This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          UognGs9p49QEo41G5QrqqczY8EbQKzAs7Ws8VXOJosw=
Subject key identifier:   3D:6C:41:CB:7F:F3:9C:15:EB:E2:F5:B3:39:82:28:A0:F6:2F:64:3B
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       019C427E0C69C03F5AFDBED94DCB81E9079A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          1433
Signing time:             Mon 09 Feb 2026 13:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:22 +0000
Files and hashes:         1: 6GEbyuj2qKMcq18FIsrq4Q_-YBo.roa (hash: jxGNQfVpSStE/8Ajsn9ngwqV0Uae1t1kqzkQgh9Yxbs=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: 39lNOs0tn9/KA4N23cBqfOQfoYgyJ0eo1Z9O6M+Ib3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0c:69:c0:3f:5a:fd:be:d9:4d:cb:81:e9:07:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Feb  9 13:01:22 2026 GMT
            Not After : Feb 10 13:01:22 2026 GMT
        Subject: CN=3d6c41cb7ff39c15ebe2f5b3398228a0f62f643b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:e8:10:9e:ff:32:31:cb:97:75:60:1f:a7:
                    46:d6:14:c4:bf:24:07:22:db:29:00:27:30:ce:8a:
                    d1:38:1c:e7:1b:d9:87:06:1c:af:27:99:7f:05:b1:
                    39:d9:7d:d8:e3:ca:37:83:a0:4b:52:cd:21:ab:d8:
                    fd:d9:c3:3c:a0:e8:2c:6a:e0:18:6e:7a:29:1e:a8:
                    ff:5c:b4:61:b2:e7:ee:8a:1a:ec:41:42:3e:7a:a1:
                    2b:22:05:fe:48:47:93:16:19:de:ca:c1:5d:77:61:
                    81:bc:b4:e3:ef:f9:4d:f6:54:70:e0:eb:ab:d1:fa:
                    dc:d0:ee:1f:16:29:8d:31:f0:71:b0:24:94:7a:e0:
                    33:64:ff:7e:dc:c0:21:99:c2:7f:2d:4c:6f:a9:01:
                    12:df:df:82:82:41:51:99:dc:20:5a:ae:66:00:bb:
                    83:a1:39:8b:76:71:99:9e:2c:30:d3:a3:e8:25:45:
                    e3:28:a5:2e:42:46:cf:6a:3c:a0:30:a3:b2:ea:03:
                    e2:c6:29:e1:bf:24:39:f9:4e:2c:f5:55:c5:78:e4:
                    09:56:51:4f:3e:a5:1b:d5:ba:ea:6a:d2:01:fd:92:
                    16:1c:ec:9c:b0:3c:0e:7d:42:d8:d4:fd:19:63:47:
                    cf:a0:b5:4c:8b:0b:8c:97:03:46:d7:fd:c5:4a:47:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:41:CB:7F:F3:9C:15:EB:E2:F5:B3:39:82:28:A0:F6:2F:64:3B
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:37:ad:98:db:6a:a8:27:e6:98:7d:a5:26:40:3f:99:f1:ba:
         67:66:d0:ec:c3:9f:e5:78:6e:de:d9:2d:97:3f:b1:cf:d6:e0:
         8d:a5:6e:be:2d:14:86:34:06:c8:c8:ea:22:e8:7f:88:f3:c5:
         93:4f:5d:04:07:2f:d1:f2:fd:7d:55:47:64:56:5c:e0:ce:85:
         0b:be:45:1b:01:87:99:24:f6:b4:e7:93:db:82:1d:44:3d:be:
         21:00:4b:e7:97:1b:7c:55:e3:6d:0b:60:30:29:33:5e:3c:bf:
         9f:df:bd:aa:8b:cb:ff:f1:a7:dd:43:44:a6:7d:f1:d0:3a:b5:
         e5:14:3e:56:8e:e7:f0:2c:2e:84:b6:6b:dc:58:25:83:7f:a6:
         78:3b:fc:6f:4a:06:f2:d7:a8:da:7a:b9:a8:42:dc:09:35:12:
         41:a3:f7:1f:33:29:ba:5c:ef:62:40:08:ad:0f:16:c1:aa:3b:
         05:04:5b:8a:30:42:22:3f:a6:20:43:54:8c:bc:d6:8f:14:5b:
         41:06:f7:18:fd:ad:98:08:7f:a8:49:24:03:50:b8:33:e9:91:
         e0:ac:00:85:3b:ef:ff:5d:81:23:0f:10:3e:18:24:6c:34:82:
         13:3a:6e:57:5a:d7:13:9f:6e:ce:01:26:ee:dd:03:04:04:dd:
         de:fd:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:17 2026 by rpki-client