This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          SIiRpnu2G1mrHMxdlYvr8+ountPzAlElmqa538e+Qe4=
Subject key identifier:   47:27:AB:0B:52:31:64:2C:14:9E:5D:BE:CE:DB:7C:46:AB:C9:75:1E
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       019C375542DCA9B092195382F90732563E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          103B
Signing time:             Sat 07 Feb 2026 09:01:00 +0000
Manifest this update:     Sat 07 Feb 2026 09:01:00 +0000
Manifest next update:     Sun 08 Feb 2026 09:01:00 +0000
Files and hashes:         1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
                          2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: WzNzNXNyQJShlMcMl51VFo0A1+4iNPgPWcSFW+ciVKI=)
                          3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
                          4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
                          5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
                          6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
                          7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
                          8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
                          9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:37:55:42:dc:a9:b0:92:19:53:82:f9:07:32:56:3e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: Feb  7 09:01:00 2026 GMT
            Not After : Feb  8 09:01:00 2026 GMT
        Subject: CN=4727ab0b5231642c149e5dbecedb7c46abc9751e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:d4:92:f8:57:5b:86:ac:76:9f:c8:2f:33:
                    30:73:1a:95:55:a2:ae:f4:b7:4f:01:8e:71:83:bf:
                    4d:c2:2a:e9:0c:f9:3f:0b:9a:7d:f2:33:ee:b4:71:
                    9f:74:2f:2a:9f:9a:d8:6d:da:8f:c1:b9:f0:fb:ca:
                    87:a2:29:1e:ef:18:08:cc:79:01:03:d9:61:c5:82:
                    99:35:7f:9a:16:dc:17:5e:cc:02:31:98:b5:82:de:
                    d6:6c:79:8b:cb:a3:d6:8f:6b:0e:3f:ec:fa:ac:71:
                    de:3d:90:da:a3:14:5e:fb:17:d4:a5:df:a8:ad:a8:
                    bc:c9:a2:2c:c0:38:d9:52:75:ed:6b:47:c8:d9:b5:
                    c9:5f:42:55:f8:44:9b:e0:d0:81:bc:27:62:da:de:
                    2f:58:c1:20:ed:26:b4:bb:0b:a7:d4:44:de:02:ec:
                    0d:0c:91:dd:fa:8b:aa:6f:33:c2:b3:53:7b:97:7f:
                    3f:82:a8:fa:e7:3f:51:13:fc:f8:05:82:4b:05:57:
                    e8:9c:bc:b2:e9:6d:13:55:c8:bb:82:42:10:8b:18:
                    1c:e8:07:cd:66:a9:14:c0:48:ab:1a:03:ca:38:93:
                    6c:6d:7c:62:7a:5d:12:29:67:b1:b3:97:e2:82:27:
                    bd:71:83:8d:2b:a0:2d:3a:d9:01:7b:9e:04:8a:02:
                    7d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:AB:0B:52:31:64:2C:14:9E:5D:BE:CE:DB:7C:46:AB:C9:75:1E
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ad:74:26:c8:60:ff:01:3c:ba:c2:50:41:f6:ee:9e:b7:05:
         f7:2e:96:b7:db:8a:23:c1:4b:48:f2:7c:da:e9:57:2b:53:de:
         3e:87:62:56:a8:b9:7e:56:b9:d9:2c:d1:d5:9e:74:67:98:34:
         b2:6e:1c:19:1c:5a:f3:50:58:3a:09:e6:ac:99:91:99:eb:80:
         f6:2f:83:f1:ec:ad:57:b7:8a:5b:19:20:f9:34:f5:0e:50:07:
         54:51:b7:83:1d:26:c4:b6:23:e3:db:9a:b9:77:40:c1:f3:3e:
         f8:48:5a:92:8f:c3:ec:82:c2:79:01:35:f1:08:10:c8:ee:2e:
         63:1a:29:b1:61:f4:bb:67:ff:ee:77:9f:8b:3e:32:ef:e2:8b:
         fd:78:9a:13:f5:69:04:d4:10:5a:ec:ba:24:40:f9:9c:b6:47:
         3a:3a:02:e3:75:96:66:1a:3a:84:ed:7a:57:c0:f3:2a:0d:7e:
         66:97:0f:47:66:63:8f:5d:3e:9f:46:8d:80:03:77:45:4c:f6:
         30:66:b3:62:38:c6:03:21:dc:af:07:c4:af:b8:74:cb:35:0e:
         97:e1:d8:6d:07:d8:8d:cd:fc:3a:bd:2d:6c:b5:e1:f4:63:53:
         97:3e:3f:de:1a:7f:b1:40:92:d0:ad:d5:bb:1c:4e:4a:8a:47:
         90:72:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 12:17:02 2026 by rpki-client