This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File:                     jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier:          5ScvFIilwSLyV0YpTOjlieKI6JkMlRLFPqclseLioLQ=
Subject key identifier:   46:CF:9F:55:D0:76:77:FD:98:75:4B:BC:C3:C6:DA:30:76:87:03:DC
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer:       /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial:       019C42B496F629C37380D8DC20E215417E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number:          0F6F
Signing time:             Mon 09 Feb 2026 14:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:57 +0000
Files and hashes:         1: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (hash: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI=)
                          2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: MvPbSfhe+VyRJmsOwj+KRax48cStWup6tpmbeQa5yKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:96:f6:29:c3:73:80:d8:dc:20:e2:15:41:7e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
        Validity
            Not Before: Feb  9 14:00:57 2026 GMT
            Not After : Feb 10 14:00:57 2026 GMT
        Subject: CN=46cf9f55d07677fd98754bbcc3c6da30768703dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:d8:5b:9b:9d:a5:2f:82:80:63:92:87:c8:
                    7f:19:b0:61:3a:d1:5a:58:6b:33:2d:70:39:62:74:
                    0d:13:3b:fe:79:16:50:9e:af:6a:8f:c2:95:a9:3e:
                    1c:97:7a:90:5a:d6:59:2d:df:12:31:ff:48:f6:55:
                    e4:fe:b2:bc:f2:20:95:09:2a:91:f8:da:83:c2:f2:
                    e3:a0:84:bf:de:c2:70:ce:4f:93:64:9b:e8:41:f5:
                    68:0f:cc:48:90:e2:13:d0:d5:6a:32:8b:ac:fb:a6:
                    16:8c:71:9c:37:1b:39:cf:65:f3:26:cc:c5:cb:76:
                    d5:78:44:d1:86:af:8d:89:6c:56:e0:c5:bb:b5:b1:
                    cf:e5:44:2e:32:2e:d7:de:70:a2:28:2d:5b:aa:d9:
                    4b:ee:9d:f6:a4:18:e3:e3:f6:e0:d8:88:b5:1d:43:
                    4f:80:c9:bb:a4:d3:3b:8c:36:62:d2:ec:0b:ce:95:
                    a8:e2:3d:61:ea:80:db:9b:d3:29:4f:f9:c4:27:42:
                    bb:94:0f:7c:8b:b1:bd:8b:99:58:0c:80:79:73:44:
                    5b:09:b8:e6:e1:0b:f6:84:f7:83:d9:fd:11:13:0e:
                    52:4b:85:1e:ac:4c:48:11:89:aa:c6:b2:7c:b6:a2:
                    82:ec:01:c8:09:f5:dd:07:8a:72:ad:16:06:d4:42:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:9F:55:D0:76:77:FD:98:75:4B:BC:C3:C6:DA:30:76:87:03:DC
            X509v3 Authority Key Identifier:
                keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:d6:82:e9:b0:24:ad:63:61:e7:f9:ce:f9:30:ed:d8:69:
         d1:ab:58:8b:35:eb:ad:8b:77:5d:4a:bd:ed:b9:51:5c:6a:7d:
         b4:31:be:16:e1:23:d6:46:97:4e:12:82:5e:10:f6:32:6f:95:
         f0:af:f4:3c:36:35:ba:1e:52:32:2c:2c:44:29:60:92:bc:2c:
         aa:30:cb:91:c8:c5:bf:14:dc:c4:a8:61:38:3d:bd:11:a8:96:
         de:3a:37:72:a2:2b:e9:67:29:92:a5:0e:e2:8c:b7:b3:16:74:
         55:62:7a:81:64:c2:06:b8:7a:a4:03:ca:39:c6:b3:56:fd:48:
         44:d9:9f:72:9f:b5:a0:f9:05:82:f7:f3:45:f9:bd:0c:81:a3:
         74:0f:cb:5b:0e:6b:7f:a0:df:43:e7:bf:77:80:f6:f9:1e:b2:
         35:13:8b:99:84:05:65:17:21:ec:00:97:eb:9b:8d:00:5d:8d:
         78:1f:3d:f9:02:cc:47:9f:8f:83:a0:3e:27:10:2c:df:19:a5:
         0a:04:a2:19:43:bd:f4:ce:c6:e5:24:86:0f:9d:b2:31:f1:71:
         9c:eb:3c:64:08:03:7e:81:9d:9b:76:f0:5c:f7:b2:65:ad:a4:
         3b:63:75:49:7f:eb:6f:86:9e:cc:f1:c5:38:61:ae:5b:da:8b:
         7a:27:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:21 2026 by rpki-client