This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File:                     JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier:          ppXSBs1JVrKf0xlgbmoCc4y7/FbwOZrgyP9/HxHoaGw=
Subject key identifier:   ED:5B:7D:14:D7:3C:9A:66:76:73:44:09:19:35:CF:C4:72:3E:E2:78
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer:       /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial:       019C4358EEB3244ECEFEEB92C0532BC40B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 17:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:27 +0000
Files and hashes:         1: 8wb-NwIWx_2gv_9rr5Dl3p3Xqdc.roa (hash: 32Fi6nwUZX9CqosBIo6WurIihzlTBMG77RVVRRD5m4A=)
                          2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: 9pT5AraV6BjGMGk56OW88Nz3WoLgF3LfIR+QKtlKlhM=)
                          3: OLaCsdQ4sg-u5_SUOVqiRzJngxw.roa (hash: LbFlyjzKtWZ1y7kJgj0oynVYxTM3x3eGRVvy4xZ47Q0=)
                          4: QYCJdzvA_R6ZOVcD5qshTwEZ9p8.roa (hash: y87bUDl5fpfIu0/tcrwXPFrdyosHyMwLLF9BcN/7EKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ee:b3:24:4e:ce:fe:eb:92:c0:53:2b:c4:0b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
        Validity
            Not Before: Feb  9 17:00:27 2026 GMT
            Not After : Feb 10 17:00:27 2026 GMT
        Subject: CN=ed5b7d14d73c9a66767344091935cfc4723ee278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:06:40:2b:76:94:96:1e:85:b2:8e:c7:d7:
                    d1:ad:1d:08:cd:0d:c1:e8:f8:47:1d:66:16:81:a2:
                    cf:54:16:b8:e5:38:58:e7:b7:c7:fc:43:5c:a1:b2:
                    d7:11:35:81:8d:d4:43:2d:4e:48:8c:0b:dd:9f:92:
                    13:de:bb:6e:59:a1:dc:b6:16:b8:da:58:63:35:9c:
                    89:33:50:a6:fc:48:be:e2:bd:31:c2:83:f9:d5:f4:
                    70:3e:72:60:29:ce:07:f5:75:5f:ba:17:56:17:8c:
                    32:7d:99:ce:9a:8f:cc:e8:24:76:f4:39:f0:4f:62:
                    07:73:8b:d5:6d:66:d5:59:2d:70:37:bd:ce:55:c9:
                    59:18:4c:08:43:b1:70:d7:2e:c2:14:35:90:16:8e:
                    64:37:44:3b:8e:7f:b4:e3:ac:08:33:61:aa:c3:e8:
                    4d:6c:08:88:f4:e6:4d:01:96:e7:43:9c:10:5d:d4:
                    06:5f:44:26:db:ef:f2:ac:98:86:9f:a0:a7:df:63:
                    6a:13:06:da:c5:5d:8f:fc:7a:61:33:3e:f6:28:2d:
                    61:ae:82:72:94:e5:de:4a:56:1e:82:85:06:ef:0b:
                    1a:ff:af:c4:28:03:2f:b5:c5:67:42:ab:04:6c:3d:
                    6d:5c:72:65:92:e4:0e:d2:d8:40:65:3d:dd:75:e0:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:7D:14:D7:3C:9A:66:76:73:44:09:19:35:CF:C4:72:3E:E2:78
            X509v3 Authority Key Identifier:
                keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:da:9e:fd:4d:8c:81:3b:c6:7b:72:9a:70:a6:f8:a8:46:
         d3:45:39:18:33:a7:52:0b:8b:63:e7:95:3c:70:0e:26:6d:56:
         6a:7d:6d:ca:74:5f:4f:b3:81:ed:5f:ab:16:73:59:ff:72:b1:
         b8:bd:74:71:aa:91:69:13:c1:60:80:c7:bd:e2:ab:dc:c0:1d:
         23:03:92:e5:1b:25:ef:6b:2c:5b:e3:de:cd:9b:3e:3f:81:3d:
         7c:da:d6:bc:04:40:1b:f1:9d:d7:7d:0e:aa:36:91:3a:47:06:
         bb:92:0c:63:df:cc:b2:36:91:ad:2f:4c:35:73:2b:d8:ca:56:
         e4:a5:c7:c7:2a:13:73:b1:67:d4:9b:34:64:5b:18:ea:a7:b0:
         25:e7:7b:d6:da:77:9f:16:16:41:7c:13:70:e3:79:7a:d9:ce:
         cf:43:ca:4a:26:b9:d8:e7:6b:37:fd:dc:76:d0:d4:d3:6e:70:
         95:62:cb:e3:ad:df:a4:e6:98:0a:e5:42:ac:ec:2e:32:d8:ac:
         4b:a5:f9:4b:8d:bd:a6:20:17:1b:95:d1:4c:5d:f2:ba:a5:70:
         fd:a8:be:5f:7a:1f:2e:1b:ea:5e:e9:f7:63:23:39:83:74:35:
         70:32:65:9a:3c:c7:d0:f3:67:a2:0d:ca:a1:55:ae:92:87:46:
         6e:bb:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:01 2026 by rpki-client