:f6:30:75:8c:b5:15:5d:
                    a5:1e:5a:9a:f8:6e:18:57:7e:30:3f:ca:3b:d1:4d:
                    b7:ee:4a:36:67:ab:5d:64:2e:6b:58:6f:e4:5c:2c:
                    99:81:ee:f2:df:53:f7:81:81:90:ef:f2:06:e9:e9:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:0F:F3:50:91:2F:A6:EC:DD:D6:BC:13:37:2F:36:3D:BF:A9:C3
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:4c:24:3f:eb:fa:4a:7f:a2:a1:29:a7:16:a6:51:bc:6c:
         95:d5:1d:d0:8a:fe:f7:d2:0f:99:55:fb:e3:3b:58:5c:1b:84:
         0b:6a:0f:2c:48:93:f9:a9:d8:f7:11:0b:03:e0:62:27:55:fa:
         29:31:34:50:65:37:05:93:e5:13:7a:ee:2a:ac:5e:0a:0e:15:
         f6:06:0f:a8:ec:66:25:8e:60:6d:1a:2a:27:8f:c9:02:09:03:
         d4:3c:8b:9a:5d:a1:df:99:76:ba:49:77:38:7b:44:6e:cb:2f:
         ec:e8:55:79:38:dd:40:6f:3b:b0:a7:21:60:47:ff:4b:69:09:
         56:06:a5:79:7a:37:a9:4a:0e:ff:a7:a8:99:7d:24:10:0a:e2:
         8d:28:3d:fd:4f:70:44:9b:31:66:79:2a:ba:0d:2b:88:80:a3:
         54:27:6a:62:fb:49:df:8b:f0:96:cb:d2:cc:02:8c:c1:77:4d:
         6c:16:37:3b:0e:9c:ef:11:df:2f:13:da:4f:82:16:fe:89:1e:
         fd:7a:3f:0b:b7:f8:7e:9d:19:c7:7c:d8:5a:83:e8:da:3a:3e:
         49:61:55:aa:e7:e3:de:1f:94:28:e6:80:cc:62:c4:09:1f:ba:
         c0:40:fc:cc:60:8e:3e:06:35:ae:ec:8a:57:01:2b:33:42:ca:
         e6:5a:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:56:49 2026 by rpki-client