This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File:                     J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier:          Ac4UuUictuWPZEldfEPtazRBsWNjTEp023hpZp8OrT8=
Subject key identifier:   B2:5F:47:6A:96:07:7D:D5:8F:DE:6D:96:CB:7A:B0:3F:54:7F:3B:21
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer:       /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial:       019C390C33F66F5DE22084C13D3DB2F0DC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number:          180D
Signing time:             Sat 07 Feb 2026 17:00:26 +0000
Manifest this update:     Sat 07 Feb 2026 17:00:26 +0000
Manifest next update:     Sun 08 Feb 2026 17:00:26 +0000
Files and hashes:         1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: HXotlCvNXlZGzW8/jUhMNP8HDRtQfZHZQ+tB9nbEnJM=)
                          2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:39:0c:33:f6:6f:5d:e2:20:84:c1:3d:3d:b2:f0:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
        Validity
            Not Before: Feb  7 17:00:26 2026 GMT
            Not After : Feb  8 17:00:26 2026 GMT
        Subject: CN=b25f476a96077dd58fde6d96cb7ab03f547f3b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:11:54:c0:b3:ad:fd:6b:f2:be:3e:8b:af:
                    3d:3d:59:a5:3b:ea:14:a0:f9:1f:c5:d8:18:84:fe:
                    09:e2:dd:ad:46:23:b5:ac:55:5f:b9:28:29:af:73:
                    88:54:7b:08:e9:20:9d:f9:c0:a5:f1:25:79:7f:f5:
                    66:db:b0:f8:d8:df:3b:12:90:b9:27:c6:95:32:1e:
                    ab:80:cf:68:ca:b1:69:28:29:19:10:f9:4a:eb:51:
                    af:c1:a0:78:82:41:c8:64:73:08:a1:29:7c:02:6f:
                    3f:5a:e3:48:86:8a:3a:f8:af:ef:3e:ea:82:a5:85:
                    33:46:d5:cd:93:0a:1d:36:bf:3b:f9:1e:65:4e:e9:
                    26:38:92:70:51:0b:a5:ce:36:0e:1a:82:b8:84:e8:
                    02:62:19:42:8d:7c:bc:9b:54:6a:da:c3:c1:b4:de:
                    ae:35:3f:b8:72:6f:27:39:f7:ef:be:d3:44:f0:b5:
                    9f:14:cb:b4:fc:4e:6f:54:ff:74:57:87:db:f2:90:
                    e9:73:1e:a1:36:84:17:40:2c:f0:09:ad:3b:97:2d:
                    c5:40:0b:b6:a2:3a:d8:07:cf:c0:6b:2e:4f:62:1a:
                    17:83:f3:4b:de:19:5e:32:83:d6:fa:4f:4c:96:7c:
                    a5:23:f9:03:25:06:26:e0:32:10:b4:60:39:d9:70:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:47:6A:96:07:7D:D5:8F:DE:6D:96:CB:7A:B0:3F:54:7F:3B:21
            X509v3 Authority Key Identifier:
                keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:98:fc:0a:9a:b3:48:a9:42:63:c6:1d:3b:44:da:3d:a5:0f:
         f9:a0:3a:4f:63:9e:6a:4d:ff:d3:a0:c6:a7:cc:4d:44:cd:16:
         6a:8b:8f:82:f8:46:31:fd:80:04:75:77:e5:cf:ee:1d:bc:ad:
         9b:d8:9e:e1:c8:2a:b0:4e:e2:15:f8:48:94:25:6c:a2:7f:e7:
         82:80:9c:0f:58:49:9c:96:78:57:95:94:0f:43:7a:57:56:a7:
         fe:77:d4:a1:d1:53:8b:6a:99:8b:eb:b9:fb:85:d5:11:c2:08:
         f1:7b:71:f8:8b:64:cb:0a:9e:17:fb:a6:2b:35:79:80:c8:46:
         66:50:c0:ce:ca:94:4c:a8:ab:25:f1:d9:aa:c2:c7:5f:9a:34:
         cb:2e:79:84:b5:12:04:cb:09:13:b0:37:d1:f7:12:02:19:23:
         24:af:d1:44:86:c6:d0:f4:e9:70:66:8e:eb:f8:2a:34:17:47:
         45:f3:27:68:a0:5b:a0:80:dd:90:c1:97:89:5e:0a:ef:57:f9:
         50:b0:b9:70:b7:9c:a5:bd:3e:96:4f:60:aa:74:5f:54:7d:d3:
         62:2f:9a:d5:03:11:a4:9b:59:a6:f3:17:75:9c:01:56:4a:b1:
         eb:1b:8d:40:7b:0d:df:88:cd:fc:0b:b3:ec:cc:03:bc:19:6b:
         0a:77:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:51:56 2026 by rpki-client