This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File:                     J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier:          Y9oBvprRJ4G7EScToQDWDSX8iA6aL4EDCoyE6q8OrMw=
Subject key identifier:   35:B7:B5:AA:D3:0A:97:44:64:67:5A:D1:66:21:C3:70:92:BF:04:62
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer:       /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial:       019C41A1F6415A6427529B7F4A8B9F99CC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 09:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:59 +0000
Files and hashes:         1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: CK8WbuxB/10zYkrCDcIIzP8mDT0N5fDmXEHJV4+tzys=)
                          2: N9g6nUbClkcydweR7R8xaurzMO0.roa (hash: SXrUgqtlKGnSKDU/5SbtXc1yb311zFdWrtMQZNTwofA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f6:41:5a:64:27:52:9b:7f:4a:8b:9f:99:cc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
        Validity
            Not Before: Feb  9 09:00:59 2026 GMT
            Not After : Feb 10 09:00:59 2026 GMT
        Subject: CN=35b7b5aad30a974464675ad16621c37092bf0462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:d5:ab:5e:6b:da:05:40:b4:c4:f3:f1:82:
                    ad:70:00:82:4c:3b:9e:40:ba:0e:19:52:f1:96:ee:
                    87:29:c7:48:8d:d7:8b:38:1c:4a:1b:75:25:fc:57:
                    39:56:1e:6c:d9:f9:5f:26:91:76:d2:e0:db:b8:9d:
                    85:10:2c:cc:fc:0c:be:46:d7:3c:44:ec:91:2a:03:
                    5e:58:a2:20:2d:7d:66:a1:66:2d:78:c1:2d:32:e7:
                    74:ba:e7:6f:53:e2:cf:77:72:7d:fd:2a:30:0f:03:
                    ad:4e:95:19:4d:8e:24:5a:b3:92:0a:ce:fd:34:74:
                    62:ab:63:96:f1:0d:8d:8a:c5:c3:3b:5c:57:1f:85:
                    06:59:54:e7:94:ee:1f:46:e1:32:dd:3b:6f:9d:2e:
                    90:23:06:cc:8f:1c:91:f2:e8:42:8b:e1:13:29:28:
                    53:c5:8a:17:ad:25:21:32:73:28:40:49:2c:85:d1:
                    a6:62:7b:ee:41:61:7a:f0:e5:8d:36:10:63:a9:f1:
                    f5:f4:42:e4:da:f3:d9:9b:e7:1c:6a:fb:48:28:e0:
                    d7:f0:d5:6e:3e:54:61:79:df:2b:bc:60:4f:9b:63:
                    c6:d0:0b:27:b4:d2:ea:35:09:7b:9c:75:b5:e9:59:
                    c3:72:e2:cc:73:b6:33:ff:e8:ad:47:9e:e2:16:c7:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:B5:AA:D3:0A:97:44:64:67:5A:D1:66:21:C3:70:92:BF:04:62
            X509v3 Authority Key Identifier:
                keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:72:8d:67:66:62:7d:de:38:f0:13:ed:90:67:bc:01:74:
         58:4f:5d:51:96:5a:98:52:aa:5d:64:5a:d1:17:40:58:9e:40:
         12:0e:67:3c:36:8f:b7:a6:97:04:dd:be:d1:f8:99:8c:76:5d:
         d5:8f:fa:78:b2:e2:04:c3:63:ce:be:0c:b3:05:e8:09:2b:72:
         77:7d:32:53:ef:9c:b9:55:15:80:c3:f3:5d:2a:3f:3b:15:0d:
         c9:e3:2f:c0:17:b6:b4:0c:2f:4d:be:f0:44:b7:79:8e:6a:dc:
         34:d9:77:06:2f:f7:48:80:16:cf:fb:f5:24:28:4d:0f:77:15:
         ed:4f:f3:ba:09:06:e8:69:9e:5f:25:b2:5f:6e:be:8d:05:d7:
         c8:08:91:ef:ad:ed:49:08:9d:7f:28:eb:16:b6:e9:e4:11:0b:
         ed:86:b7:23:c2:85:9d:d0:09:3a:fa:99:f1:7f:5e:f3:c3:9b:
         ef:c6:cc:ef:a0:24:7e:b7:ef:24:ec:dc:00:ae:44:71:47:ea:
         0b:ab:00:40:ac:87:b3:c3:0d:96:41:57:76:f9:25:7f:2d:9b:
         d4:da:17:07:c8:ef:07:09:e7:fd:63:bb:bf:a2:b4:b8:74:fb:
         84:2a:b4:4a:06:63:fd:d3:4c:71:93:f1:f0:d5:2f:cb:5b:a2:
         5e:7f:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:09 2026 by rpki-client