This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File:                     jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier:          FIku/lPTpq1uK0BX6MsTJyCK4wdd+ed61M9l1R1tza8=
Subject key identifier:   EA:F8:61:C8:98:A8:E5:71:95:70:45:1E:06:80:C0:3F:64:B5:00:99
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer:       /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial:       019C435962823738D8A7768EAB70B96EA63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number:          0883
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: X_oexMAynHCssJWS1xXVUpjLPDU.roa (hash: u2YqA2ZR5BhcCK1zVpI632Qbwf1IqH25NXhdjexdM9w=)
                          2: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: jinQiqDpLl29/Ox5aU7zzXLevmLy21jUH5ZdtUYQr4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:62:82:37:38:d8:a7:76:8e:ab:70:b9:6e:a6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=eaf861c898a8e5719570451e0680c03f64b50099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:33:6e:23:33:1b:e1:d9:02:07:50:7a:b1:
                    80:5c:23:b1:84:29:c6:84:20:26:03:9f:9d:d8:2d:
                    60:81:cd:91:d0:17:c1:35:b2:41:95:f5:b4:f6:ff:
                    b3:e6:db:b7:47:6e:e8:b7:06:56:0b:0d:5f:ea:31:
                    c7:56:36:6f:24:47:a4:13:27:28:fc:61:ac:68:82:
                    88:da:c2:03:d8:44:98:16:17:ce:2e:17:68:22:02:
                    be:b7:9f:82:fe:a4:fb:07:fe:10:41:4d:b0:2d:e2:
                    23:0b:a2:75:dc:48:e9:b7:66:9f:0c:cc:4e:a2:2e:
                    10:13:de:0e:54:e1:dc:35:c7:72:5d:c1:b2:e2:55:
                    46:e1:8c:bf:8d:91:74:3b:99:c4:27:e3:c6:ae:73:
                    cc:5e:a2:eb:ad:2b:33:02:72:78:72:09:97:b6:be:
                    9d:09:0c:65:67:fe:ec:c2:f5:ce:84:e7:c0:1f:6d:
                    e4:4b:a5:3a:1c:9a:d8:8f:5a:2b:3e:39:f6:53:62:
                    40:a0:e7:ec:e2:40:de:6b:2e:1f:d4:4c:5d:c0:87:
                    1a:99:f1:73:4c:a1:dd:79:40:13:6f:6c:a6:48:b1:
                    f8:ca:c1:a4:60:58:82:b0:b2:60:3f:38:7d:65:70:
                    cf:ec:7f:72:f2:77:d6:92:02:d8:73:3b:05:34:08:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F8:61:C8:98:A8:E5:71:95:70:45:1E:06:80:C0:3F:64:B5:00:99
            X509v3 Authority Key Identifier:
                keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:33:69:ab:07:a3:ae:b5:df:65:f5:7c:08:fa:48:09:9f:03:
         c9:ff:db:27:05:53:d4:76:ef:b1:99:10:ad:83:d4:86:28:e6:
         2a:39:a0:e4:4b:60:10:d5:9a:b9:e8:39:15:a3:2c:c9:62:af:
         8e:a6:c1:6e:f6:e6:e8:c3:a9:6b:bc:24:5b:5e:f4:57:ef:83:
         67:4e:08:ef:25:7b:72:20:e3:03:f6:4a:0e:1d:c2:bb:d9:c9:
         81:dc:a6:db:82:44:6e:85:e3:7f:6e:6d:10:5f:1c:91:26:f4:
         e7:78:03:c6:d4:06:8a:c5:1e:35:43:46:88:f4:04:d8:9b:ee:
         80:26:d8:4e:5d:74:44:eb:f5:83:09:29:c7:4e:47:39:9e:10:
         7a:2c:74:89:0b:09:e6:df:b4:ca:ce:a8:f9:1e:a1:04:5e:8e:
         e3:82:4a:e3:8c:04:46:90:80:85:b5:d4:38:f1:c5:ab:37:0b:
         9d:6b:c1:32:78:65:e0:3b:75:48:fb:e4:9f:aa:5a:b2:09:2d:
         ad:28:be:a2:e6:a9:20:78:75:53:9d:99:3a:da:e6:2c:b7:6c:
         a8:5b:9b:6b:52:87:58:d4:62:b5:e1:38:6b:bf:33:3e:d3:c4:
         34:e7:46:71:bd:9d:e6:3b:88:bd:06:ec:db:05:31:cf:31:41:
         73:8b:c6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:08 2026 by rpki-client