This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File:                     JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier:          myae+90pUOa2d+nDv/4pi4DR2nOpQ+UXTdyypdW5vac=
Subject key identifier:   D8:F4:F0:F3:76:2F:D0:89:AA:3B:C6:45:55:6A:81:F9:8D:5B:D0:19
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer:       /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial:       019C42B3E9BDED4BF37C00569AD4B5820747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number:          107F
Signing time:             Mon 09 Feb 2026 14:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:12 +0000
Files and hashes:         1: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: G8h/SY9YBEW/g7hbxrppaQC4/M6T46rgkHqAoMo0UxA=)
                          2: _1AwBVggIwfJB5bYD68oYUpOpG4.roa (hash: fd7XGe0Ym2pDql0QUg3t2bUertBbkRXKpuwDmtgLZWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:e9:bd:ed:4b:f3:7c:00:56:9a:d4:b5:82:07:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
        Validity
            Not Before: Feb  9 14:00:12 2026 GMT
            Not After : Feb 10 14:00:12 2026 GMT
        Subject: CN=d8f4f0f3762fd089aa3bc645556a81f98d5bd019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:32:a0:c3:86:b9:7f:bf:c2:c3:19:12:56:
                    7f:4b:90:a2:8f:d7:3d:2c:f4:d8:6c:98:ba:ef:56:
                    8f:0e:c8:c5:b5:7b:15:74:46:ec:1d:a3:68:d6:32:
                    8f:a4:86:e8:4f:07:40:f4:d9:a4:37:e2:59:0a:1b:
                    5c:f1:9d:77:92:0f:bf:88:5e:8d:51:8c:dc:92:ae:
                    f1:98:e2:3b:35:ce:8e:a6:41:aa:de:6b:46:aa:57:
                    57:91:95:8b:33:90:c6:97:5b:b3:06:d5:55:10:17:
                    b4:e7:99:1b:e8:fb:40:49:4e:73:f2:a8:69:df:fc:
                    a4:62:b9:ae:ce:92:b8:c9:e5:84:87:74:55:1b:ad:
                    0a:df:db:f1:b0:bc:0b:ad:df:e7:f0:2b:65:89:66:
                    13:ad:29:54:52:07:a2:7c:ec:0c:b5:5d:5b:0e:ef:
                    61:a0:fa:77:e1:49:31:f6:44:63:6c:79:ae:86:c7:
                    a3:5f:41:93:f8:d7:7c:09:67:c2:f7:2a:b7:fe:a1:
                    ec:a7:22:e4:7c:bb:43:3e:13:7f:22:c6:a5:db:a4:
                    a0:ff:96:db:49:a5:98:0c:39:78:76:89:a7:15:b4:
                    d0:38:08:7a:83:fb:f2:b5:40:fe:b8:5e:69:65:93:
                    b4:bc:6f:e5:78:43:f5:83:5c:4d:e1:6f:75:b8:6e:
                    a2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:F0:F3:76:2F:D0:89:AA:3B:C6:45:55:6A:81:F9:8D:5B:D0:19
            X509v3 Authority Key Identifier:
                keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:a5:be:44:66:9e:be:19:b3:bf:bc:06:28:14:6e:3a:1b:
         f3:19:90:9c:ca:5d:8b:a4:7d:72:44:5f:e7:33:f8:5b:1f:ea:
         b2:5f:c2:f2:dc:f8:99:b1:0e:0a:4a:4d:d5:62:65:fa:6e:58:
         aa:a2:3e:c4:70:78:a9:22:c5:36:6b:7c:f5:de:4a:9b:0b:5e:
         3b:90:62:c3:2e:64:f6:73:03:64:ce:04:1f:41:82:c5:98:32:
         d6:16:24:38:6f:81:ac:49:eb:4b:5c:91:de:a2:7a:dd:c3:33:
         66:30:4a:da:09:b4:f2:04:2a:33:b2:4b:68:51:1e:76:eb:eb:
         f2:67:28:cc:80:93:9a:eb:a9:10:ba:de:56:64:08:d4:37:5d:
         3d:84:90:c9:ca:77:04:44:b1:e8:93:c7:da:d1:89:39:e4:fc:
         7c:fa:97:c4:74:90:bf:eb:6e:01:42:cb:af:9e:67:fb:8d:de:
         63:a6:92:8a:8a:4f:c6:ef:a7:a0:44:e0:98:0d:55:0b:c7:97:
         40:de:96:7f:c9:99:3f:be:62:14:e0:f5:0b:8b:f5:79:f2:8d:
         60:57:fb:d2:78:3c:31:76:74:d2:36:e4:57:56:97:af:46:ea:
         b3:97:07:7d:2a:fc:89:2b:24:11:75:27:cc:cd:6f:2c:66:53:
         bd:2c:f9:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCs+m97UvzfABWmtS1ggdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjM4YzJjYjdiODYwY2QzNjk2NzljNGQwNWQ1MGY3MDVl
MDQ2MjkwHhcNMjYwMjA5MTQwMDEyWhcNMjYwMjEwMTQwMDEyWjAzMTEwLwYDVQQD
EyhkOGY0ZjBmMzc2MmZkMDg5YWEzYmM2NDU1NTZhODFmOThkNWJkMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4syoMOGuX+/wsMZElZ/S5Cij9c9
LPTYbJi671aPDsjFtXsVdEbsHaNo1jKPpIboTwdA9NmkN+JZChtc8Z13kg+/iF6N
UYzckq7xmOI7Nc6OpkGq3mtGqldXkZWLM5DGl1uzBtVVEBe055kb6PtASU5z8qhp
3/ykYrmuzpK4yeWEh3RVG60K39vxsLwLrd/n8CtliWYTrSlUUgeifOwMtV1bDu9h
oPp34Ukx9kRjbHmuhsejX0GT+Nd8CWfC9yq3/qHspyLkfLtDPhN/Isal26Sg/5bb
SaWYDDl4domnFbTQOAh6g/vytUD+uF5pZZO0vG/leEP1g1xN4W91uG6itQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj08PN2L9CJqjvGRVVqgfmNW9AZMB8GA1UdIwQY
MBaAFCZjjCy3uGDNNpZ5xNBdUPcF4EYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgt
M2U1N2NjNTJjODRlLzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kOTZmNjktZWYxNC00MjI3LTg4OTgtM2U1N2NjNTJjODRl
LzEvSm1PTUxMZTRZTTAybG5uRTBGMVE5d1hnUmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFulvkRm
nr4Zs7+8BigUbjob8xmQnMpdi6R9ckRf5zP4Wx/qsl/C8tz4mbEOCkpN1WJl+m5Y
qqI+xHB4qSLFNmt89d5KmwteO5Biwy5k9nMDZM4EH0GCxZgy1hYkOG+BrEnrS1yR
3qJ63cMzZjBK2gm08gQqM7JLaFEeduvr8mcozICTmuupELreVmQI1DddPYSQycp3
BESx6JPH2tGJOeT8fPqXxHSQv+tuAULLr55n+43eY6aSiopPxu+noETgmA1VC8eX
QN6Wf8mZP75iFOD1C4v1efKNYFf70ng8MXZ00jbkV1aXr0bqs5cHfSr8iSskEXUn
zM1vLGZTvSz50Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:54 2026 by rpki-client