This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
File:                     jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft (raw, json)
Hash identifier:          ea2TrkpmH7wva2vrVjWo41/KFMsXT1yCaYD3c/74/v4=
Subject key identifier:   0D:15:4D:57:2F:27:B7:A1:1B:0B:AD:A0:0F:A5:AD:33:46:DC:FB:61
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       019C27068C8DE6AE09B42EBDF78A7CF75DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
Manifest number:          13ED
Signing time:             Wed 04 Feb 2026 05:01:06 +0000
Manifest this update:     Wed 04 Feb 2026 05:01:06 +0000
Manifest next update:     Thu 05 Feb 2026 05:01:06 +0000
Files and hashes:         1: 0Q-Zfa5EM9tNo04k8RE6e6TtkfU.roa (hash: RGjdNXoSFFGrfTu/Ti51Lk+K5F2xhb4depOlZwB8FXE=)
                          2: 1qpX2cPG5_nkbMnEo1efuLPeHZ8.roa (hash: spDyNX8ekUn+reTXNALqP0weIlhwk99TCbZoof+/3iU=)
                          3: 6XbdzZ0343AiAMot2lsEtL8Y73k.roa (hash: RKYj6u+oIhdczp8YiuEdWuaseQogktsrdHlUVZ+HEQQ=)
                          4: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (hash: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk=)
                          5: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (hash: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU=)
                          6: ZpiZYChv03XcXjWFsXMCV1QM0HU.roa (hash: wmoSAUcGUPypcaj5YjtRFn3oVWGJ3KsONwwVdodfB08=)
                          7: jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl (hash: +3GbKChtSQtDVBvvs2PDxRNZrTgr+c1Akv9lTleB89w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:06:8c:8d:e6:ae:09:b4:2e:bd:f7:8a:7c:f7:5d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Feb  4 05:01:06 2026 GMT
            Not After : Feb  5 05:01:06 2026 GMT
        Subject: CN=0d154d572f27b7a11b0bada00fa5ad3346dcfb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:54:f6:ac:55:92:fe:22:e8:25:b3:02:41:
                    87:ae:6b:9e:dc:64:dd:ea:ea:2e:63:4a:b9:57:1b:
                    0b:3a:2a:6f:01:7f:a0:fa:b6:1a:98:cd:8a:95:25:
                    cf:19:16:b6:b6:f4:f4:4c:b2:a8:a6:4d:ab:4e:21:
                    7b:ce:35:f5:d7:66:d4:ce:ed:cf:31:9f:16:f3:51:
                    d6:80:f6:88:bf:56:db:25:4c:ac:c5:96:08:b8:ec:
                    9d:a7:11:a1:08:3c:77:d6:54:b9:d3:e9:23:f3:bf:
                    e1:91:6f:c7:94:06:d2:b1:e1:47:ce:f2:52:61:dd:
                    f3:af:d3:77:c6:48:8e:4e:6a:d4:ac:7e:80:c5:65:
                    c9:4d:5d:a0:76:f0:6c:df:4c:c3:5e:d4:f9:d9:3b:
                    e2:2d:a9:bc:b9:d7:31:b2:31:c2:ba:5e:67:b0:c3:
                    b5:4c:b9:56:60:6d:51:b0:61:98:c0:3c:db:9b:a6:
                    71:85:60:6d:af:c4:f3:af:4b:c0:83:0c:b1:40:5b:
                    b8:7c:f5:76:75:cd:ba:47:25:6b:59:9d:23:4b:1b:
                    51:51:d4:e2:59:ff:39:0e:c1:fd:df:ea:9b:ff:c9:
                    b8:62:c2:51:64:87:97:dd:de:67:cd:f4:43:47:b0:
                    df:e9:b0:c2:cd:d9:ec:a0:6e:0b:a8:48:12:63:8b:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:4D:57:2F:27:B7:A1:1B:0B:AD:A0:0F:A5:AD:33:46:DC:FB:61
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:34:63:fb:a6:1d:b7:24:80:5b:9c:ac:89:16:69:6d:0a:34:
         e0:49:61:30:70:1f:87:92:b2:4c:47:a6:bc:89:e5:81:3e:b5:
         97:23:89:4d:dc:f8:8d:53:b7:bb:f6:63:32:e4:49:17:b8:08:
         10:65:4a:e9:71:2a:7c:60:00:0d:60:93:a2:95:cf:4f:aa:56:
         a5:ff:68:08:0b:9d:46:3f:8e:8c:e0:09:e9:b6:9c:d1:e4:c9:
         ed:35:0b:9c:78:f4:81:31:76:6c:1e:f7:4d:67:da:f7:c8:8e:
         06:c2:e4:62:2a:26:1d:53:95:05:f8:81:2f:c1:82:ee:52:11:
         f7:77:24:48:86:ca:ad:e6:55:2b:e6:1f:22:69:03:c9:84:20:
         d4:91:4d:2f:37:11:b7:4f:51:80:12:54:0a:df:f7:fa:0e:97:
         a4:43:65:89:6a:a8:f5:e9:f6:a8:51:43:c7:60:ef:05:f0:85:
         d6:b7:cb:22:70:f8:5a:f7:06:46:82:a8:65:41:67:39:9a:c2:
         a1:bd:5e:83:81:ab:85:93:51:69:b2:95:7f:06:24:97:dc:2d:
         41:15:2e:00:77:e5:a0:1f:48:7b:e9:aa:6a:81:73:37:ba:18:
         67:25:7e:19:6f:86:0d:bc:a4:a4:25:f9:5e:e5:23:51:52:09:
         fd:0d:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 08:29:37 2026 by rpki-client