This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File:                     J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier:          iSOCypwu+wpi01cLgBK7XDlkzXhdhcDFPeL3IwJVFvw=
Subject key identifier:   C1:61:CF:06:15:3C:C6:24:B7:1F:0B:75:A4:88:48:6E:E1:1F:51:07
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer:       /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial:       019C4359012ABF7DAAEA6FAA5CD042985DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 17:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:32 +0000
Files and hashes:         1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: k/Ud0FUBdpW7hkjqMZjRUXFkwdHnsMvjQFodIJbWaBM=)
                          2: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (hash: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:01:2a:bf:7d:aa:ea:6f:aa:5c:d0:42:98:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
        Validity
            Not Before: Feb  9 17:00:32 2026 GMT
            Not After : Feb 10 17:00:32 2026 GMT
        Subject: CN=c161cf06153cc624b71f0b75a488486ee11f5107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:ae:56:7f:e7:d4:88:b9:3f:ce:a7:75:ea:
                    c1:e7:d9:81:e3:f3:10:0d:8d:8f:f4:49:a9:88:dc:
                    79:d8:92:b2:90:32:62:d1:f9:57:78:56:01:36:76:
                    00:2e:73:97:32:a6:a7:fe:6a:a5:59:08:1f:82:9e:
                    3d:8e:8f:05:71:ca:cf:7f:12:48:53:79:5a:b8:1d:
                    cf:f1:e4:dd:d7:94:d6:b4:77:ec:46:55:bc:9e:a6:
                    a6:46:24:5e:c2:08:2d:e7:9c:74:6c:08:64:90:8e:
                    68:67:cc:28:eb:a6:94:46:1a:35:cf:02:60:ff:1b:
                    80:1c:25:90:be:41:27:fc:86:ae:43:32:16:f4:6e:
                    7e:db:3e:78:6f:5f:97:e1:3c:93:76:cd:97:f9:18:
                    69:8b:6a:8d:a7:12:94:e7:14:c4:8b:a6:38:1d:9d:
                    22:32:96:e8:05:fc:ad:03:ae:39:0a:d9:32:65:96:
                    12:53:89:d1:b3:63:54:9f:83:ac:e1:47:44:8c:cd:
                    7f:3f:5a:c5:dc:81:84:bc:97:5d:a7:18:81:12:fe:
                    6f:01:6f:81:4d:29:6d:a5:6e:da:cf:95:94:cd:ab:
                    b8:64:dd:d5:89:39:c1:f7:bb:8e:6f:a1:51:ed:ab:
                    84:9c:de:e9:8c:b0:8d:0c:57:23:6b:9c:67:b2:b1:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:CF:06:15:3C:C6:24:B7:1F:0B:75:A4:88:48:6E:E1:1F:51:07
            X509v3 Authority Key Identifier:
                keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:f7:f9:6c:e1:76:17:90:5d:e1:3e:9e:e3:39:1f:ff:54:
         b2:fc:f0:7f:b7:8c:98:23:53:0c:ac:bc:2b:01:6d:82:1c:18:
         99:20:52:51:a7:e6:c1:29:85:00:64:a4:b5:e0:7c:ab:11:dd:
         da:81:e1:57:e0:41:fa:0f:41:7f:13:d9:75:90:42:e6:02:fd:
         1a:7d:59:75:38:1f:01:53:a4:c6:9f:9b:1e:7c:70:5f:d3:3f:
         c6:da:49:6b:e0:65:24:ab:28:51:73:3a:34:f5:ab:56:fb:4f:
         f4:1c:10:c0:7e:44:56:e4:34:f5:7f:78:b0:49:08:18:0f:44:
         6d:33:9c:a9:0f:78:7a:b0:d2:dc:72:1b:d7:de:58:60:f9:e6:
         53:6e:d5:fb:f1:4c:a5:95:c6:f0:34:34:93:01:90:40:3e:1d:
         1d:4b:22:58:30:2a:2d:65:20:b0:80:3a:d8:d7:44:c7:ba:16:
         62:7d:5b:ee:28:3c:79:35:0a:3c:ac:ef:c9:eb:2c:45:4b:ba:
         c4:28:e2:fe:9f:ce:35:9b:80:76:76:c4:10:64:ea:ba:88:3e:
         a8:6a:d2:2a:d5:b7:d6:cf:e7:e1:e6:45:ba:3f:2b:3a:49:4a:
         bb:33:f4:2d:c5:ab:a9:f8:86:0e:f5:ed:85:a8:93:8b:e4:ec:
         25:b3:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:42 2026 by rpki-client