This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File:                     J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier:          40zzh9nAEoYznT5/WDcSk1jI/xh9CDTuijPJRYS5EnM=
Subject key identifier:   C9:14:0D:55:13:6B:DF:18:BF:17:61:AD:CD:ED:AA:48:37:DB:91:1F
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer:       /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial:       019C420FE01D64D2F41B45D9ED914E254F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 11:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:02 +0000
Files and hashes:         1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: mX+0qymw+Gt9JLxjytKZJpxbpNmMX7HDNDYKdlDEAWM=)
                          2: do8SOe-ERpHxMjDsw45T1qLXF5s.roa (hash: r8j5u9eIygVJJMrAiUaqnzsEWnLw7mdb+0WkkpHgFnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:e0:1d:64:d2:f4:1b:45:d9:ed:91:4e:25:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
        Validity
            Not Before: Feb  9 11:01:02 2026 GMT
            Not After : Feb 10 11:01:02 2026 GMT
        Subject: CN=c9140d55136bdf18bf1761adcdedaa4837db911f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:1d:5b:47:d8:10:25:e5:48:53:ea:d0:3d:
                    d2:d2:85:f3:62:49:fb:ef:28:7d:29:fe:7d:2c:ce:
                    8a:4d:50:be:02:0b:95:7e:d1:ab:6e:3c:7e:88:1d:
                    ab:42:e7:51:5f:eb:4d:a0:9c:27:d3:c5:fe:6c:d9:
                    14:cf:4c:d6:56:21:ea:05:67:18:db:b0:8f:38:2c:
                    6a:5b:db:cd:73:d2:b2:aa:cd:91:3b:9a:13:3d:0a:
                    55:8e:17:9e:7c:d4:0a:cc:23:8d:42:55:75:ff:48:
                    d7:e2:37:7d:ab:e6:fa:05:cf:22:87:31:50:81:d1:
                    6d:25:24:9a:dc:cf:58:18:fe:19:e5:2b:63:45:ca:
                    20:3b:9a:a8:c6:ea:b4:ba:c2:b4:4b:7a:0e:ae:57:
                    b1:da:38:b8:a6:93:cc:7e:09:be:3b:48:87:da:24:
                    de:37:eb:c2:aa:14:95:a1:71:97:67:a2:2c:cc:2e:
                    12:78:40:95:5a:5a:99:46:25:3e:c2:15:69:22:6c:
                    5b:84:5b:24:e6:07:a7:90:5f:87:9c:83:0f:50:40:
                    8b:6c:10:34:bf:00:52:4e:1b:a5:8e:da:e3:b0:60:
                    1c:a2:d3:89:f1:88:e6:9b:a7:ad:df:d6:8c:5f:a4:
                    f9:36:19:ea:dd:25:f6:87:ee:a7:2d:ed:01:72:a2:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:14:0D:55:13:6B:DF:18:BF:17:61:AD:CD:ED:AA:48:37:DB:91:1F
            X509v3 Authority Key Identifier:
                keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:0b:17:01:5e:7c:37:03:ce:95:8c:a9:bf:c5:3d:77:c5:
         86:f8:c6:00:04:fe:15:05:2d:32:b4:b2:8f:2a:ec:a1:3f:ba:
         96:c0:4f:ce:3c:55:ad:07:3d:88:3a:84:f7:73:63:f6:7b:2b:
         89:96:eb:66:61:82:ee:81:73:57:7a:8d:c9:26:99:98:1b:4f:
         e6:10:2d:48:4c:8d:55:c6:dc:78:20:d2:53:32:24:aa:25:04:
         d2:92:46:f8:42:84:0b:0a:d1:f8:20:ba:be:16:05:65:65:a7:
         1c:ed:11:32:40:a5:cb:a6:0d:1b:6a:2d:9d:ba:dd:4c:78:d1:
         28:79:ff:d7:bf:01:a0:b6:79:f9:06:b7:a9:20:31:ee:7d:ff:
         97:15:c3:1b:9f:82:4f:18:c9:e0:1a:eb:61:98:4d:91:21:cd:
         97:45:29:31:9e:86:d2:53:42:3e:a3:dd:e8:19:fa:34:c6:23:
         38:7d:05:9e:a5:be:0f:cd:22:e0:0d:55:b1:59:a1:44:f7:e2:
         e0:19:49:8d:a3:5d:9e:56:3c:a6:9c:f0:58:b2:68:7f:35:e9:
         54:81:e8:83:95:7c:4d:14:84:fb:f9:fd:68:8b:eb:b7:cf:47:
         f2:22:2c:05:14:8e:d7:41:0a:0a:8d:0d:3e:4e:71:ac:f5:f3:
         f2:ad:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:29 2026 by rpki-client