This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File:                     j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier:          9SkI5zejQzrTHhHfay1esROri0Uv9ukyd2wFmoNLsjg=
Subject key identifier:   15:1D:6E:B7:1D:27:21:D3:96:34:7D:27:30:DC:E5:A2:CE:8D:E0:EA
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer:       /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial:       019C435963928A32FB60B0D21A854D222F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 17:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:57 +0000
Files and hashes:         1: HJnj8_fGCoJyE1urHv4cHdz9YF0.roa (hash: vG8U6KbBLWi3A5le7qHak88pNNLwlA0sSunnRfJLuks=)
                          2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: fXO8pa79acgrM2M3UtJjdJ1wQjTuHAZoxGvgB42qZXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:63:92:8a:32:fb:60:b0:d2:1a:85:4d:22:2f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
        Validity
            Not Before: Feb  9 17:00:57 2026 GMT
            Not After : Feb 10 17:00:57 2026 GMT
        Subject: CN=151d6eb71d2721d396347d2730dce5a2ce8de0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:61:5f:4e:a0:61:ca:eb:9e:af:68:e9:ea:
                    10:5c:1b:6a:36:67:9d:9a:e6:87:01:6b:8d:1a:05:
                    4a:9d:19:c9:07:f1:a6:5d:0a:99:58:0b:da:7d:aa:
                    4c:a3:4e:58:20:ac:8e:30:c6:d9:f7:4d:a3:6b:7d:
                    39:c6:fe:1c:bc:f9:9e:24:cd:62:ed:7f:63:98:53:
                    ed:b2:bb:e3:8c:11:8a:fe:36:59:34:65:fd:b5:27:
                    c1:ef:6c:ad:5b:5f:33:44:0e:cb:97:1b:61:76:40:
                    fd:e3:5a:af:be:e8:01:06:e1:56:1e:3d:08:8e:e9:
                    44:26:57:60:af:73:9c:99:8f:79:e1:c2:79:bf:71:
                    4b:1e:7c:7a:96:93:6f:d9:6e:51:29:5d:2f:10:85:
                    35:44:14:81:a3:ec:8a:40:d6:ee:4f:20:69:1e:04:
                    49:f3:dc:eb:72:df:43:24:74:7d:c2:e1:de:31:5f:
                    e5:d2:4e:15:ff:ae:01:af:19:4b:f8:f5:0f:7f:68:
                    b3:76:43:81:96:f0:e5:32:05:85:be:82:56:12:ef:
                    34:b6:02:39:e0:82:69:51:4f:a4:4e:ac:d3:e6:ca:
                    bf:ba:e3:3a:c0:52:1e:8b:1d:09:9f:77:ca:8c:bb:
                    05:e3:3b:08:ff:94:6b:4e:7b:e2:3e:99:99:b5:12:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:6E:B7:1D:27:21:D3:96:34:7D:27:30:DC:E5:A2:CE:8D:E0:EA
            X509v3 Authority Key Identifier:
                keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:aa:3d:3c:5f:32:81:a6:26:a7:46:24:9a:28:a1:ce:4e:
         99:96:56:55:6f:8a:e6:3d:a2:3e:f7:cf:6a:10:7d:aa:58:87:
         a6:a1:ab:da:ba:2c:3a:dc:db:29:88:87:bd:0c:25:20:cc:36:
         19:f5:a0:88:5b:31:3d:b0:8e:fc:75:7e:f3:a2:3c:80:32:66:
         6d:a2:82:f8:2e:3c:73:61:4c:90:e1:47:44:fb:4a:67:13:d6:
         8f:8c:d1:8a:3c:ca:c8:bd:f4:ca:45:d8:03:3b:e8:49:54:0c:
         b2:29:ca:fe:16:0b:60:80:60:af:5e:3b:46:ed:50:2e:2f:44:
         ce:39:b5:4d:f5:6e:26:36:f4:3a:8e:97:48:91:4c:de:69:24:
         3f:bb:c7:af:fc:51:55:c6:3c:db:df:27:60:22:2f:5b:99:a8:
         a2:17:5d:b6:c9:d9:bc:2c:7f:03:1e:44:35:21:32:b6:90:9a:
         be:5d:00:96:54:38:60:dc:02:6a:f0:1e:dc:92:a1:c2:68:74:
         de:bf:a3:c8:6a:82:81:ec:45:77:c7:0a:5b:cf:04:ce:94:76:
         9d:04:67:c2:97:f0:5e:13:4a:ce:7a:1b:23:d6:d5:b9:af:a5:
         3d:ea:1d:c0:a1:4a:36:80:e9:e1:8c:e7:98:30:3c:0a:d2:78:
         3a:6d:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:41 2026 by rpki-client