This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          +kz5MxyGv+3hXN2E9hKIw2C3eL+OY/pTwQ/Znkz+GpA=
Subject key identifier:   4B:51:89:25:E6:02:F0:C8:AC:41:E2:07:2E:D9:A0:F9:13:29:16:53
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       019C439039EF6287C989B1BD26C727E66117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0D08
Signing time:             Mon 09 Feb 2026 18:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:51 +0000
Files and hashes:         1: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: qpJUIzBiFY1i+FmEBf/xCK4gt0PAuP5DYiaNPrd0j0w=)
                          2: ZOxgWvCSe4fh3G-hS8UAvVzCxPQ.roa (hash: lLIc6IlVo/BfK1oQIkM/V9OuWrsKXh4yLdug5PFaT64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:39:ef:62:87:c9:89:b1:bd:26:c7:27:e6:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Feb  9 18:00:51 2026 GMT
            Not After : Feb 10 18:00:51 2026 GMT
        Subject: CN=4b518925e602f0c8ac41e2072ed9a0f913291653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:d2:f5:d6:99:5a:33:bd:82:ef:d8:1d:5d:
                    e8:fa:be:bc:43:a4:d2:83:c2:da:2c:b4:82:81:02:
                    0e:c6:22:9d:46:8a:f9:0c:34:47:47:75:86:0d:95:
                    98:29:05:7b:0f:dd:84:2d:61:6f:47:e3:67:3e:b9:
                    ef:2b:db:84:36:ff:e8:e6:b4:45:18:4c:fc:be:ca:
                    6c:50:77:af:b5:46:f5:f8:d3:fc:51:00:b2:59:60:
                    42:83:d0:51:88:a3:fc:80:e7:cf:3e:c2:db:f0:eb:
                    d6:ac:d7:d0:34:3b:ae:9c:d6:cb:cb:4f:d9:0c:10:
                    4f:15:4b:b3:33:f3:c6:9d:df:d2:ec:b2:5d:a2:80:
                    18:0f:7a:5f:73:b6:68:21:4c:cd:a6:b6:7a:d1:b0:
                    c1:74:cc:99:25:12:14:db:76:6e:45:1a:e3:3b:9a:
                    59:a4:ff:f5:22:6a:1c:77:8c:c4:5d:bb:65:de:17:
                    ed:fc:de:0b:7c:e5:17:42:07:49:51:70:c4:d2:2c:
                    0d:db:08:31:b3:6d:6f:d6:13:b6:57:c8:25:76:6b:
                    05:c7:4d:57:fa:33:64:59:0a:ed:8a:6e:b7:85:50:
                    3d:52:24:7d:71:42:2e:a0:bd:f9:a7:8b:e4:16:47:
                    51:57:1d:1b:17:bb:cb:5d:b9:80:b9:22:dc:e8:1d:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:51:89:25:E6:02:F0:C8:AC:41:E2:07:2E:D9:A0:F9:13:29:16:53
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:42:5c:ff:01:f2:b5:57:34:45:df:5d:cb:0f:46:07:34:
         bf:a5:95:68:7d:53:35:c6:44:b1:92:7b:50:96:65:ab:26:13:
         64:f1:39:c1:16:01:d2:17:fa:5d:db:7c:f8:01:3e:13:d2:fb:
         64:9a:77:c2:b2:42:34:46:63:02:cb:96:6a:9b:b7:11:d3:b2:
         7c:3d:34:88:f7:1c:e5:60:0b:81:8b:c6:08:0c:c6:10:f6:5f:
         03:9f:10:e7:bd:72:84:7b:61:c9:33:ea:ce:97:30:9d:85:88:
         44:33:05:a5:ac:de:da:00:c4:78:5f:88:65:4f:b9:bf:1a:31:
         5e:b5:2d:84:29:c8:9c:81:ef:cd:47:94:83:64:68:c5:51:89:
         81:64:6a:00:88:39:bb:e3:52:76:6c:14:9f:6f:31:7c:96:f0:
         f5:7b:0e:b2:98:06:8f:bd:ab:80:ca:19:70:12:75:57:f9:c8:
         56:fc:ea:20:14:52:35:78:80:47:80:71:ad:99:58:a9:19:57:
         80:ba:24:cd:e2:47:93:14:83:44:34:7e:dd:2e:e6:ec:05:67:
         6a:5e:c0:cb:ff:f0:c4:46:a0:e0:90:c5:df:e5:94:b3:f5:e1:
         75:3e:0c:03:55:1f:1d:21:3b:7a:7a:33:d8:47:74:c0:83:8f:
         04:69:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:04 2026 by rpki-client