This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File:                     jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier:          0bRpQ7hgVDQiLZcPmLg8jdy7BrV9qdTrrc80jWaBZ5U=
Subject key identifier:   F9:CC:3B:F6:6C:DC:FA:08:12:55:61:E7:39:E0:2F:CB:A5:79:B8:A9
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer:       /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial:       019C43223D637FB2E0DA0E908A25C6750B1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number:          17F6
Signing time:             Mon 09 Feb 2026 16:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:43 +0000
Files and hashes:         1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
                          2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
                          3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: Pn16v8elNZFd/VQpb7l2xevqQsztZQ7IVlxAkWaDAD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3d:63:7f:b2:e0:da:0e:90:8a:25:c6:75:0b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
        Validity
            Not Before: Feb  9 16:00:43 2026 GMT
            Not After : Feb 10 16:00:43 2026 GMT
        Subject: CN=f9cc3bf66cdcfa08125561e739e02fcba579b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:49:e2:0d:b6:b6:1d:88:67:31:b6:41:6e:
                    9c:d1:8c:2d:fd:39:f2:79:c6:78:01:68:43:af:c5:
                    38:c1:83:c0:8a:96:2d:b7:67:34:83:18:76:6c:20:
                    e8:59:94:62:20:c2:e3:90:cf:14:94:e3:03:cb:0a:
                    ad:ea:3c:3a:ad:27:e4:50:86:50:26:27:1f:79:91:
                    54:4c:9b:a6:d7:bf:dc:6e:77:64:7d:a0:d2:74:df:
                    df:74:65:99:ba:62:65:eb:83:f4:8e:4e:b4:b1:21:
                    06:3a:e7:f2:67:74:2a:33:7d:34:9f:87:61:00:01:
                    40:a5:74:d3:a4:61:49:ca:d3:e4:04:4c:7a:5f:b0:
                    ff:17:c4:a1:6d:e2:af:d2:30:ef:42:72:fb:71:9f:
                    6f:ea:82:b7:6a:41:4d:56:85:d8:7c:86:be:90:d3:
                    4d:82:45:98:d0:7b:b6:fc:6e:f8:5e:ee:b9:30:56:
                    41:bb:49:39:78:dc:a5:04:e8:bc:ea:88:e7:11:03:
                    c6:91:f2:53:40:f7:8b:90:77:c3:7c:0b:2d:17:43:
                    c8:ce:76:0b:a3:77:30:05:65:0a:b5:fc:24:41:c9:
                    82:77:aa:fd:1f:d5:ce:82:12:8b:ac:21:ca:90:dd:
                    5b:23:aa:7d:8f:f2:ef:77:b6:51:99:04:f8:03:fd:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CC:3B:F6:6C:DC:FA:08:12:55:61:E7:39:E0:2F:CB:A5:79:B8:A9
            X509v3 Authority Key Identifier:
                keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:51:cf:71:7f:93:59:d3:45:86:41:a8:ba:22:93:10:ac:be:
         06:af:1a:4a:7b:31:7e:e8:85:2b:d2:2e:7e:f9:d1:19:0c:92:
         db:c7:24:53:65:25:ac:26:cd:94:2d:3f:52:d8:70:1b:06:65:
         4e:9c:d4:a6:31:36:a4:d4:24:69:37:db:95:35:e9:fe:1f:16:
         d0:b2:77:18:a4:7c:1f:d3:24:ff:8f:48:42:28:c2:29:5c:3e:
         54:30:f4:04:a3:7b:8a:82:91:dc:cc:ff:71:96:e3:5f:14:6b:
         b5:77:12:58:55:65:f6:27:1f:ee:74:31:9e:b3:fd:6e:8d:4f:
         18:9b:70:f1:7e:af:67:6a:a9:d8:c8:7c:f0:c6:a5:8f:63:fa:
         d2:e6:bd:e7:0a:62:59:f4:d2:84:66:e0:9f:76:fe:dc:2b:94:
         e2:ad:86:85:d7:90:c2:77:7d:a6:a4:4e:4d:0a:54:cd:f7:a8:
         03:4a:aa:c1:34:87:05:33:1d:c1:27:7b:6f:7d:2f:b2:0f:19:
         cb:4e:fe:f2:97:6b:6b:45:94:5a:df:9c:91:a4:7a:fa:7c:51:
         ba:fd:ed:51:dd:79:26:bc:33:0a:9e:6f:df:0c:ad:81:bb:65:
         d1:38:28:be:ed:23:d1:26:2a:38:34:84:6a:98:19:f9:68:25:
         1f:a2:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:03 2026 by rpki-client