This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File:                     jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier:          y59iLwn9WtBaMFpWUhDWbT1QTwGiJSCvl4zUjE6Vpx0=
Subject key identifier:   3D:65:89:01:E5:26:29:09:E7:B6:3B:53:B6:36:06:6B:03:43:74:23
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer:       /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial:       019C446C0704E2787EBF0D927D06006D0E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number:          146A
Signing time:             Mon 09 Feb 2026 22:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:56 +0000
Files and hashes:         1: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: b0LzRY6Us7wvY09e82Ks7xNu5Iwtnng45jKAzgbQHt8=)
                          2: p5WK8SqdNKrQAJq8_gZrFH1Py64.roa (hash: Nm8rFW/KHjUYCTq0McUqQzXzdbDIF9y2fLjjuqM6uz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:07:04:e2:78:7e:bf:0d:92:7d:06:00:6d:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
        Validity
            Not Before: Feb  9 22:00:56 2026 GMT
            Not After : Feb 10 22:00:56 2026 GMT
        Subject: CN=3d658901e5262909e7b63b53b636066b03437423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:f2:10:ec:92:27:0a:a7:59:69:a4:7e:bc:
                    cf:e5:eb:e1:9b:a7:f5:fc:9c:3c:99:63:15:82:24:
                    e9:a6:34:76:3e:a7:02:01:11:69:9b:bd:21:e5:48:
                    53:59:fd:27:3a:a8:bc:47:08:79:11:e1:3c:57:34:
                    14:62:a1:3b:57:3f:1c:15:f0:c8:a1:73:7c:ea:3f:
                    cd:49:26:aa:95:7a:7c:7b:bc:c4:10:52:1d:57:da:
                    b8:ac:ad:4b:6f:d0:6a:3f:4f:b3:f6:de:73:ea:c5:
                    d6:fd:0a:92:ad:c1:26:83:42:aa:fa:ae:d0:24:b3:
                    8f:8d:91:11:ae:29:b3:f5:1b:d3:d7:dc:fe:5b:01:
                    67:7e:9a:17:16:79:bd:84:a4:d5:61:dc:69:c4:95:
                    a9:88:ba:b1:7e:ac:d5:6c:79:f3:7b:38:4f:01:45:
                    5f:4c:fa:e9:66:6a:f5:7e:f5:62:6a:b2:c6:15:4c:
                    28:7c:c8:32:44:72:6a:22:5b:4d:30:eb:c5:fe:a7:
                    a9:ef:04:15:5d:10:50:56:58:92:be:44:11:8c:2f:
                    3f:f8:85:bf:87:7d:b5:f2:44:b0:15:9b:46:53:2c:
                    2e:e2:9e:22:dd:9c:8c:9d:19:51:38:50:85:a6:5d:
                    99:b7:1c:83:86:60:39:40:a9:f9:a9:97:9b:25:35:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:89:01:E5:26:29:09:E7:B6:3B:53:B6:36:06:6B:03:43:74:23
            X509v3 Authority Key Identifier:
                keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9f:58:31:1a:76:65:b9:ce:bd:cc:8f:f2:b5:83:46:00:a5:
         97:ce:e2:6a:ef:95:a3:ad:75:aa:4a:2b:c2:6a:67:d3:9f:aa:
         97:98:55:6f:59:d9:11:45:14:55:ca:42:7f:bc:b0:68:b1:29:
         43:b0:27:15:47:4b:e3:f2:51:b5:f8:27:d6:f3:17:a5:ca:48:
         30:f8:16:0e:a0:5d:ca:8e:82:bf:8b:34:eb:c6:70:bb:6c:97:
         79:25:05:5d:39:e5:3b:d4:28:66:7c:98:0b:3d:52:80:f4:c4:
         0a:a8:b4:9d:e9:b2:d3:be:93:9d:2f:a4:c1:ec:3f:72:90:36:
         ff:c8:47:21:8f:af:29:78:f2:40:fa:ab:60:95:d7:b9:6f:ae:
         fb:ba:5a:8b:91:61:41:17:b1:8f:a4:d2:11:fb:5a:d8:59:18:
         ab:28:87:b3:ad:f5:ed:ce:08:65:ff:7b:4b:b1:80:45:44:e8:
         65:bd:a4:33:76:02:cd:1c:d2:35:2e:57:d0:81:f5:c5:b3:88:
         fa:2c:3b:41:7c:ff:cb:99:2f:18:1e:6f:f7:36:7b:36:af:b6:
         b7:f0:7a:e6:38:ad:f7:46:12:07:28:06:3a:01:a7:cc:78:9f:
         fd:c6:f4:6d:2a:ae:2f:6b:f8:65:2f:b9:23:92:96:ef:53:55:
         8d:43:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:41 2026 by rpki-client