This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File:                     0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier:          uE6jLXKBa4pRCpc/DGt5eS4pcXlTFXzOJBGcv0Sqo6c=
Subject key identifier:   CF:54:F4:40:65:FA:95:07:07:46:C6:58:E5:FC:6D:D7:7D:23:64:D9
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer:       /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial:       019C4390AA55BFE6EAA84E35FA98E6620631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number:          0943
Signing time:             Mon 09 Feb 2026 18:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:20 +0000
Files and hashes:         1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: U4/vtMHu4J51omxk6j6oNSU6xKQpJ2F7jKdizhjGaqI=)
                          2: K9V0pBJMxjQPv91xTP0Kh2UeFvc.roa (hash: BFDPDbmJPLOCYexzkcBoZllev8YkC0o5ma6JusF+wZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:aa:55:bf:e6:ea:a8:4e:35:fa:98:e6:62:06:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
        Validity
            Not Before: Feb  9 18:01:20 2026 GMT
            Not After : Feb 10 18:01:20 2026 GMT
        Subject: CN=cf54f44065fa95070746c658e5fc6dd77d2364d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:53:b9:ae:77:db:ff:98:d0:e1:43:db:67:
                    94:61:2f:97:26:f8:4a:78:22:83:6d:74:94:ad:6b:
                    b3:6b:2e:56:a3:b0:46:89:11:6d:56:55:95:34:ae:
                    80:1e:23:b3:80:e0:19:a3:9d:81:f6:fe:ee:88:b1:
                    17:d2:34:dc:de:fe:0e:a0:f0:f4:5d:1b:22:9f:fe:
                    77:c3:9d:61:01:83:d6:15:a7:ce:0f:3c:15:9b:10:
                    38:84:a0:65:45:5f:1d:1e:68:6d:e4:b6:dc:23:83:
                    b4:b7:d3:ac:b9:81:f0:f6:86:69:7e:f1:0c:16:14:
                    9b:bc:28:44:df:f0:b3:f2:09:7b:3b:83:e1:62:67:
                    00:dd:a8:db:6a:d9:72:15:c2:1b:d6:24:4c:3a:12:
                    76:77:8d:d9:ca:ae:9a:33:35:66:7a:ad:c1:c6:76:
                    94:44:0c:72:f7:63:b3:f3:f3:d7:86:1e:6a:eb:b6:
                    69:9f:83:2e:d9:72:3f:6f:d2:b6:1d:ec:5c:ad:6c:
                    ed:b4:01:d4:bf:1e:e2:0e:fd:09:49:0d:5b:d4:d1:
                    57:e5:1e:89:35:ff:59:c7:a0:1a:56:b4:7e:8c:5f:
                    70:57:c4:23:43:9f:e4:8e:d0:64:6e:9a:d8:7a:49:
                    63:61:cf:f5:1e:cf:ea:56:2e:60:7f:44:09:32:7f:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:F4:40:65:FA:95:07:07:46:C6:58:E5:FC:6D:D7:7D:23:64:D9
            X509v3 Authority Key Identifier:
                keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:34:cd:c8:69:91:db:3f:74:0a:7b:8d:b9:18:51:a3:d3:17:
         ef:28:1e:67:f0:62:3b:ca:9c:07:bc:92:4c:ff:d0:89:9c:20:
         7a:fb:27:c6:be:76:ca:8b:92:b5:e0:52:f7:b7:ae:7c:ac:30:
         a8:34:4b:ae:3f:57:d0:5f:3f:0a:d2:71:65:94:65:82:fd:1e:
         42:be:f1:1d:9c:6d:20:67:ee:7d:5a:63:ed:fa:88:93:26:d5:
         7c:1d:d5:ec:73:62:82:10:e6:b6:f5:b9:0b:c1:41:15:b0:de:
         e7:a3:0c:ed:04:70:9e:19:cd:89:2a:8f:23:ca:e8:ac:eb:8a:
         e3:16:6a:64:1b:a6:0e:73:97:62:1b:5f:08:7f:1a:76:84:ff:
         e3:c7:73:1f:b6:a7:b8:bb:5f:ea:fb:2a:a5:a8:50:07:56:b5:
         c9:72:74:ef:eb:08:a3:8c:18:0b:3d:40:82:4b:eb:16:18:ed:
         e5:bd:aa:6f:97:68:43:36:41:dc:63:7e:11:8a:0c:ea:bc:dc:
         a8:31:5c:88:73:69:04:46:47:2c:21:26:55:65:ce:bd:06:ed:
         9c:30:f8:35:8f:0d:40:8a:b0:f6:b2:e5:35:50:34:38:b5:58:
         d5:32:3e:24:54:37:44:ba:85:e4:c0:ce:40:05:8f:7a:d4:0f:
         40:cd:bd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:46 2026 by rpki-client