This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          ZI0OaTRo9IU0Vxt71fUHYVxex7RHo66mFa3/O1njim4=
Subject key identifier:   2A:FF:03:D3:CF:DB:B8:15:52:B3:16:7B:05:75:35:79:0D:97:C6:FE
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       019C420F350725394AD52D638ABC2CAA6F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          1340
Signing time:             Mon 09 Feb 2026 11:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:18 +0000
Files and hashes:         1: 0vxysV8K8K16kmkjIj4RtAbD-UU.roa (hash: iyJv/+zD+LriBgc6xgCjkmEFLCEbY7odbgSqK8CwFw4=)
                          2: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: mG8sI6kJRctsJAvWzusdEzqYxqRrHmKhEkeEctg4LbM=)
                          3: O0O4Xg_devCgcZBCCVmryZVuD10.roa (hash: wlEVDlOa0NYJ2GQtXHiIWwkp+eia1OUendMc/DWWx98=)
                          4: PDAogfhHzjl2Oe7BmcnlQeQBWEI.roa (hash: ckoFLIB1Tcwfzt65rV/FjUZ2mj8Mb8q8+QFTh956cAA=)
                          5: TBrPU9fPKBDqqHBRaNxMA1UegDw.roa (hash: W7DQYQNuoI+QoqbkUzHRzRQaCn8sMhNXKaSmuQh0wgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:35:07:25:39:4a:d5:2d:63:8a:bc:2c:aa:6f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Feb  9 11:00:18 2026 GMT
            Not After : Feb 10 11:00:18 2026 GMT
        Subject: CN=2aff03d3cfdbb81552b3167b057535790d97c6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:51:40:09:a2:73:3c:5f:b5:7a:33:14:f7:
                    4d:01:3f:32:f0:c4:b7:fd:23:2a:e0:73:d6:b7:75:
                    11:e8:b0:3b:94:d2:20:76:87:00:33:4f:c7:2f:34:
                    18:dd:71:1f:9b:cc:b7:e1:d2:d2:8a:76:5c:99:a8:
                    1e:17:60:37:e0:ea:90:83:72:a4:62:61:3c:25:81:
                    1d:eb:1d:8b:0a:a0:54:79:99:b7:32:42:71:72:60:
                    9b:4b:0c:22:91:fb:4f:8e:06:12:a2:f5:1a:00:2b:
                    9e:32:1d:17:5c:c0:c1:f7:ea:ca:53:b7:ab:40:a6:
                    48:f5:f7:51:12:81:25:df:c4:20:67:a4:56:c2:cd:
                    a1:84:cf:ce:b1:ec:c5:34:a5:ba:c9:cc:2b:57:ec:
                    be:58:2a:33:b0:a6:01:a1:4e:66:8f:0e:12:ae:be:
                    55:ab:20:fe:c6:e7:19:75:b8:df:25:94:d1:95:38:
                    3e:a7:a3:52:61:16:ab:2b:e5:a8:14:48:69:4a:9c:
                    d2:d5:9b:3f:c2:a7:7d:f2:aa:9a:96:63:33:47:bb:
                    47:12:18:9c:58:1a:f4:92:12:f3:8a:85:82:e2:ff:
                    d5:7a:74:cd:e3:76:eb:da:eb:b8:05:f4:6e:5f:cc:
                    ff:cd:e5:31:20:83:28:d1:36:2f:90:2c:35:a5:9b:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:03:D3:CF:DB:B8:15:52:B3:16:7B:05:75:35:79:0D:97:C6:FE
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:be:28:b4:6f:4f:eb:59:75:63:89:29:ed:2b:7e:a4:e8:
         52:f9:8d:dd:50:42:1f:74:a7:73:3b:a7:c5:71:a2:9a:79:1c:
         8e:a9:77:d8:70:ec:f7:17:3c:77:a1:b1:80:69:95:45:11:8f:
         d4:26:87:be:9d:f1:dd:24:1c:4a:58:0e:bd:ef:2a:53:55:47:
         5a:e7:d0:6f:64:91:7f:21:01:ca:7d:ba:4c:f8:bc:b5:a7:18:
         9d:9e:69:6d:40:96:da:fa:bf:40:83:e0:56:da:a9:83:df:a7:
         ac:c8:e2:d6:46:ef:fe:29:64:73:59:57:c3:4c:6b:6b:d0:17:
         f9:59:b4:d7:59:8d:ac:30:82:d7:06:48:c0:b0:bf:54:72:5d:
         8b:48:43:db:ed:78:a7:b6:fc:c3:f7:74:b5:1e:46:7c:3d:40:
         59:ea:75:25:8d:6e:f9:8d:60:57:16:0a:20:03:a2:20:77:82:
         0c:a0:ba:0b:32:b7:d7:00:7d:ba:3b:46:8f:89:c3:63:57:b6:
         09:b3:e7:20:ae:14:40:a0:f8:87:22:42:e5:7b:f2:1b:76:5b:
         49:2a:fa:88:60:9b:1a:71:1e:22:4f:20:e0:1d:5e:3e:c3:e1:
         bc:11:66:8b:f0:fb:2f:7a:88:e0:12:8c:02:c4:bd:49:ab:0c:
         e4:55:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:21 2026 by rpki-client