This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File:                     8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier:          MaPD+I6QRy3N293KL3VhOsxoRp2bvAXPjOmcs8ugs0o=
Subject key identifier:   7B:11:EE:41:25:29:ED:87:56:2E:F9:B8:41:88:D4:8F:F7:D2:F8:7B
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer:       /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial:       019C43C73606195424E347D657719FD2567D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 19:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:54 +0000
Files and hashes:         1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: zmb+gXyxANMJz1JDsSImMU1DA1q2oFYuS3qImZ++2q8=)
                          2: G0gRp1hMj3IVrRMDtVlrM5GgoMQ.roa (hash: sfK58h/s6Lw9x7/XNuXAh6Lj4orMmzdUBf2OZPGupM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:36:06:19:54:24:e3:47:d6:57:71:9f:d2:56:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
        Validity
            Not Before: Feb  9 19:00:54 2026 GMT
            Not After : Feb 10 19:00:54 2026 GMT
        Subject: CN=7b11ee412529ed87562ef9b84188d48ff7d2f87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:63:2c:51:c6:cc:2c:c3:82:ac:c8:bb:84:
                    aa:16:37:cd:74:72:6b:14:66:61:f5:26:08:fd:24:
                    87:56:25:5b:cd:a7:5f:26:d4:86:77:fe:8b:d7:18:
                    6e:6d:10:b2:35:3e:d1:49:c3:f0:e7:ec:d2:35:af:
                    42:d4:af:15:ac:45:5c:40:1f:db:29:3d:b1:04:e4:
                    ec:98:c6:1b:4b:1f:5f:46:a7:f8:26:d9:bf:25:8f:
                    60:ad:b1:04:48:d8:23:15:d8:2b:54:ec:57:27:4b:
                    70:b6:49:ec:d2:4c:8a:d6:c0:37:f0:9e:08:bd:cb:
                    f3:1c:78:d3:8a:02:e5:2f:2f:b3:e1:d8:b9:6f:f1:
                    02:25:17:5c:3f:c0:9d:ec:96:81:51:cc:39:6a:68:
                    3e:21:a4:4d:26:ca:90:91:45:28:ec:e1:c1:a4:b2:
                    21:be:e2:f1:bd:57:eb:73:25:3a:eb:ef:1b:8d:57:
                    58:54:ec:f4:0c:7c:61:94:d4:e3:f9:54:c7:af:6c:
                    28:24:3a:f7:bb:5f:98:c4:83:a4:79:dc:98:d3:c0:
                    25:f2:dd:ae:16:2b:a0:d9:3a:71:c2:a8:4f:10:b7:
                    22:46:e0:cc:32:49:6b:22:ab:20:7d:85:8d:45:59:
                    49:1a:7b:86:4b:40:11:cd:77:fb:7f:f7:93:84:c8:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:EE:41:25:29:ED:87:56:2E:F9:B8:41:88:D4:8F:F7:D2:F8:7B
            X509v3 Authority Key Identifier:
                keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:11:a4:8c:70:3e:15:dc:50:03:bb:6c:a6:4a:dc:c6:72:
         4d:7f:75:3c:c2:3d:48:58:2d:28:fa:fc:74:de:14:84:de:88:
         43:35:1b:65:45:e9:d9:df:e5:5e:4a:57:88:fc:50:4c:3b:96:
         2b:fe:8a:68:6c:1f:ff:32:f3:e1:3a:48:3c:65:43:cd:61:2a:
         26:22:fe:39:8d:1b:1e:f1:da:3c:19:8b:3f:6b:cf:ad:3d:5d:
         56:ae:74:9c:c7:9b:d3:31:a8:f2:69:46:a3:a4:ba:7a:2e:67:
         64:66:22:79:88:5b:3e:ed:9d:6c:55:82:c0:4c:2a:e0:4f:39:
         d0:37:c2:05:44:9e:18:1b:77:e4:57:bc:e0:5a:f4:1e:6b:29:
         cc:22:f1:92:63:f4:6d:ec:d0:1b:f4:8c:9d:af:2b:c8:60:08:
         46:ac:da:40:92:16:cb:8c:6d:17:91:a8:79:cf:85:71:6b:f0:
         ad:bf:70:e0:00:b9:52:12:da:5e:85:21:ae:fc:64:ea:0a:b5:
         90:21:a7:fe:3e:18:94:0d:8d:e7:20:89:12:0d:8c:8b:4f:05:
         63:7f:1c:3f:e0:8b:d9:1e:fe:7b:de:1a:ee:ab:e3:bb:9d:f4:
         c8:c7:34:76:6e:00:4a:5a:92:4c:3a:c8:9d:06:a6:5a:4e:44:
         80:cf:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:41 2026 by rpki-client