This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
File:                     jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft (raw, json)
Hash identifier:          IFKRkdCRlkV4D9TBYQ3+5kgyDMK2XwuK2f6i4XVUlh8=
Subject key identifier:   9D:7D:66:39:67:33:75:99:1B:A0:72:EB:46:7A:E9:4A:63:CD:EC:D1
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Certificate issuer:       /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial:       019C4322103B4BF0219E51181493BC61DFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
Manifest number:          17A3
Signing time:             Mon 09 Feb 2026 16:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:31 +0000
Files and hashes:         1: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (hash: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ=)
                          2: OrwE5xqVrMg0jje9KVbhzaSvfy4.roa (hash: 4OkKhqZxcgcyo5nnUlRHnt2gQS83MSADz5bGQGnuxl4=)
                          3: jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl (hash: n9LjHHpBbmh/MWO0FXT5+3fytWmyPjxWonGMIiK2ttU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:10:3b:4b:f0:21:9e:51:18:14:93:bc:61:df:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
        Validity
            Not Before: Feb  9 16:00:31 2026 GMT
            Not After : Feb 10 16:00:31 2026 GMT
        Subject: CN=9d7d6639673375991ba072eb467ae94a63cdecd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:43:cb:d7:95:3f:da:eb:87:5d:63:ca:e7:
                    63:7c:21:2d:de:9e:b8:70:f9:54:56:d1:1d:ab:62:
                    89:ca:ff:df:55:ac:94:1c:21:28:ff:c8:cf:7f:6a:
                    20:43:0a:50:11:6c:18:5b:c2:91:fd:e5:d9:12:0c:
                    03:b2:4a:6c:76:d5:c7:41:48:e8:ad:b1:5c:d7:c1:
                    4a:f8:84:eb:a9:59:b4:2c:07:03:ac:d0:5c:3e:6a:
                    9a:29:04:13:3c:63:53:76:33:c5:de:74:53:b6:a1:
                    63:f0:c5:8d:5c:1d:79:51:04:9c:6e:35:89:c3:44:
                    99:de:b4:3c:55:25:fa:96:73:ea:8d:e7:b4:fe:7c:
                    ce:78:7f:e5:80:15:82:0e:c6:28:03:85:02:ee:6c:
                    55:3e:61:b4:bf:b4:12:15:7e:e3:9a:e3:07:5c:27:
                    84:d2:8f:2e:6f:15:d6:8f:77:90:9e:26:14:ed:bf:
                    ce:aa:c1:85:91:66:32:77:eb:6c:ae:63:6c:f5:3f:
                    01:4f:ee:be:bb:3d:13:67:f3:81:21:52:5e:e7:0d:
                    40:c8:f3:97:00:7b:ab:ce:74:af:32:7a:04:77:6d:
                    fc:ca:5a:c4:d0:f7:be:03:f6:82:88:d2:46:a2:3d:
                    64:70:55:1a:49:ed:f5:a0:b8:73:69:6f:6e:5e:62:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7D:66:39:67:33:75:99:1B:A0:72:EB:46:7A:E9:4A:63:CD:EC:D1
            X509v3 Authority Key Identifier:
                keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:86:09:50:54:78:84:f1:81:80:05:98:47:76:1b:4b:39:b4:
         d2:21:94:04:a8:be:8c:cd:a6:2f:ef:e5:db:9b:b7:f8:bc:73:
         4d:59:82:b4:95:07:50:1e:48:ba:6e:e3:8f:1e:f8:b1:bb:37:
         07:7a:c6:fe:a3:47:e2:0b:87:0b:30:25:6d:3b:07:65:f5:8b:
         c3:03:c5:b8:a2:0d:6e:df:c5:f0:3d:a7:ee:f3:2b:cf:fc:e1:
         31:06:5e:4d:a3:b4:4a:84:57:a9:7d:3c:2c:68:bc:14:08:87:
         5b:c6:92:ca:bb:02:38:aa:cc:dc:80:80:c2:9f:10:03:1b:50:
         bb:50:97:ce:f1:36:8a:48:af:98:e1:da:c6:c4:1f:71:41:f4:
         21:fe:c1:e3:c6:48:24:5e:99:de:4e:d0:a6:bb:a1:76:e6:25:
         be:92:48:ef:5f:06:75:d3:4d:15:e9:85:35:2a:59:43:71:a0:
         e5:bc:b6:c9:40:03:95:5f:2c:67:c8:4d:57:ad:ce:93:e5:07:
         d1:07:a0:82:7a:9e:62:06:35:c3:1e:a1:9b:f7:23:5c:30:0e:
         d7:fb:97:16:c4:da:4e:15:bb:44:1f:f5:f3:78:21:88:6f:98:
         d4:d7:67:cf:04:0d:ec:3e:3f:3b:d3:12:c9:a1:59:68:02:0a:
         ab:c2:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:04 2026 by rpki-client