This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
File:                     jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft (raw, json)
Hash identifier:          XwbSdibkyzwc6jzJMsOkifzFSiAzpsTVLR7WFQL7Rik=
Subject key identifier:   7A:D0:8D:D9:16:20:2E:E6:D5:09:C0:22:92:E9:DE:A4:67:3A:34:6B
Authority key identifier: 8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA
Certificate issuer:       /CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
Certificate serial:       019C43FDE74C3C0234069BD245E6C3FEF8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:38 +0000
Files and hashes:         1: 1--5uI7-lFA1vLc5OGC-ol-YopyQ.roa (hash: oRVTaOt3U0YoXKj3+Sn3M9/Gmc3MrUZYmaGBPKb5vvw=)
                          2: jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl (hash: fboLgHLTjmq54YqAanf+dNuEKp+Q/rBY0FBTuLvMfUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:e7:4c:3c:02:34:06:9b:d2:45:e6:c3:fe:f8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e594bb26e9c08e6fc4736caa5d3c200854dea
        Validity
            Not Before: Feb  9 20:00:38 2026 GMT
            Not After : Feb 10 20:00:38 2026 GMT
        Subject: CN=7ad08dd916202ee6d509c02292e9dea4673a346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:40:92:ee:61:45:73:84:a4:2b:37:50:c2:
                    1d:7c:b6:3e:68:12:56:45:28:56:fe:41:f6:d6:01:
                    6a:9d:fc:76:2c:fb:3a:c3:06:2a:57:bc:04:1f:96:
                    b1:53:a8:0f:2b:c0:0b:84:40:03:06:df:62:03:d5:
                    7b:26:93:09:a2:5b:b5:77:d5:c1:9a:f4:40:ba:5d:
                    f4:32:f1:15:f4:06:3a:b9:79:2a:b4:17:41:3e:e1:
                    5c:a9:fc:dc:1f:1f:fa:91:b1:7b:8f:44:c3:59:26:
                    51:5f:87:85:7f:c1:a7:e3:41:37:91:1e:bc:fe:31:
                    61:63:d2:d5:38:67:8b:c0:b0:d2:e5:59:3a:0a:9d:
                    9e:01:64:f3:06:4e:94:a7:98:63:fc:8d:cb:d1:b8:
                    61:b9:82:fd:4b:1b:c5:1c:be:ce:c0:c3:aa:91:54:
                    3b:33:6a:52:61:9b:d5:c6:7d:08:3d:36:1d:a1:e8:
                    2b:30:db:a8:b5:aa:01:20:bf:04:15:7b:34:38:f6:
                    86:3b:90:0d:34:cf:89:c7:e3:22:3d:32:02:37:b0:
                    80:ef:e5:8b:8f:0d:7b:2c:76:cd:6f:cc:d3:e8:64:
                    a2:31:bf:2c:9b:53:c7:7c:25:34:a3:1d:8c:fb:bf:
                    cb:72:4a:da:69:8d:2e:83:fd:f8:ea:93:8f:b8:2d:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:8D:D9:16:20:2E:E6:D5:09:C0:22:92:E9:DE:A4:67:3A:34:6B
            X509v3 Authority Key Identifier:
                keyid:8D:3E:59:4B:B2:6E:9C:08:E6:FC:47:36:CA:A5:D3:C2:00:85:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c75317-d5fd-4a24-8714-e7dee9a7cad5/1/jT5ZS7JunAjm_Ec2yqXTwgCFTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:e3:4b:1e:bd:6b:03:c6:4e:c6:01:82:04:de:6f:35:d7:
         8b:7a:33:ab:bd:96:88:79:ee:65:80:7e:83:10:19:57:a9:c6:
         b5:dc:fa:85:8d:e2:af:d7:08:1d:46:92:23:51:d6:ce:04:7a:
         b5:79:78:91:db:49:b9:07:2e:91:57:1d:17:54:42:e9:e5:6f:
         2d:c4:d5:e5:10:74:d4:98:d3:da:35:3a:f8:18:78:b6:02:91:
         3b:c4:55:2a:e2:04:52:fd:b5:c0:93:3c:04:2d:59:40:10:88:
         e0:5d:bc:3f:21:4b:42:41:f2:92:0e:f7:23:0c:20:bd:e8:db:
         01:4d:9d:9f:46:cf:ac:cf:ca:72:35:8f:c9:85:6c:bb:70:c6:
         ab:f0:36:1a:bb:4d:2c:63:fd:33:fd:6f:d1:20:ae:fb:ca:21:
         c6:03:30:55:7e:87:4d:8f:73:af:93:ab:92:bf:da:88:c6:88:
         1e:21:2a:2a:db:cf:e6:cb:1f:d5:84:11:7a:4a:99:e7:57:09:
         25:27:a0:e2:da:b2:4a:d7:60:57:af:66:d3:5d:3a:cf:93:8e:
         ab:fd:aa:c3:3d:1f:c3:92:ba:75:92:8c:3e:14:16:e9:da:b0:
         ee:39:60:0c:3c:fd:22:ea:52:82:fa:0b:de:ce:70:a9:f2:e4:
         cd:e7:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:29 2026 by rpki-client