This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File:                     jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier:          54W2ODRqUz/VmQaFYPMLkkwCeQNca1GAozTn0YcOO/Q=
Subject key identifier:   EA:DD:BE:5B:7E:DB:4C:E3:7F:A3:17:18:63:EE:E1:B2:49:BA:0E:13
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer:       /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial:       019C446BF0669A987EDD64F49CEAF0D2C110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number:          1817
Signing time:             Mon 09 Feb 2026 22:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:50 +0000
Files and hashes:         1: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: BNC5wgrzoG2szwM0IbpDMA+IVVpraalzuXmUqISEHJU=)
                          2: pwRfNzXMGOEuy9-A9ygooZEM6n8.roa (hash: sFyYjRFOUtVZQUg+k6G6omkeszu0+pmN0gGghnRFGQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:f0:66:9a:98:7e:dd:64:f4:9c:ea:f0:d2:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
        Validity
            Not Before: Feb  9 22:00:50 2026 GMT
            Not After : Feb 10 22:00:50 2026 GMT
        Subject: CN=eaddbe5b7edb4ce37fa3171863eee1b249ba0e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:d0:bb:a6:9f:8c:09:be:0a:8e:fb:b8:79:
                    b5:e3:ae:3e:2e:44:9d:69:7c:39:89:a3:d5:1a:ef:
                    6c:e7:d0:f9:1c:d6:40:76:26:41:88:37:84:6e:38:
                    66:6b:48:6a:60:8c:3a:0b:98:89:d1:51:7e:71:e9:
                    2a:93:2d:c4:80:e4:68:8d:19:e9:d0:35:3a:f8:bf:
                    24:b6:2c:f1:92:87:a1:95:5b:4e:ae:a0:61:aa:a0:
                    db:8f:8a:83:8b:35:82:3d:56:cb:95:f0:55:5f:89:
                    13:32:9d:7f:82:c6:1b:65:6b:9b:1a:1c:ee:9c:55:
                    54:4b:ae:51:50:e1:8a:26:6a:13:8e:48:61:ce:3a:
                    80:52:bd:9f:28:3e:62:b4:70:37:18:76:26:e7:7f:
                    ab:7c:26:ed:57:49:03:38:86:69:5c:32:83:12:51:
                    51:c1:df:e9:4e:fc:14:d8:af:4e:6e:b7:47:e5:2b:
                    e1:98:b0:74:1a:55:30:69:4d:61:51:17:08:b3:0e:
                    bf:b6:c2:62:6a:6a:f7:a7:a2:1d:b9:df:15:f9:3a:
                    28:65:10:1e:31:bf:85:bc:c1:46:3b:76:34:75:3c:
                    26:be:f1:58:4c:a7:8d:86:c0:3b:dd:fa:e2:59:23:
                    f0:71:6c:d5:06:e4:8f:0b:5f:10:92:f8:24:ea:8a:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DD:BE:5B:7E:DB:4C:E3:7F:A3:17:18:63:EE:E1:B2:49:BA:0E:13
            X509v3 Authority Key Identifier:
                keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:40:4d:17:56:df:7c:a8:20:fa:ab:1e:3b:ab:5a:9c:f2:
         f8:cc:fa:00:aa:31:2a:6f:c8:11:d4:bd:aa:c8:ec:b5:4e:6d:
         b1:97:bb:3b:63:8b:ca:05:fc:79:c0:31:36:1a:8b:93:f1:ae:
         b0:a1:77:e7:3d:42:7b:6d:ae:40:67:f0:2a:1a:9a:e4:4f:81:
         ff:fe:80:d0:9d:14:db:ac:19:e6:af:15:5f:69:98:98:56:5a:
         a0:ef:2e:30:5f:44:37:c5:0f:22:a6:da:82:74:30:88:99:54:
         c1:26:f2:e5:06:9d:89:78:82:9a:bf:09:8f:8a:76:f9:3f:bd:
         55:bb:b1:ed:b2:8c:66:49:82:d9:39:a6:78:55:c9:02:05:67:
         7b:27:28:2d:15:cb:8e:96:9b:39:cc:e3:a6:e4:fb:d6:e1:b2:
         37:ab:d6:1d:69:de:94:62:a7:4c:d3:8e:b5:ce:3e:41:8f:54:
         0e:67:b6:fa:55:c4:88:f0:e4:c3:ed:11:bf:2b:fa:f5:7e:11:
         54:67:00:b5:ab:10:a7:b5:a0:02:a5:65:e8:6c:2c:d3:21:cf:
         8d:16:42:c8:30:67:d0:d1:5f:66:df:ac:dc:9a:31:1d:5f:bb:
         32:3f:86:4c:5b:ca:4e:97:f0:ab:2a:68:a5:f7:3b:ec:c7:29:
         f7:40:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:49 2026 by rpki-client