This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File:                     _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier:          gAYviesb0KPIUuO33RtR800ZugsyhBVJWTuGF0wqZQc=
Subject key identifier:   50:67:33:33:B0:98:71:06:AB:E7:A6:DB:F8:E7:78:04:39:51:53:34
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer:       /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial:       019C42B44EA4B15ECE9F031F04E8F562B6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number:          120B
Signing time:             Mon 09 Feb 2026 14:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:38 +0000
Files and hashes:         1: 4zeaHxVeOKs_UsyBMTNTTKo1oxQ.roa (hash: XBbtmyDxr/MaSevTjNm0YVLmtgk2DlOz9kdPZzWObLc=)
                          2: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: kuco/h47IsOZpe0E9glNf8ucaeEtQ7Pss53fexmwKOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:4e:a4:b1:5e:ce:9f:03:1f:04:e8:f5:62:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
        Validity
            Not Before: Feb  9 14:00:38 2026 GMT
            Not After : Feb 10 14:00:38 2026 GMT
        Subject: CN=50673333b0987106abe7a6dbf8e7780439515334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f2:db:1d:d3:8d:28:8d:dc:a8:ce:8f:b9:e3:
                    42:52:19:6f:16:1b:c9:8a:0d:dd:e4:b6:2a:a0:6e:
                    fd:5d:e0:5a:f8:db:43:65:1e:67:d0:17:5a:ef:51:
                    bd:d5:93:f8:99:73:98:03:98:e8:3f:4f:77:24:8d:
                    39:3d:f6:28:02:eb:e2:aa:c7:14:e5:32:9b:37:aa:
                    08:15:9a:2e:49:51:b4:85:8a:78:c9:97:4d:42:b0:
                    00:67:63:5b:c7:84:89:32:3d:0c:c7:37:a9:81:34:
                    65:ab:85:92:94:0b:aa:bb:4f:51:68:7b:bc:f4:4c:
                    31:26:52:0e:57:4d:d1:a7:17:8c:ea:bc:55:9e:67:
                    bf:cb:db:f9:91:80:ba:06:18:46:e2:2d:0c:b1:21:
                    fb:4f:f5:aa:34:92:86:5e:0d:4e:95:b0:d8:8e:80:
                    24:36:25:bd:56:fa:30:da:a3:f2:be:07:4a:1d:71:
                    3f:97:4f:e1:45:3b:4c:36:9c:1c:a6:b8:fe:dd:ad:
                    b3:da:ca:68:eb:be:77:5e:ff:57:ba:cb:e7:e5:3a:
                    63:b7:a6:fa:ac:5c:e3:a2:c7:da:ad:9e:9b:d9:c7:
                    1e:8c:81:a7:4e:ac:99:af:94:66:ad:37:e5:6a:5a:
                    19:a2:6f:f6:48:73:f8:d8:ea:b9:69:e1:3d:d1:15:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:67:33:33:B0:98:71:06:AB:E7:A6:DB:F8:E7:78:04:39:51:53:34
            X509v3 Authority Key Identifier:
                keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:10:64:1a:0d:5d:04:e9:cc:f4:69:de:c0:7a:cd:63:b3:
         a2:f7:e6:a9:3d:1c:30:99:aa:bb:31:2e:c0:b1:cd:ca:5a:c1:
         1e:5a:a1:bd:47:dd:99:02:03:c6:10:b4:01:06:88:85:90:a5:
         32:2d:99:93:99:40:4f:7e:05:73:ff:03:87:73:28:41:c5:5c:
         f2:0c:db:ad:37:41:d2:bc:a5:0b:cb:d0:06:de:4a:0f:b7:03:
         8c:21:10:42:17:f9:37:19:91:ba:34:bd:59:e6:4e:ab:9b:83:
         91:46:d8:be:e6:34:68:36:3b:af:83:d3:72:f6:a1:47:de:1a:
         10:ce:58:a8:46:89:9e:88:3e:9e:a4:16:82:a9:c3:18:99:71:
         3d:35:d6:49:ba:2c:c4:01:03:ba:56:7b:bd:65:fc:27:cc:44:
         a4:ff:67:57:f7:a0:23:3f:aa:40:93:93:5e:72:b0:48:c5:d4:
         be:24:e8:b7:03:be:10:e6:9b:d0:83:b3:c3:e5:1c:74:08:32:
         68:ef:7a:ef:5b:ca:8e:ea:d4:b6:59:13:f4:08:f8:5c:c8:b4:
         14:3b:45:93:50:00:d7:e2:bd:ad:a7:92:c5:84:12:80:5a:6e:
         45:f3:97:05:a2:56:6c:7a:dc:61:75:7c:05:e0:2d:eb:9c:6f:
         04:54:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:24 2026 by rpki-client