This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.mft
File:                     sjhw_L2N_4csGrrUF5EXsu2R014.mft (raw, json)
Hash identifier:          hwKRmLHELOotiiO0CRvcCAQEAFJ/L4oPdTH9H1R8S+Y=
Subject key identifier:   49:C0:E0:32:64:7E:0F:3F:8A:A1:F9:21:CB:61:7B:BB:71:5F:C8:08
Authority key identifier: B2:38:70:FC:BD:8D:FF:87:2C:1A:BA:D4:17:91:17:B2:ED:91:D3:5E
Certificate issuer:       /CN=b23870fcbd8dff872c1abad4179117b2ed91d35e
Certificate serial:       019C43592465610235A33D93CE5CBB6A57B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjhw_L2N_4csGrrUF5EXsu2R014.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.mft
Manifest number:          04
Signing time:             Mon 09 Feb 2026 17:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:41 +0000
Files and hashes:         1: sjhw_L2N_4csGrrUF5EXsu2R014.crl (hash: qvi6xESfgZtExdZwr8fUcmePz8l4jSVKcZfQLcmWx/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sjhw_L2N_4csGrrUF5EXsu2R014.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:24:65:61:02:35:a3:3d:93:ce:5c:bb:6a:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23870fcbd8dff872c1abad4179117b2ed91d35e
        Validity
            Not Before: Feb  9 17:00:41 2026 GMT
            Not After : Feb 10 17:00:41 2026 GMT
        Subject: CN=49c0e032647e0f3f8aa1f921cb617bbb715fc808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8f:42:d4:85:a4:2a:a7:ba:58:91:a9:7b:b4:
                    48:3f:df:04:31:a0:cc:eb:3c:e2:cd:b5:c4:4f:42:
                    58:1e:9f:fa:7c:86:09:06:24:ec:47:c8:40:0b:97:
                    8b:91:bf:c4:db:da:9e:0b:3c:63:ca:af:67:ac:ac:
                    ab:3c:79:d7:ee:7f:a5:dd:b8:b9:61:1b:59:ea:d0:
                    29:dc:10:56:d5:9d:5c:f6:cc:f5:7f:8e:d5:81:7e:
                    82:f9:ec:88:36:f9:a2:ad:2b:ef:bb:62:bd:8c:77:
                    fa:c5:2c:35:f8:a6:a7:3f:c5:af:8c:a8:b1:ec:4b:
                    af:2e:e1:e0:45:49:6a:07:72:65:91:2f:9a:51:0c:
                    ce:86:e9:fd:5b:dc:75:4d:64:76:83:4f:0f:e8:dc:
                    5f:d2:7a:1f:5e:c2:08:ea:7c:00:a4:9e:08:21:ce:
                    7e:22:ae:0b:39:5a:e1:24:f2:88:55:2a:c5:0d:5a:
                    aa:66:1e:41:c7:fc:ce:4e:93:f9:82:99:6b:79:54:
                    4f:c3:d7:2a:dd:75:cb:09:a8:54:03:0b:f3:64:72:
                    04:3f:c5:64:11:90:aa:2a:7e:e7:d4:b1:1e:97:5c:
                    ba:73:d6:71:7a:65:87:37:1e:02:4d:42:93:e2:75:
                    ef:13:fb:cf:d0:ee:d9:8e:0a:a0:19:54:11:59:86:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:E0:32:64:7E:0F:3F:8A:A1:F9:21:CB:61:7B:BB:71:5F:C8:08
            X509v3 Authority Key Identifier:
                keyid:B2:38:70:FC:BD:8D:FF:87:2C:1A:BA:D4:17:91:17:B2:ED:91:D3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjhw_L2N_4csGrrUF5EXsu2R014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9ff80b-3e15-45d4-aa15-716eba55f453/1/sjhw_L2N_4csGrrUF5EXsu2R014.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:17:79:2b:15:f1:58:33:01:33:09:7e:db:00:0a:81:67:4e:
         5f:45:28:e6:20:8a:5e:26:f6:73:1c:d3:ae:76:90:38:7c:a3:
         30:f3:ed:18:9d:95:ab:b7:5d:3b:75:d9:e0:eb:93:b6:04:93:
         a6:e0:32:de:e0:a7:16:ac:40:f1:9c:bf:0a:46:3a:ab:95:e3:
         ff:cb:71:62:bd:f8:d9:4f:39:18:98:25:a1:c2:e1:cf:af:82:
         c0:84:d4:c6:27:08:b7:52:6c:7a:39:cf:6f:87:53:ed:22:5c:
         f3:5a:a6:14:eb:74:3b:7f:25:5c:e1:a6:ce:0b:e3:1c:bb:90:
         f6:29:f6:66:ab:04:a1:3c:40:47:f3:81:b1:ae:bb:e7:fe:c7:
         45:ca:6d:02:0a:8a:94:d2:f2:32:b1:47:b3:0f:0d:17:cc:d3:
         43:81:01:5f:b8:b5:75:89:34:2e:a7:72:6a:b2:c8:f4:b0:e2:
         3f:f6:43:55:c8:32:19:61:0a:61:5f:f3:b4:1b:7e:a8:b1:0a:
         2d:47:25:57:4a:47:a2:36:c6:90:03:84:84:5f:06:0d:19:a4:
         55:bf:10:73:33:f5:14:54:72:31:80:48:54:48:6f:9f:d3:ee:
         99:3b:72:d4:df:b7:e1:e5:a3:e5:41:a7:bb:4e:fb:6d:c6:40:
         90:bf:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:29 2026 by rpki-client