This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File:                     2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier:          t4eU/wNLEQDEvfprW9e9E165o8UaEknOKeE+qE63/Kk=
Subject key identifier:   68:46:45:59:9D:B4:5E:D2:A8:2C:E8:92:6B:04:E8:CD:8C:55:57:69
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       019C42462B4F14F962A5A12520EDB7CCDA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:20 +0000
Files and hashes:         1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
                          2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: qVSjXJxhj4krvBCD0cTRoFkqViPsNxyecjnnKY0NmQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:2b:4f:14:f9:62:a5:a1:25:20:ed:b7:cc:da:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: Feb  9 12:00:20 2026 GMT
            Not After : Feb 10 12:00:20 2026 GMT
        Subject: CN=684645599db45ed2a82ce8926b04e8cd8c555769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:76:29:ed:3c:3c:a1:29:3d:43:01:1d:c6:
                    fd:fd:c4:96:3a:4b:29:71:cc:3c:50:06:ac:99:9e:
                    ea:4e:a1:b6:38:00:04:d0:69:19:f1:7b:b6:9b:ec:
                    1c:75:99:8a:1e:d2:2e:e3:f6:1b:2e:18:da:bc:e9:
                    89:9a:1f:64:3c:95:86:72:44:6d:bd:6f:3c:62:12:
                    47:49:c7:95:ac:e4:3c:75:23:1d:ad:7f:f7:59:f0:
                    dd:dc:a5:3b:d3:ca:2c:19:0b:5c:99:6a:8b:5a:62:
                    08:f4:49:d7:c1:09:58:3f:83:74:f3:22:3f:55:e7:
                    95:5c:4a:f6:bc:57:45:b0:47:57:7f:ee:e1:c3:9d:
                    81:3f:61:27:d3:2e:60:69:6c:22:98:44:25:e9:44:
                    57:99:f4:00:e8:eb:68:42:10:bc:29:5b:d4:8d:15:
                    0c:f4:30:4b:c9:62:bd:04:2f:29:d3:e3:61:06:e7:
                    f5:66:67:70:ba:ff:d2:cb:37:f0:6a:4c:bf:d9:10:
                    20:a7:60:1e:25:68:3d:be:dc:dd:5d:55:62:ee:23:
                    7a:4a:15:f4:c6:48:36:1b:e1:8d:80:89:ca:e1:82:
                    7d:01:01:7f:ba:65:95:43:67:e2:98:0b:11:e8:37:
                    6c:b7:a2:95:83:dd:d3:20:1f:3e:b8:4f:69:5f:66:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:45:59:9D:B4:5E:D2:A8:2C:E8:92:6B:04:E8:CD:8C:55:57:69
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:91:7d:1a:27:95:86:94:fd:da:7f:bb:f1:f0:c5:77:44:
         12:f4:6f:a4:e6:d1:72:10:dd:12:cb:b4:d4:d9:bc:54:9a:fb:
         e3:73:9d:d1:47:74:4e:57:2e:ef:a5:5e:fc:d8:38:1d:fe:46:
         2a:11:32:83:63:f1:3c:e9:d0:89:97:27:ab:ab:18:f5:fe:9d:
         b1:e6:5a:55:b6:9d:79:18:00:50:60:0f:59:68:9d:b6:11:ba:
         0d:40:b3:fd:d9:ed:cd:6e:28:f4:df:ce:cd:f7:cd:af:12:ac:
         e5:c9:ba:f3:35:02:2d:88:5a:8e:3b:a2:1f:27:ba:7e:38:be:
         86:14:18:76:04:cd:ef:2c:da:95:70:3b:90:bc:c3:e9:5f:7d:
         de:a2:88:ad:35:8a:d7:2a:0f:38:52:53:93:57:31:d8:f7:c7:
         c8:75:67:45:72:94:c0:1c:77:15:7c:e7:c1:17:fe:b5:68:ff:
         60:91:85:d5:a6:85:0f:d1:b7:30:5f:e1:b0:f6:ad:8c:a3:94:
         67:da:69:d5:a7:2c:a6:51:ce:62:58:10:9d:a8:d4:ce:0c:10:
         66:17:cb:e6:4b:e4:a6:39:4d:ff:2d:85:6d:82:bf:98:f1:1b:
         1b:de:4b:2e:ba:ff:19:14:a8:91:9c:d2:ff:d6:e3:8e:a8:53:
         c1:48:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:00 2026 by rpki-client