This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File:                     rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier:          Ba2gFyibxjw7JCn68GDLxyTx0SiR0OgNS3Zru/vM91o=
Subject key identifier:   4B:94:5F:5F:74:90:4F:B3:DE:A0:BA:8B:AC:C6:6F:D8:61:CB:BB:F4
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer:       /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial:       019C43C6AD96212614BA8AF908BD5440FFE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 19:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:19 +0000
Files and hashes:         1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
                          2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: gIwoAgZJu7RbnEpONGRWRZuu3BEG9qIruRqaCtM7Am8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:ad:96:21:26:14:ba:8a:f9:08:bd:54:40:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
        Validity
            Not Before: Feb  9 19:00:19 2026 GMT
            Not After : Feb 10 19:00:19 2026 GMT
        Subject: CN=4b945f5f74904fb3dea0ba8bacc66fd861cbbbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:d2:01:7d:c2:e4:0e:99:d5:97:6f:b6:e7:
                    91:7c:57:65:e5:f5:53:11:80:52:7c:c5:d6:0d:2b:
                    b9:b6:0b:95:7b:94:8b:89:45:86:63:55:23:7e:d0:
                    7f:57:56:87:ad:9c:eb:ea:49:d5:b7:3a:ba:4e:12:
                    fe:bc:7f:db:9f:0a:8c:08:ee:15:40:43:d6:55:28:
                    52:74:aa:7c:f1:90:6e:75:8a:50:d6:bc:19:29:25:
                    26:c3:a7:e0:b8:48:a0:37:07:4f:7a:c5:2e:e5:53:
                    c3:43:47:00:04:d4:66:6b:f7:33:37:df:0d:14:e9:
                    99:61:ed:87:5a:2f:54:19:59:31:e0:13:f1:13:8f:
                    14:dd:ee:eb:3b:a6:c6:3a:d6:28:02:0d:38:3e:b2:
                    89:be:7b:2f:08:35:ac:3f:2d:43:ec:1b:ec:c0:b1:
                    aa:91:73:75:09:d1:0e:c1:2b:3f:14:1c:ea:c0:0a:
                    43:98:a1:5d:3e:a5:94:79:1b:fc:45:0a:58:3c:d1:
                    bf:49:91:9a:77:ed:92:0d:be:2d:00:83:92:7b:2d:
                    25:35:fc:9f:a9:65:f5:79:01:03:b5:8a:dd:93:49:
                    55:81:e2:3d:31:43:34:fa:f2:00:88:58:19:23:c5:
                    63:a6:ee:ec:a1:46:c1:68:5e:e3:ba:4e:59:0c:c4:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:94:5F:5F:74:90:4F:B3:DE:A0:BA:8B:AC:C6:6F:D8:61:CB:BB:F4
            X509v3 Authority Key Identifier:
                keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:68:05:71:34:de:7d:98:7d:f8:47:fd:bc:72:d5:7e:eb:
         f2:41:f5:40:80:86:0d:50:f8:ce:8b:f9:41:2c:bf:b3:d6:12:
         48:e2:a9:67:ba:e0:7f:28:06:ab:f1:e6:78:4f:31:be:a3:33:
         40:0a:9f:fc:fe:e8:e5:54:1c:08:9a:72:69:01:51:ab:83:78:
         44:45:86:93:1b:aa:47:af:fb:71:1f:14:7b:f5:06:1f:a4:b1:
         dd:67:e3:94:4e:8a:0b:aa:8d:29:ab:5d:48:94:53:13:ae:20:
         e1:1a:2a:56:de:75:bd:ce:27:59:18:f6:69:6b:37:09:5f:2f:
         0e:2e:4d:7d:49:de:a9:ce:eb:b9:dc:9c:c6:22:3d:bc:34:d1:
         fa:e8:48:45:f7:3e:fe:86:41:d4:7e:b1:31:3c:9a:4e:4c:4e:
         da:3f:54:b5:7d:95:b7:13:44:23:02:be:27:a7:cc:b4:36:08:
         6b:6f:e5:8e:17:a6:aa:90:d6:21:ba:ad:46:1f:2b:23:c9:d1:
         9d:2a:1a:20:15:3d:dc:59:e6:27:d8:c2:89:9f:a6:94:e2:61:
         be:c6:0a:69:ff:ae:a2:a8:d3:9a:58:18:65:ba:87:42:1d:66:
         c8:3a:cf:58:d8:d9:bc:9c:49:d4:27:79:c3:07:14:cc:ea:64:
         09:a9:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:28 2026 by rpki-client