This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File:                     JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier:          xfRoF7V3GPOzoKycRUgw2gOfctN1LNenIAXpyyjSSQc=
Subject key identifier:   AB:35:91:1F:D5:78:43:22:2B:D4:8F:4D:40:C6:33:81:07:77:EB:C3
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer:       /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial:       019C42EB26832A14604A4B9C6536181B1A44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number:          023B
Signing time:             Mon 09 Feb 2026 15:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:32 +0000
Files and hashes:         1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
                          2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: GTVdo4JR4MlqB9Az8fYbtnQmzPd806MvLLaAgHGpHic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:26:83:2a:14:60:4a:4b:9c:65:36:18:1b:1a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
        Validity
            Not Before: Feb  9 15:00:32 2026 GMT
            Not After : Feb 10 15:00:32 2026 GMT
        Subject: CN=ab35911fd57843222bd48f4d40c633810777ebc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:25:8a:af:9f:39:b1:e6:85:b4:86:d6:94:
                    a2:19:bb:d5:9a:0f:c0:6b:f1:f1:16:d9:41:e7:84:
                    4e:bb:d0:b1:73:6d:bd:71:88:f0:e0:3c:24:17:a6:
                    8a:c3:12:3c:9a:36:97:4e:8c:a0:5e:02:3a:54:78:
                    fa:1a:1a:6e:05:56:86:60:fa:9a:0c:60:05:9b:45:
                    8e:5e:16:6a:e2:2a:55:3c:b6:98:da:e5:7b:89:0c:
                    36:3d:58:60:ec:82:bd:f1:8a:2a:29:c6:7a:d0:b6:
                    66:27:d5:98:bd:8f:24:77:52:10:c1:8c:5a:b3:4c:
                    fc:72:5e:d6:06:f3:a3:64:97:d1:d3:97:83:71:6c:
                    31:94:5e:a3:9d:0c:14:7c:dc:31:a8:79:20:5b:6c:
                    43:8b:03:4f:39:db:5a:32:d0:9f:a7:dd:45:98:cf:
                    62:fb:7c:6e:4c:f0:7f:86:6a:78:36:47:da:aa:02:
                    1b:8d:7c:1b:1c:bc:06:93:e3:2d:f5:7b:8b:a3:d3:
                    85:71:f2:01:df:87:06:ac:f6:1b:8d:1c:0d:04:f8:
                    95:3e:2b:76:2c:e3:3a:40:2e:04:c7:70:04:e7:c5:
                    36:69:14:dd:29:ea:03:e0:14:70:18:5a:20:04:2e:
                    ce:1e:c3:17:fe:ad:03:40:e4:65:b2:39:77:df:1c:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:91:1F:D5:78:43:22:2B:D4:8F:4D:40:C6:33:81:07:77:EB:C3
            X509v3 Authority Key Identifier:
                keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:44:1d:23:e8:42:c5:38:3e:af:da:0c:9c:8c:64:32:3f:
         c6:75:91:c4:44:68:8f:5a:6b:57:30:09:75:61:71:97:97:39:
         36:2f:d1:57:6d:e1:03:46:9c:46:12:d9:5e:83:1f:f6:22:62:
         9d:47:6d:68:f1:07:2f:36:13:1d:41:dd:0b:31:56:45:2b:c0:
         37:89:b8:03:d2:02:e3:e0:7c:b0:85:4c:e1:a0:fd:69:6c:05:
         e4:b9:15:52:b6:6d:ac:dc:43:50:42:f9:25:f1:cd:2d:3c:6d:
         1e:5f:5a:e3:75:33:33:a7:fb:ba:32:5a:22:fa:06:75:f1:3d:
         0a:4f:8f:45:59:da:c8:55:5f:b5:3c:3b:ae:e5:11:95:51:68:
         07:a2:02:3a:79:7a:64:2d:a3:55:5a:c1:cf:5e:28:63:77:43:
         5b:82:7a:98:25:04:97:8d:e4:56:1e:c9:db:0a:51:3d:24:3b:
         86:5a:4d:5c:5f:d8:72:89:f4:e6:76:96:7e:35:99:82:63:86:
         00:02:6e:82:16:f0:1e:5b:7e:dc:a6:ca:c6:da:a4:1e:44:24:
         e6:9c:ed:84:a0:ef:ab:2e:25:87:50:bd:85:42:4d:fd:45:89:
         78:a1:c6:76:07:09:ea:a7:4a:4e:74:a8:08:b9:c4:c7:f7:c1:
         74:6c:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:05 2026 by rpki-client