This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          XMus42S/Grtz8/BuHHVb3MjKZAeqrC01QPC+v5DJgsI=
Subject key identifier:   10:30:C5:F7:BC:C2:81:DE:E4:CE:3A:72:93:9E:28:9D:38:56:70:8A
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019C1C15387D46D1672006974588FD6FD5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          C9
Signing time:             Mon 02 Feb 2026 02:01:18 +0000
Manifest this update:     Mon 02 Feb 2026 02:01:18 +0000
Manifest next update:     Tue 03 Feb 2026 02:01:18 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: J2mu8IOw7gzaD6jVfOushJmYsHteGPm/gwEhGJ+GK0k=)
                          4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:15:38:7d:46:d1:67:20:06:97:45:88:fd:6f:d5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Feb  2 02:01:18 2026 GMT
            Not After : Feb  3 02:01:18 2026 GMT
        Subject: CN=1030c5f7bcc281dee4ce3a72939e289d3856708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c5:e7:09:fa:a9:be:39:b7:d3:d1:16:44:89:
                    ab:b3:00:9d:32:d3:ee:fe:3f:7e:cb:c6:b5:e1:ff:
                    d7:f5:2b:16:de:87:cd:ee:fe:5d:f5:38:a8:74:66:
                    2f:84:ed:66:5d:d8:4d:76:52:54:7d:31:32:4e:40:
                    1b:a5:27:17:86:8d:c3:72:b5:e2:c7:d5:14:f1:43:
                    69:47:f6:2a:05:b9:dc:e0:c4:4d:0c:1d:52:df:c9:
                    c3:aa:16:ba:ce:0c:ea:a9:8f:ce:8d:bf:a1:72:dc:
                    78:7d:e4:ca:ae:57:d2:9d:d7:19:f9:67:f5:75:a4:
                    44:a4:3a:e1:ac:c8:83:f8:39:0e:c7:fb:4f:a1:52:
                    24:97:fe:8a:8d:2d:9b:cd:20:74:d8:5e:74:ac:ed:
                    c9:05:ad:58:07:62:10:2b:a3:e2:c5:03:3e:71:65:
                    56:a8:e4:50:59:e9:6d:d5:93:b6:83:60:68:c5:af:
                    c5:83:dd:37:6c:ff:47:18:37:a0:1a:53:41:b4:37:
                    34:0c:7d:db:aa:d4:c3:a1:12:8a:55:42:5c:44:32:
                    75:b4:9d:7c:f0:96:73:26:53:24:86:31:95:81:e6:
                    25:32:fd:08:81:02:db:b7:5c:53:cb:47:66:0a:bc:
                    06:e0:db:ab:21:39:12:99:c6:b0:d5:1e:d4:2e:a1:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:C5:F7:BC:C2:81:DE:E4:CE:3A:72:93:9E:28:9D:38:56:70:8A
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:38:95:e8:21:9f:b8:39:5f:29:41:54:c8:e6:76:4e:84:01:
         3b:48:ed:ec:fd:7b:ef:b8:7b:52:45:66:38:b3:32:29:d3:6d:
         0e:35:b2:a3:29:2e:51:8c:d8:09:b7:82:b9:2c:21:43:1d:a0:
         29:5f:4c:1b:84:b0:ca:f1:55:65:57:38:a5:f5:b6:66:b4:d2:
         4d:b2:27:c9:33:55:fa:67:ca:ba:f5:b0:d4:80:dd:52:3e:75:
         bd:4d:84:c3:46:b2:01:5a:05:b1:1e:89:23:dc:c5:a2:12:14:
         fa:67:b0:17:5a:73:fa:4c:48:f6:45:e4:c2:96:61:d3:82:8f:
         e5:86:f8:5a:e4:bb:37:86:29:7c:1a:17:d2:45:2e:ff:f9:32:
         bd:95:9a:7b:b5:a2:0b:9c:d5:15:0e:71:11:09:f2:ac:3e:7b:
         f8:b3:a5:a6:8a:4f:94:49:7b:1e:28:5a:e5:20:d4:98:3a:6e:
         06:e1:71:de:91:eb:20:c2:e2:ac:ce:b8:be:14:f1:62:e8:de:
         d3:78:ba:2b:c2:d4:04:bc:9d:c4:71:1e:38:64:b1:49:58:f2:
         f1:bd:0b:b6:1c:3d:2e:a0:92:46:36:af:3a:15:79:eb:f2:89:
         a0:96:cd:c5:73:7a:46:89:8e:11:77:90:cf:93:9d:12:3e:6a:
         c1:a4:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:09 2026 by rpki-client