This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
File:                     JXjmbXV_leptaTqn-E_LJ0l1yLs.mft (raw, json)
Hash identifier:          y8CQfAExPKa0biZmhMZiSvLyf40z3yLbM5w8ujJWc+g=
Subject key identifier:   AB:86:10:C9:DB:DA:C4:51:82:6A:A4:43:E8:49:58:42:4A:67:1C:C0
Authority key identifier: 25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB
Certificate issuer:       /CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
Certificate serial:       019C427D0B2130424E97C81A161DE6522D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
Manifest number:          08AC
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: 3RcYNcaV_HxsbvSRBKmeMn-8kXQ.roa (hash: UxELvj3/BwuEYvPZpfgXSHe6qxTJGCYo6ChpgKnBJA0=)
                          2: JXjmbXV_leptaTqn-E_LJ0l1yLs.crl (hash: dlUjsxPDf3+IzJ/CKeDJ8gGc2CVoEeEJML7Fjo//hdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0b:21:30:42:4e:97:c8:1a:16:1d:e6:52:2d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=ab8610c9dbdac451826aa443e84958424a671cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:92:cb:eb:63:4b:b9:7f:e9:0e:92:8e:99:
                    f7:02:32:ee:07:6e:12:8d:6e:c0:fa:7a:fc:dc:85:
                    cf:43:a4:a4:7f:7d:56:85:55:a0:56:67:4d:17:9b:
                    82:83:ca:82:49:50:10:1f:4c:10:1f:c8:e2:b8:18:
                    e4:77:39:e3:c5:6c:9d:9a:96:bb:39:db:bd:78:21:
                    8e:3c:7d:e9:75:4f:c0:6c:0a:a4:e1:71:61:b6:e0:
                    74:10:ec:2d:65:df:b3:db:00:a9:bd:90:a7:de:c6:
                    95:d6:a0:ba:83:77:37:c2:53:d3:29:d1:13:e3:a5:
                    0a:27:0b:00:61:bb:7f:43:06:03:93:db:5d:96:50:
                    a1:18:74:7a:ee:4c:b8:c4:bd:8c:f2:69:09:d5:70:
                    61:7f:51:f8:5d:9b:5c:81:76:b2:46:05:11:e6:a7:
                    ba:0e:32:e5:3d:4a:bc:aa:06:e0:ed:7f:f5:a9:36:
                    de:c5:99:27:68:0e:61:6b:51:e4:d1:0c:c2:dc:b7:
                    ed:ca:f0:46:6b:d6:07:03:95:8e:96:6b:6b:07:7c:
                    06:3a:35:d0:c4:b9:bb:7a:07:e5:cd:c2:36:56:2f:
                    3b:20:4f:15:c2:e0:25:c6:13:fd:90:2d:47:99:60:
                    c3:f8:e9:93:72:5d:1a:e7:0d:a7:23:13:f6:9d:fa:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:86:10:C9:DB:DA:C4:51:82:6A:A4:43:E8:49:58:42:4A:67:1C:C0
            X509v3 Authority Key Identifier:
                keyid:25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bf:6b:0d:73:07:f7:c3:29:90:2a:24:84:ab:17:85:05:b5:
         cf:f8:a5:14:cf:68:c1:67:37:31:f4:85:4c:65:3a:e0:d7:bf:
         29:6c:a7:df:23:e7:fd:08:39:5f:d4:a5:68:86:f7:f4:6c:78:
         4e:8b:f8:87:c8:8d:09:1e:a2:67:be:e2:58:b8:0d:09:d3:42:
         18:d0:85:57:c8:cc:d7:d7:06:e5:cb:1a:7f:b1:de:cc:f6:8f:
         9e:52:36:e8:c7:23:01:0f:44:57:ee:d8:61:61:2b:62:53:45:
         69:1a:1f:de:c5:4d:19:27:0e:ac:4d:cf:a9:0d:89:03:da:05:
         10:95:bd:9b:f3:64:54:c5:eb:75:a5:22:9d:d9:77:13:d8:a0:
         09:20:31:c4:27:e8:6d:26:71:9a:92:3a:fe:8e:24:e8:49:7e:
         7a:5e:1b:1b:27:3c:f2:7a:0c:28:56:58:48:95:ea:54:58:5e:
         b0:4f:3a:cd:89:8c:09:4e:f9:ab:6d:1d:ce:b6:5c:9b:71:d2:
         15:f7:fc:74:c9:94:dd:8e:a4:33:f2:8a:cc:65:21:53:db:55:
         4d:ee:16:c3:ae:ed:46:05:9c:a4:1b:c8:a7:1a:27:6f:4c:86:
         bb:2a:20:46:43:35:2d:4e:4e:ff:74:87:12:8a:bd:75:b4:ac:
         61:9d:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:14 2026 by rpki-client