This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File:                     jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier:          a2ckKyZHgx/h+1sk6POwPcxsKyF003BcB9GZ/XQErR8=
Subject key identifier:   54:42:75:75:A5:CD:97:D6:A4:F0:D3:76:8D:F7:4C:7C:04:93:C8:8A
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer:       /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial:       019C44A2877BC6B419B0CB9D78968F28776C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number:          0BB2
Signing time:             Mon 09 Feb 2026 23:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:28 +0000
Files and hashes:         1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: 86EfVVyEzt5G0c7+1tppZwynlMuNgv0AZC0SgehWi2g=)
                          2: w7qO3XTNq0Yzdc30rEPjt7iJFZU.roa (hash: LNZ6lyl5sjWLQK11LqKZIO+Pewy+8JnS92wQrFux3FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:87:7b:c6:b4:19:b0:cb:9d:78:96:8f:28:77:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
        Validity
            Not Before: Feb  9 23:00:28 2026 GMT
            Not After : Feb 10 23:00:28 2026 GMT
        Subject: CN=54427575a5cd97d6a4f0d3768df74c7c0493c88a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:db:55:7c:e7:2a:de:29:e6:2e:bf:1e:17:fb:
                    19:27:33:b2:6c:49:00:62:22:ab:5a:90:d5:3e:2c:
                    23:70:5b:47:93:d5:bc:0e:97:7f:33:46:95:a7:00:
                    09:c5:ce:b6:35:3b:35:b8:40:0a:2e:e1:14:2d:7d:
                    ef:df:a8:34:e6:70:4e:0d:35:c9:60:c3:0b:ef:0c:
                    78:6a:c3:f4:c3:7e:90:3d:45:36:c1:60:a4:31:b0:
                    78:7c:39:fb:b1:72:a8:cc:05:5f:5e:b7:93:0f:7e:
                    bc:c5:ca:26:9d:78:ec:f0:a5:b7:03:fe:fd:60:f5:
                    49:ef:d2:6c:e8:b8:6c:d1:9f:53:f4:2f:d2:73:26:
                    4b:94:29:c7:d3:00:94:9a:5a:9f:ef:10:a2:2b:3f:
                    a3:a3:3d:53:09:60:ee:ca:bd:c2:0b:ec:81:c1:22:
                    e5:a5:9d:35:6a:93:9a:19:4e:7a:33:62:4f:6c:d4:
                    6a:8b:8c:ef:ba:be:44:f5:09:03:7c:5f:53:d7:bf:
                    6e:22:65:72:3c:c3:5e:b8:7b:41:e5:64:58:9a:dd:
                    84:57:87:d9:e6:ac:50:f0:bf:52:73:a6:e3:8d:ef:
                    2e:49:57:21:cc:36:60:f9:bc:32:43:29:99:6a:f1:
                    e4:75:35:60:95:1e:22:7d:bc:35:ed:f2:42:6a:99:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:75:75:A5:CD:97:D6:A4:F0:D3:76:8D:F7:4C:7C:04:93:C8:8A
            X509v3 Authority Key Identifier:
                keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:04:f3:fe:3c:43:ce:e9:38:72:26:58:61:0a:5e:c8:df:17:
         e7:0c:3c:14:f7:f0:56:f5:63:30:15:9a:13:cd:65:05:80:17:
         81:64:52:cf:28:d7:85:fc:06:d9:63:68:ae:76:fb:c5:78:fa:
         61:62:bc:4d:e1:0e:e7:60:34:71:86:42:5f:f3:9d:20:9c:72:
         ae:b7:b0:85:94:c5:7c:5e:36:90:8e:2c:4a:52:2e:77:ef:ae:
         3e:e6:7e:3d:e4:a3:d7:25:81:86:a4:5a:42:bf:82:89:f2:1c:
         f1:8d:14:f7:78:c4:26:81:f8:d4:7c:6f:f1:bd:80:91:49:a5:
         71:5d:84:09:ad:80:6a:6e:93:70:b9:3a:2c:95:c9:f4:d9:7d:
         74:fe:55:22:b8:38:6b:97:18:2d:88:41:c6:01:46:77:0d:f0:
         a0:b5:50:ca:11:24:32:64:ef:ac:37:1f:51:ee:f9:56:cc:7f:
         a8:3b:20:be:db:fa:5d:ea:d5:39:f8:8a:98:1d:e2:8d:6e:5f:
         93:f8:eb:87:25:9e:45:42:88:43:f4:18:3a:0d:16:0e:3b:a5:
         40:7b:90:98:42:9b:c8:3d:8e:03:5d:a5:5d:8b:3a:48:97:43:
         3f:b6:8f:03:af:10:8e:d9:da:d9:b9:1a:5b:a7:b9:4c:e3:26:
         82:38:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:52 2026 by rpki-client