This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File:                     J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier:          /5a5QaIB/AMJ3DpF+V1XhXFvSAX4dD1XcbP/RVuTc+A=
Subject key identifier:   86:11:9A:F2:61:D5:61:00:BB:1F:FA:60:A9:D9:6D:44:94:23:14:CB
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer:       /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial:       019C43FE2F546877BADFFC1E9CADECBF96C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number:          0EFC
Signing time:             Mon 09 Feb 2026 20:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:57 +0000
Files and hashes:         1: 1fpQlBlZNTYlkF-qEKj33K1FJqM.roa (hash: S56U8pRP1AVtpcAW66WhCd3vXonP456VUW1c22wHBzM=)
                          2: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: wI2YET12dUW+wmBAurotiQNRRnblvnIr1Na1WlV7/eE=)
                          3: Y4zsoHDrVMPcu-R8PV2UYMlFVJs.roa (hash: /HK4f/kDKpNIzHK5rblbzw+upNbRr54CVkE3fI0aAtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:2f:54:68:77:ba:df:fc:1e:9c:ad:ec:bf:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
        Validity
            Not Before: Feb  9 20:00:57 2026 GMT
            Not After : Feb 10 20:00:57 2026 GMT
        Subject: CN=86119af261d56100bb1ffa60a9d96d44942314cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:2a:34:46:08:1e:32:ba:ad:8d:81:ed:55:
                    d7:9c:4d:f2:50:3c:1f:a8:2d:61:ab:14:36:5b:de:
                    38:d7:5c:3a:5f:b7:81:49:41:0a:e6:53:ca:a6:ef:
                    8f:e6:89:a7:60:a0:14:cc:66:ec:1e:84:27:68:d2:
                    27:2e:60:a7:2a:89:88:92:da:ba:22:12:5d:da:7f:
                    ec:6f:0b:68:7c:90:5a:72:40:d1:40:39:89:22:c7:
                    da:a0:fc:84:fa:a4:ea:40:a2:db:b6:7c:52:2f:50:
                    c9:6a:51:e3:cc:06:67:1d:a7:cf:c4:56:6d:94:0c:
                    7b:6b:4f:9c:eb:fa:da:eb:3b:b6:54:d7:2e:5c:30:
                    53:bf:49:02:ec:09:cc:4f:72:25:7d:b7:23:b8:bc:
                    cc:4a:bc:89:02:c8:bb:e3:30:90:7d:a0:ba:71:89:
                    69:4b:aa:85:79:33:26:3e:56:f0:80:8d:67:34:4f:
                    b7:f3:d4:d8:af:43:78:21:c4:24:35:11:4e:82:f0:
                    f1:93:29:ae:f7:1b:59:42:9d:50:3c:d6:98:c2:7f:
                    f6:fc:9a:cd:7a:05:0c:1c:8e:24:2a:57:8a:25:b8:
                    7a:32:4d:27:d8:33:10:60:c6:03:64:cf:37:27:bf:
                    f4:16:0b:71:d4:fa:c4:66:8c:9f:6d:f0:1d:b3:07:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:9A:F2:61:D5:61:00:BB:1F:FA:60:A9:D9:6D:44:94:23:14:CB
            X509v3 Authority Key Identifier:
                keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:2c:03:58:8d:2c:6d:c3:9c:dc:2c:e1:73:35:89:23:b9:
         c6:74:36:d7:79:50:45:f1:2f:91:1e:73:b3:d8:5b:ac:28:23:
         e2:62:fa:7a:cd:46:a1:ab:a3:ad:ae:8c:91:63:d0:f5:27:8a:
         64:40:c6:39:07:bf:7c:5b:b9:d0:47:19:3a:24:43:54:49:97:
         75:e9:ea:09:a2:1e:79:83:e5:5b:af:04:e3:b3:7f:df:79:3f:
         6e:ac:94:19:16:0e:57:98:c2:37:e4:2c:13:cc:6d:b3:11:f0:
         b8:e4:f9:f3:ae:a7:bb:af:fa:36:83:fe:05:4a:49:42:00:8d:
         f4:dd:6e:4d:29:fb:1a:dc:36:20:9f:14:cc:6a:d5:17:ae:ba:
         b2:78:ab:7f:d8:fc:7f:b8:70:0a:ee:f1:d7:cb:b3:5b:d0:d6:
         ec:53:96:ce:7c:e2:b7:b0:72:76:48:a3:ba:7c:eb:67:ac:08:
         b3:8f:16:c3:4b:36:84:b9:b0:ae:f7:5a:35:0a:56:ce:9f:fc:
         cf:7e:21:d2:25:a9:99:0a:27:73:e2:01:7b:cf:c1:db:35:aa:
         ac:0e:1d:83:55:8e:eb:75:ba:a9:ec:68:75:76:75:66:8a:54:
         24:bc:ef:ea:1b:26:c9:02:79:ac:df:f9:1a:ed:3b:7d:60:f0:
         ff:af:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:50 2026 by rpki-client