This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File:                     jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier:          VtR9YmhDbIykU1Yhra4j/VNR6dkpa9+J8B6XfDynbKY=
Subject key identifier:   A4:71:2F:AD:80:88:4F:99:FA:54:14:2D:F4:3C:41:C3:19:2C:F0:E9
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       019C446BEF4CECD65A5F1DB098E915F3F3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 22:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:50 +0000
Files and hashes:         1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
                          2: aIB-U74XOsh4LFFeV56dHmApdhA.roa (hash: n4BldvZSrWCDo/is34Mdq/Joj399xGxxHCi8O5qGXUc=)
                          3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: 7ZM+8I0O4Q2tTekGP8RmWOVvzRP9ZrmD0/2xGhcc5kA=)
                          4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
                          5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:ef:4c:ec:d6:5a:5f:1d:b0:98:e9:15:f3:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Feb  9 22:00:50 2026 GMT
            Not After : Feb 10 22:00:50 2026 GMT
        Subject: CN=a4712fad80884f99fa54142df43c41c3192cf0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:ef:ab:eb:32:6e:61:00:03:64:9c:31:82:
                    15:89:c6:17:4c:86:7d:2f:f1:7d:1d:96:f8:be:ac:
                    39:7c:fd:94:78:2f:7b:a5:28:77:fe:9d:3e:a6:d0:
                    f8:e3:2b:ee:71:a8:e1:e4:1d:32:cb:4a:1f:de:01:
                    30:3c:0c:d2:d2:d6:f9:54:7b:ff:25:8d:65:12:37:
                    a3:a9:48:33:ec:06:0f:b1:06:da:a1:89:a4:31:d7:
                    04:16:05:63:86:7f:37:f0:ea:ee:83:ab:f1:5a:ca:
                    a8:c0:e3:22:ee:35:91:11:33:96:34:e6:3f:ed:72:
                    94:06:49:f3:26:7b:22:12:bf:e7:55:8d:e7:c4:a9:
                    5d:1b:d7:d4:00:25:38:3a:f5:32:4d:f4:1e:e5:c0:
                    23:2b:f3:b2:1a:06:53:d4:b9:1f:ca:b2:95:b2:d3:
                    0a:30:34:6d:ee:d3:f3:5f:f9:f6:44:19:0a:03:5d:
                    38:bc:5e:80:2d:6f:0a:f0:78:67:7d:00:01:29:21:
                    66:7e:e5:74:73:9d:1d:fd:88:d8:08:f1:ca:81:b8:
                    69:ed:1d:74:7d:19:ab:49:5d:a4:6f:fa:9a:31:83:
                    0c:10:3e:dc:0c:04:0b:86:c1:b7:26:88:4a:06:2a:
                    43:a2:10:fd:8c:63:1f:9c:15:82:59:55:a8:ff:1c:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:2F:AD:80:88:4F:99:FA:54:14:2D:F4:3C:41:C3:19:2C:F0:E9
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:42:36:00:e6:9a:99:56:ca:6b:d9:78:3a:46:c7:53:0a:84:
         40:fb:1b:90:df:95:01:da:3b:27:1c:89:cd:81:64:f3:d1:4b:
         b2:f3:27:a2:b8:a4:19:d9:fb:15:28:02:87:25:1c:94:48:a1:
         45:8b:da:77:0f:2f:8f:b9:65:f5:35:cc:9c:a8:75:3a:9e:e8:
         36:d0:61:d8:5e:52:20:fc:f1:c4:ec:69:51:c0:7f:ca:6b:60:
         15:a0:90:c3:32:0f:e7:64:27:49:45:7d:45:70:ab:b9:88:e9:
         3f:67:28:bc:11:cf:7a:e7:f4:b3:89:8e:4f:37:00:1c:7b:83:
         12:2f:28:38:96:81:18:d5:19:a7:c1:96:68:56:43:c9:8e:80:
         5c:9d:62:85:0b:dd:0e:28:66:27:26:9e:c9:13:ca:34:81:c3:
         51:ad:75:91:4f:df:e3:02:b6:e9:be:dc:a4:bb:a8:bf:75:33:
         86:7b:49:80:69:0c:2b:ce:06:1b:35:47:25:d2:45:ac:54:24:
         ab:23:f0:da:3c:34:db:f5:06:23:f6:ea:5d:2c:1b:f8:22:ba:
         b4:fd:59:91:b8:3a:9f:ed:6b:44:69:ae:fd:d5:31:c4:04:5d:
         8c:94:46:e0:f6:68:7d:c4:04:0d:9d:38:8d:9a:78:47:8e:93:
         22:81:d4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:52 2026 by rpki-client