This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File:                     JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier:          EaZGR5P+RaPP2bk/05ytRAyP8YlWQN7cNfiJROKcJW4=
Subject key identifier:   86:B8:FD:72:C9:81:C1:54:69:AA:46:41:79:91:36:7D:92:3A:6A:76
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer:       /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial:       019C427D0B158B4ACDC7EF03AC3257AFA5F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:16 +0000
Files and hashes:         1: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: 0TKws+RkXbM2aaPpbG49L1yTbqsrDqNYSf1XBpJEur4=)
                          2: OPxxAaI36wOXDoRWNJH9zygfaP4.roa (hash: mH7ZBf8wX4Ac93dknyYTB0ar56IBtyzBP1/i72VCE+U=)
                          3: TKG6JIO5NTaXTUbXfBu90s4mtRE.roa (hash: U2QEQxBIuCigDglAujNTXtIh1vUVB2LqzesEEmT2csQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0b:15:8b:4a:cd:c7:ef:03:ac:32:57:af:a5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
        Validity
            Not Before: Feb  9 13:00:16 2026 GMT
            Not After : Feb 10 13:00:16 2026 GMT
        Subject: CN=86b8fd72c981c15469aa46417991367d923a6a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f1:4e:b4:ea:cc:9e:ce:f4:69:d0:29:90:55:
                    89:7c:e7:b8:7f:e7:61:fb:6b:48:49:38:db:72:ee:
                    1a:95:ac:cb:2b:55:1b:58:ab:10:72:c2:c2:21:b1:
                    06:4f:b5:ec:1b:3c:86:b8:bc:b5:8d:ab:9b:15:05:
                    34:d9:20:0b:45:08:ce:12:b7:2e:b2:ad:fe:2a:c4:
                    b2:6e:37:8d:43:59:88:2f:1f:ba:0b:07:b2:d1:a8:
                    88:1e:5c:33:2b:79:da:47:8a:39:a7:ce:36:55:a4:
                    28:b8:ea:32:37:d3:55:57:aa:ad:ea:98:55:27:7b:
                    01:1f:c5:af:d3:4d:85:7e:ec:4d:f2:24:e6:99:6d:
                    52:37:3c:97:a0:b0:4f:3e:16:88:c0:29:d0:eb:ac:
                    37:de:50:92:8c:9a:c3:85:2a:da:41:7e:0d:ab:cf:
                    09:ff:32:c2:35:63:1b:48:7c:ed:80:19:89:9d:3e:
                    c3:62:29:9f:f0:d0:5c:2c:7b:1c:57:83:6b:76:a2:
                    9a:03:10:f0:46:8c:ae:6e:cb:a5:ac:bd:a1:65:4d:
                    97:3b:f4:9f:2e:39:8e:e0:a1:c9:7b:f6:93:42:eb:
                    93:fb:e9:75:91:8f:11:bc:9f:38:4f:c2:02:70:ff:
                    5f:f8:c8:26:24:44:1a:94:a8:6b:36:51:8a:8a:90:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B8:FD:72:C9:81:C1:54:69:AA:46:41:79:91:36:7D:92:3A:6A:76
            X509v3 Authority Key Identifier:
                keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:98:ea:e3:6b:af:67:22:c2:9f:96:d6:3e:46:b9:d0:5a:
         00:cb:fa:e7:f4:15:39:18:c9:54:2c:50:ed:f7:dd:93:ba:aa:
         17:0c:a6:46:8e:84:40:9b:ec:4c:54:93:63:e5:b9:8e:0f:d5:
         aa:75:a3:31:69:4b:8d:d9:4e:2a:b9:ee:a8:5c:c3:59:1d:8c:
         d5:45:27:9d:8b:a4:e3:4c:35:68:20:27:fe:3d:28:1e:76:45:
         2a:35:11:a3:4f:e6:c4:be:8a:94:6e:98:45:05:de:ed:a4:4e:
         fd:78:f5:71:25:7c:ef:9f:66:56:36:be:70:42:30:a2:2d:43:
         c7:31:7b:d3:b3:66:8a:0c:08:78:e7:e8:a0:c8:41:aa:8b:b9:
         d7:30:4e:0b:19:22:9e:8f:fb:ba:d4:3a:29:4b:99:52:e4:27:
         54:2a:b0:d7:aa:3a:a3:1f:b6:5a:a9:a0:96:7f:db:fd:19:12:
         b2:13:a2:18:0b:5d:ff:a1:1f:a6:17:96:43:ce:b3:df:0e:ab:
         e4:aa:74:7a:d9:67:84:c3:4b:d1:a9:07:06:2c:51:e7:6d:ab:
         08:24:b4:0a:f8:05:3e:a3:94:9c:8b:f4:c6:2b:d3:e4:b6:93:
         59:04:56:1b:db:d6:21:23:65:c0:cf:80:40:6c:85:85:b2:2b:
         db:53:52:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:26:24 2026 by rpki-client