This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          xqXeVBQNzA9Q/0x1j13q2vbqqsAsM7aIusZITArhr7Y=
Subject key identifier:   32:3C:67:49:EC:6A:C1:D7:39:28:D7:A5:AD:1B:C4:37:98:73:46:ED
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       019C41A24FFC84B575030A7E429F1F1F5911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          157E
Signing time:             Mon 09 Feb 2026 09:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:22 +0000
Files and hashes:         1: O01TpHeHqBiUeJused6g5bROXeI.roa (hash: lprGNMtGbZUy/qu3fbQs2Y1Q7vEBDCNvAujKwUnYorA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: jhE73XH0nKqvd5Ucb0KQLMZsspX/Gg91Vxf3MXALaNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:4f:fc:84:b5:75:03:0a:7e:42:9f:1f:1f:59:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Feb  9 09:01:22 2026 GMT
            Not After : Feb 10 09:01:22 2026 GMT
        Subject: CN=323c6749ec6ac1d73928d7a5ad1bc437987346ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:25:48:ec:19:a4:5e:e7:07:55:04:f7:89:
                    f2:86:98:af:73:b5:3c:ae:a9:1b:59:f5:b3:62:f0:
                    f8:7a:b3:2f:f2:37:66:bc:83:a2:84:61:6b:67:0e:
                    92:bb:17:98:09:a5:4d:4a:6f:db:40:40:e5:0f:ca:
                    e8:2b:06:52:de:e5:cb:a4:99:61:1e:c3:6a:19:e9:
                    04:77:94:a1:25:29:85:7a:6d:1a:fd:50:90:ae:50:
                    fe:1f:54:02:1b:1b:01:8f:f8:98:df:6e:c2:82:0d:
                    a5:74:f1:88:f7:da:b8:f8:16:bc:ae:5a:ed:b4:ba:
                    9a:dc:3b:d4:d3:3c:15:59:03:26:42:b1:2e:9f:14:
                    d5:8a:3e:b6:fb:c3:3b:28:62:b4:39:7c:22:bd:ca:
                    73:f1:b3:0c:12:14:80:5d:eb:e2:41:87:7f:c5:a8:
                    7c:79:de:f1:77:4f:46:1a:2a:68:29:67:a0:94:e1:
                    bf:36:ba:77:5b:73:b7:ad:fe:09:00:5b:89:72:bb:
                    71:6f:58:78:08:19:17:8d:fa:91:21:1c:8d:6f:3c:
                    ac:41:42:35:1f:a7:56:e6:2f:07:09:c5:ad:36:df:
                    8a:13:33:22:3c:9d:4d:27:e0:6e:41:1d:dc:ae:d1:
                    ad:e4:20:ac:50:9c:7c:fb:9d:9d:2e:0c:5b:6c:a7:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:67:49:EC:6A:C1:D7:39:28:D7:A5:AD:1B:C4:37:98:73:46:ED
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:b8:5f:4b:a7:18:91:06:ac:19:af:cb:5e:70:08:d3:ea:
         d9:8c:a0:f8:e2:c0:32:e2:82:7f:e7:44:72:eb:d2:66:67:3b:
         ab:cc:4b:63:bd:f8:96:9a:20:3c:ca:aa:fe:df:03:c1:7d:90:
         75:ba:e1:2f:91:82:eb:1c:42:63:25:34:cf:00:43:19:33:5a:
         92:c7:4d:b4:f5:d0:ab:10:ee:b0:ae:e7:58:fe:63:1f:3e:ad:
         22:c5:d8:fa:45:d3:93:3d:d6:c8:3b:a0:1e:c8:65:a3:db:29:
         24:2b:97:66:a9:da:ba:dd:04:42:ee:b0:ce:4e:09:99:c5:41:
         30:63:dc:c4:36:73:ef:3a:00:e7:9b:b7:0c:92:58:25:b2:43:
         eb:d0:10:43:1f:02:87:43:61:51:d3:d5:f5:e1:4f:7d:24:61:
         07:1a:dd:2c:6b:bb:c8:63:cb:13:44:2b:dd:e9:73:66:e0:45:
         9b:19:73:d6:a1:44:80:a0:87:d4:e2:46:7f:c7:78:96:17:4d:
         75:79:cf:12:e8:7b:b1:da:a4:92:3c:fb:3d:d9:f5:cc:17:9c:
         bf:fe:37:db:87:74:af:9c:57:c7:a8:34:78:ff:a5:6f:10:33:
         9f:2c:01:86:2b:ee:dc:57:a2:d0:1e:e9:f9:62:90:25:3a:bc:
         a0:eb:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:45 2026 by rpki-client