This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
File:                     JtPbi-01S0eMbRcEoeOubJJtVnI.mft (raw, json)
Hash identifier:          xN5MHnBKbAHs4DB7HlhYvNUzFblAAu1Ni1ZcguLFQys=
Subject key identifier:   86:78:2D:EB:B3:13:AF:89:81:59:13:ED:B3:29:03:E5:38:37:1B:14
Authority key identifier: 26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72
Certificate issuer:       /CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
Certificate serial:       019C4390AB5C7D565D9FF7EA25459A09718B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
Manifest number:          1433
Signing time:             Mon 09 Feb 2026 18:01:20 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:20 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:20 +0000
Files and hashes:         1: 0Lb-drTpA0q5ebXv85gCnaFggHg.roa (hash: o+Ylyc+Dh5qbOBllykeo3o5DJF0I1eOH3ixeecVsyxA=)
                          2: JtPbi-01S0eMbRcEoeOubJJtVnI.crl (hash: WRs3LVH6xSZCaeMICJ5ly7I2xsHueGUrYJM8W0XOBpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:ab:5c:7d:56:5d:9f:f7:ea:25:45:9a:09:71:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d3db8bed354b478c6d1704a1e3ae6c926d5672
        Validity
            Not Before: Feb  9 18:01:20 2026 GMT
            Not After : Feb 10 18:01:20 2026 GMT
        Subject: CN=86782debb313af89815913edb32903e538371b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:3e:d1:94:42:48:ed:89:df:74:10:74:ac:
                    21:46:55:ef:e2:85:6d:b3:f1:c3:24:36:4e:4a:1c:
                    af:cd:38:0b:11:be:3a:bf:4f:9a:20:eb:76:ff:88:
                    75:fc:67:56:3d:9d:be:88:29:48:e5:5e:2c:36:98:
                    a7:dd:1a:1f:0a:92:bf:4a:9b:7f:5f:b0:f9:94:92:
                    70:55:d0:84:e5:f4:31:bc:29:d9:77:e1:f3:1c:12:
                    49:16:23:37:f3:ef:b6:09:c5:11:e7:f5:8e:8e:dc:
                    a5:4f:2f:24:e0:df:0e:f0:d2:ae:09:64:c0:d7:36:
                    96:82:4f:6f:49:86:cf:b4:5a:ae:22:43:81:88:5f:
                    c4:35:92:d0:33:b7:77:f5:10:5e:8c:7a:b9:04:7c:
                    ac:37:0d:3a:b1:65:64:14:13:27:a6:16:c8:f1:8f:
                    78:8a:65:5c:d0:ce:a3:47:bc:08:9e:a9:1a:7a:d3:
                    70:12:45:cd:f2:35:e3:74:ff:23:e6:8e:b5:2f:79:
                    20:95:e3:63:b4:30:f3:27:d1:b2:82:0b:39:6a:e4:
                    c0:fa:ec:ec:a9:b8:eb:74:6c:81:18:82:a8:40:04:
                    e3:fd:cc:0e:48:bf:a9:8c:54:f8:06:8c:1f:ef:3d:
                    9f:db:be:2e:2f:f3:94:7e:a4:40:8a:32:9e:16:58:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:2D:EB:B3:13:AF:89:81:59:13:ED:B3:29:03:E5:38:37:1B:14
            X509v3 Authority Key Identifier:
                keyid:26:D3:DB:8B:ED:35:4B:47:8C:6D:17:04:A1:E3:AE:6C:92:6D:56:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtPbi-01S0eMbRcEoeOubJJtVnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c321a3-d362-454f-8e84-ce6bb71a8da6/1/JtPbi-01S0eMbRcEoeOubJJtVnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:92:2f:01:93:32:19:e4:d0:92:93:2e:d7:9a:91:61:20:22:
         9e:25:5d:1b:89:37:77:8b:0e:91:51:29:88:54:ec:b7:38:45:
         72:72:5b:ce:b4:2a:ac:e5:f3:78:da:7c:32:84:46:10:48:5d:
         b6:1b:59:03:77:78:dc:53:d9:34:d4:20:fc:90:03:14:bb:6a:
         1e:3a:23:e2:1d:72:94:a8:34:e5:47:cf:3f:21:89:c3:ae:f0:
         9d:d7:27:9b:0c:a1:9b:ce:7f:1e:5b:de:49:db:a1:01:aa:45:
         ab:e2:7e:1c:e3:17:78:18:ea:1a:1c:f9:b2:47:6d:bd:5b:69:
         22:1e:fb:65:85:7b:bc:89:a7:e5:76:23:57:cd:cf:50:18:a5:
         e9:bb:d8:3c:81:eb:49:79:41:6e:5c:65:a5:10:72:bd:ff:22:
         30:4c:73:f5:dc:93:5c:5a:f1:c6:06:d8:96:5d:98:ac:f5:c0:
         dc:45:40:2a:47:2f:c2:a1:1f:33:a0:44:3b:fd:18:e4:6d:dd:
         19:ab:f6:ad:55:a7:8b:f6:d3:f4:5a:69:4c:49:57:28:7d:8c:
         5d:89:26:cd:5e:26:1e:b1:1a:85:46:04:da:d6:43:40:d8:25:
         ab:cc:92:63:a3:33:88:56:78:f9:b8:a9:f5:cf:a9:de:da:9d:
         2a:49:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:16 2026 by rpki-client