This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File:                     Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier:          z4jl4+505HfV1n8BDIJ6zVMc5Wvi4WO0t6f+rtMVIRk=
Subject key identifier:   91:96:0B:87:5B:6D:7B:C0:2C:68:8D:87:E5:0F:3E:55:E4:3E:37:5D
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       019C41D903300A75D945EA49E5F02C302F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number:          0A40
Signing time:             Mon 09 Feb 2026 10:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:06 +0000
Files and hashes:         1: GfLgRhct9oW5wY_4r00bTaw-xQ4.roa (hash: 3WghsPFrwdwVOD+irlDGlyeR+gBCQou6bkuUAmEByMw=)
                          2: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: hOKF/UXLbR3KRqg0QPZBirTy/MWf22BoNwKAe1xqZfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d9:03:30:0a:75:d9:45:ea:49:e5:f0:2c:30:2f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Feb  9 10:01:06 2026 GMT
            Not After : Feb 10 10:01:06 2026 GMT
        Subject: CN=91960b875b6d7bc02c688d87e50f3e55e43e375d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:e3:35:eb:6a:b4:00:f1:c8:a7:89:22:61:
                    8d:7f:ed:64:0b:76:e7:77:b0:17:0e:15:85:46:f1:
                    af:38:25:8a:ce:10:13:9f:e6:58:93:26:98:29:43:
                    13:32:43:dc:c4:05:1c:81:af:7c:2c:6d:f3:f6:c0:
                    db:b9:71:73:cb:e8:42:b6:54:2d:8f:e8:81:12:32:
                    ed:07:04:bb:8b:2a:05:a9:5d:ca:26:d2:8e:70:6d:
                    5b:3b:a2:ba:0a:eb:aa:2d:a7:66:e1:b9:cc:96:42:
                    9e:2e:57:f5:fc:4b:20:80:eb:d8:be:60:bf:c2:22:
                    57:3b:f7:00:c4:ae:f7:10:42:94:92:c8:89:9b:58:
                    d6:0a:6b:a3:ab:bf:d3:a8:15:ef:fa:35:23:db:e8:
                    ab:00:a1:5b:6b:80:75:23:83:ca:fb:5e:2b:e9:6c:
                    f6:85:aa:cc:7c:49:d5:23:3a:5a:42:00:ad:08:41:
                    66:3e:b3:cf:64:f1:97:19:6a:f7:13:c0:cb:f7:5c:
                    ab:19:81:0b:6f:f6:a4:6f:d5:41:09:65:be:d5:47:
                    04:07:5f:cf:21:b3:4e:b8:ca:ac:e1:13:27:08:4b:
                    87:7a:b8:5e:0e:95:61:86:ef:60:ed:cf:c3:7f:3b:
                    fb:cf:72:16:aa:df:f4:54:5a:f0:2d:24:97:6e:95:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:0B:87:5B:6D:7B:C0:2C:68:8D:87:E5:0F:3E:55:E4:3E:37:5D
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:19:d2:ef:e0:bd:e2:25:b3:74:7c:76:0e:01:88:d9:8c:
         5a:bd:21:23:f1:c3:f9:aa:7b:79:46:4e:ef:42:5e:f5:e3:6c:
         c8:e8:00:1e:bd:a4:ff:c5:a5:b6:8e:50:a2:63:d1:80:ba:69:
         64:e9:60:8a:35:b3:97:e1:75:32:c9:56:e1:fa:56:bc:d5:73:
         ca:d2:ef:66:64:84:12:4a:f4:cd:64:41:b4:98:60:76:30:63:
         e7:a9:d7:1e:47:64:e1:83:02:2e:6b:51:a7:14:1e:35:14:55:
         5f:e1:5c:5a:d2:c6:76:79:64:b0:80:80:57:22:d7:a9:3c:57:
         ce:24:7e:51:ee:af:8e:29:e0:e5:2f:df:a5:a5:1d:8e:2d:e3:
         57:0e:28:86:df:4e:76:7f:30:54:96:c2:25:c5:32:ae:ce:85:
         a1:7f:16:f4:de:16:aa:40:98:ca:45:41:36:05:e5:da:58:c1:
         c1:d0:61:41:ac:03:e8:e4:ab:63:fe:38:3d:d9:be:d0:97:f8:
         9a:66:e8:4b:14:b6:5d:10:16:b7:bb:ce:9e:6e:28:22:b8:66:
         3f:23:fe:ef:55:81:39:7a:7d:cc:c7:5d:e3:a5:aa:70:ea:d7:
         08:89:a9:39:20:52:2e:69:9f:93:67:08:8c:c7:02:5f:18:d4:
         65:0a:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:38 2026 by rpki-client