This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File:                     JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier:          vGFRKTfq7Xcz2oYRjJ9m8PAMC0E8Qx9Lx2qUfIfycKA=
Subject key identifier:   6A:5D:78:3A:18:CB:33:67:CE:8E:40:18:1B:22:48:51:ED:14:80:86
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer:       /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial:       019C43C70DC4645E22B07D6D55DF4AF2D811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number:          069F
Signing time:             Mon 09 Feb 2026 19:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:44 +0000
Files and hashes:         1: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: wTBJkIIteCpi1yV8a+6j48oEeoe0diYSfaMaVsr2w4Q=)
                          2: pCSMBqmn-2xkRzGOrRbDhgjt1ZQ.roa (hash: qEIf3vrVO3maTFTQZWMGFxBk+5hFDaz1/E5BMr9cl+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:0d:c4:64:5e:22:b0:7d:6d:55:df:4a:f2:d8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
        Validity
            Not Before: Feb  9 19:00:44 2026 GMT
            Not After : Feb 10 19:00:44 2026 GMT
        Subject: CN=6a5d783a18cb3367ce8e40181b224851ed148086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:8c:2b:28:d7:39:2a:cd:55:b5:5d:00:39:
                    b6:d9:d3:5a:c4:15:a1:f3:bd:42:ad:87:bb:55:8e:
                    db:d8:41:5b:31:1d:fe:f5:a8:28:d8:a9:f2:11:6f:
                    d0:81:2a:a0:e6:f6:c9:11:e7:92:e3:6d:d2:7b:f7:
                    50:14:8e:97:33:38:cd:5f:62:15:6e:f6:70:4c:24:
                    c4:4d:25:a6:b5:0f:37:2c:9c:68:31:fa:0b:6d:fa:
                    f4:e0:d4:cd:16:3d:1e:3e:c8:a3:6b:7a:78:f4:b7:
                    42:9e:35:09:a7:b2:7b:cf:35:04:bc:42:fc:98:1e:
                    4e:a9:f4:27:20:53:c4:76:4b:72:cf:04:8a:51:0b:
                    f0:5b:9e:89:e7:5d:f4:0e:8d:83:1c:bc:71:e2:ef:
                    7e:5a:d4:a2:04:96:ce:af:ea:46:5a:98:2e:0a:0f:
                    96:ab:74:f1:d5:a2:00:70:ac:cf:c8:2f:13:02:bb:
                    a5:1e:34:85:15:d5:13:75:c4:93:ab:08:b4:c0:c1:
                    bc:f6:1c:22:85:32:1c:1c:a1:d1:15:f1:fa:f8:c7:
                    f7:d3:bc:fc:f7:50:6b:73:64:20:f3:3b:8a:bd:35:
                    5d:61:88:74:39:f4:d5:e1:08:dd:29:4e:3c:d2:5a:
                    3c:ed:36:3a:c1:7f:7b:02:c5:74:24:28:61:8d:4c:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5D:78:3A:18:CB:33:67:CE:8E:40:18:1B:22:48:51:ED:14:80:86
            X509v3 Authority Key Identifier:
                keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:64:91:06:fe:ed:1f:1b:5d:eb:06:69:b9:ab:31:a8:f4:
         8a:35:51:80:1a:01:d2:73:30:96:f5:05:64:6f:c6:3b:ba:41:
         03:52:94:0f:9a:21:ff:06:6f:63:45:d9:99:01:f0:a8:99:d7:
         ea:66:b5:15:32:bd:ab:6c:36:92:a4:1c:6d:f7:7e:97:44:4d:
         9f:53:0b:f1:3f:54:cd:ff:bf:76:23:08:17:7d:2a:ab:a3:51:
         36:0a:13:19:5d:6c:9f:8e:09:e2:59:05:4c:f3:81:64:d1:bb:
         b7:b1:fc:4b:e7:23:f6:17:0e:05:ef:55:cc:1d:2f:52:35:c9:
         0b:f3:9d:ea:a7:08:6b:5b:21:b3:4a:e3:4a:5b:18:da:f9:5a:
         a1:1f:c5:5c:93:3f:df:18:2a:61:59:91:6b:33:9d:8d:d0:e6:
         29:68:5c:f1:d0:3d:5e:5e:c3:2e:8a:c0:90:35:b5:6d:ac:51:
         f7:d3:5d:28:76:4b:94:3d:52:bd:33:d2:28:ef:c7:d9:6f:d5:
         c0:32:90:19:44:fd:c2:c8:a8:9c:5e:57:58:76:d0:25:b7:89:
         3c:31:9c:c1:0e:ad:51:34:70:53:b9:9b:8a:77:d9:d7:58:a8:
         5e:0a:fb:28:7e:c2:82:c4:46:20:88:78:7c:e6:66:88:92:32:
         3b:5e:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:18:46 2026 by rpki-client