This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          0t5RIQj5JP1FY4R3sorhWi1g8vhp6DQQFjFZsyWWL9A=
Subject key identifier:   6D:23:3B:7E:C4:66:11:F6:BC:AB:45:47:B4:34:D9:84:BF:02:03:0D
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       019C420F24E3587961DDC10585A2B2E91604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          1454
Signing time:             Mon 09 Feb 2026 11:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:14 +0000
Files and hashes:         1: X7EGq3ULp4qMjdusm-fC_K2E7p4.roa (hash: DCGD9YxklsauNoagw/am2/7dOGgzTpV9Ou4m28+2cEg=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: zph2GQyX3TWms8VQkO9BDvMZ6a7z1h5LEwHwStRDWbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:24:e3:58:79:61:dd:c1:05:85:a2:b2:e9:16:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: Feb  9 11:00:14 2026 GMT
            Not After : Feb 10 11:00:14 2026 GMT
        Subject: CN=6d233b7ec46611f6bcab4547b434d984bf02030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:70:33:57:8c:fe:e5:41:81:a7:2c:8c:f2:77:
                    e1:27:7c:fe:a0:ee:6a:e0:57:a5:b1:85:2f:61:ee:
                    29:3b:91:44:c6:8e:e1:6b:9a:aa:3d:28:ba:9d:2d:
                    e3:a6:54:58:26:2e:a2:f3:55:2f:83:5f:b0:dc:e1:
                    5b:31:25:df:01:d3:28:19:70:24:39:1b:80:77:5f:
                    73:43:40:73:ac:a1:c1:f1:ba:80:35:8d:40:43:23:
                    6b:5a:02:2d:9f:33:d0:25:fc:ba:4d:78:50:bb:2e:
                    26:fe:94:24:2e:d7:22:42:29:51:42:9e:48:b9:86:
                    33:cb:40:d5:c9:0b:f9:4e:89:da:8f:75:9b:0d:47:
                    2b:4b:8f:22:a7:a0:a4:07:c8:f7:62:3f:00:72:f3:
                    a0:91:6d:27:e0:af:4b:d8:3b:7f:81:40:7e:47:2a:
                    4f:3f:ed:bd:33:c4:f8:e8:7f:1d:c3:1a:7d:c3:48:
                    ff:98:97:d4:ed:2d:bb:c5:b4:d0:7c:fb:3d:8e:bc:
                    9d:4f:9a:94:6d:13:9c:5f:1e:1e:ea:84:e5:18:be:
                    85:1c:d5:e8:8c:0a:3e:46:45:fb:ed:61:b1:b3:1d:
                    f4:1e:7f:89:74:93:54:a6:9c:17:16:42:41:0d:a6:
                    57:f7:a8:3b:88:8b:3c:88:00:4a:d7:44:22:13:65:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:3B:7E:C4:66:11:F6:BC:AB:45:47:B4:34:D9:84:BF:02:03:0D
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3d:8f:f7:fb:13:6f:d6:57:c1:71:38:00:09:9e:4a:d4:0f:
         4d:7a:82:58:5c:94:ab:94:ba:37:88:9d:71:e2:71:e7:05:37:
         c3:70:b3:d8:2c:2d:52:c9:27:5b:ae:d1:a5:43:36:bf:24:7f:
         c2:ed:02:22:84:35:67:af:8e:30:de:03:ce:1d:e1:90:55:6e:
         3b:73:90:c7:6e:39:b7:97:ff:62:99:42:4f:f1:6b:3f:df:09:
         2f:a7:f6:10:71:64:a4:4e:9f:8a:6e:d7:fe:30:b9:49:1b:e2:
         b1:43:fc:3b:93:23:96:28:81:1e:4c:a8:36:9c:99:fa:6b:cd:
         a8:fa:ef:d6:8e:2c:2c:35:2a:f0:90:d8:2e:c7:c0:c8:f5:3c:
         59:f6:b9:0b:47:cb:27:73:28:de:6b:52:93:be:e9:e4:5d:8a:
         d1:7a:72:b9:09:a9:de:0a:2b:8a:4f:6f:fe:ac:53:27:79:74:
         57:8c:e0:18:87:59:84:ae:87:41:99:d9:0f:c7:9d:b9:55:fd:
         9b:dd:7d:60:a5:99:1e:7b:df:55:cf:c0:d3:1a:41:9a:97:6c:
         36:2d:0a:3e:c2:15:db:c5:b0:e4:5c:fc:80:7d:da:6a:6d:58:
         f1:aa:89:b9:83:66:66:2f:17:60:9b:c4:5a:64:50:d9:80:c6:
         f5:2e:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:51 2026 by rpki-client