This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File:                     jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier:          P/6wTPPcbAqH3h1PKnG6YHiheAthBdMbBWtoO4x9rdY=
Subject key identifier:   7B:82:37:5D:48:07:80:D7:3B:EF:63:3E:A4:01:18:41:79:C6:73:1A
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer:       /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial:       019C20600ACA48B0B84C418777F93FE7365D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number:          0458
Signing time:             Mon 02 Feb 2026 22:01:30 +0000
Manifest this update:     Mon 02 Feb 2026 22:01:30 +0000
Manifest next update:     Tue 03 Feb 2026 22:01:30 +0000
Files and hashes:         1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
                          2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
                          3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: CLzGzZSF9EtkbgbIAhzu/UlsH0xG18tHnE7XlkKli60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:60:0a:ca:48:b0:b8:4c:41:87:77:f9:3f:e7:36:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
        Validity
            Not Before: Feb  2 22:01:30 2026 GMT
            Not After : Feb  3 22:01:30 2026 GMT
        Subject: CN=7b82375d480780d73bef633ea401184179c6731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5e:1e:00:5d:71:d4:bb:36:ab:51:b0:ee:ef:
                    33:e9:82:fc:f0:cd:5f:71:fd:6c:20:10:4e:12:fd:
                    ac:a7:79:28:e8:c7:8d:ee:ff:33:b9:f6:72:5b:59:
                    e7:f9:b1:fd:3b:de:85:aa:8c:76:28:be:38:f4:3e:
                    c3:f0:5b:de:98:01:d3:a8:af:ca:b8:29:cd:cc:b9:
                    32:64:cb:15:4d:e5:27:ad:db:83:a3:0b:d0:83:75:
                    0f:f8:7f:28:8a:e7:e1:ad:ac:f6:25:34:71:d0:36:
                    f6:53:bf:71:68:07:f6:9f:c4:4a:63:99:5f:6a:18:
                    de:01:ed:4b:52:b9:36:aa:b6:75:08:6e:0a:47:92:
                    56:19:41:d3:75:19:69:c0:bc:18:8b:b6:4b:f3:ec:
                    0e:4c:29:56:09:39:d2:9d:91:2c:4f:c0:cb:1d:7b:
                    8a:fc:95:dc:b4:70:d1:a7:61:7d:72:44:86:db:50:
                    96:b1:ec:3c:b0:0d:a7:13:5a:3a:0d:7f:0b:46:96:
                    31:1c:b2:b7:70:73:89:5e:ec:6c:cc:ef:df:e5:d4:
                    c3:61:85:42:1a:04:57:9e:04:0b:42:83:79:69:fd:
                    7e:f5:62:8a:09:42:69:44:1a:40:36:e0:a7:6f:c7:
                    51:ca:8c:5b:37:5e:45:96:08:b3:6c:4d:bb:67:e4:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:37:5D:48:07:80:D7:3B:EF:63:3E:A4:01:18:41:79:C6:73:1A
            X509v3 Authority Key Identifier:
                keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:13:f4:ae:9d:93:4b:ed:ad:1e:b5:0c:d4:25:bd:eb:a5:42:
         dc:c3:57:34:90:80:32:74:f6:97:dc:b8:7d:b4:03:7f:01:db:
         89:a7:9a:f4:9d:13:76:5e:be:b0:68:e0:8f:b0:37:ce:a2:49:
         9d:d9:4b:69:95:f0:37:12:bb:74:4e:de:54:e3:b8:a7:52:15:
         84:5b:f8:30:e1:36:16:ca:19:43:1f:b1:9c:75:1b:94:f8:a4:
         73:ba:84:ef:46:af:9b:c3:b6:6b:85:00:13:c0:dd:ab:1b:9c:
         69:41:c2:bd:89:52:bf:48:64:40:8f:b1:96:32:cd:3d:64:20:
         8c:08:cc:ec:0a:39:27:bb:13:45:4d:09:87:f3:53:d9:48:9d:
         bd:47:8e:7a:96:ce:07:d2:8a:f4:b7:87:2f:49:6d:47:48:a0:
         49:4a:6d:c9:64:b9:33:88:46:e0:c2:40:eb:a8:78:00:42:6b:
         df:53:60:5b:7b:7a:96:ee:80:68:83:9a:d1:55:d7:3f:0a:26:
         8a:50:74:50:61:a7:81:b0:64:ac:99:df:db:f0:dc:3c:27:07:
         66:1a:32:af:6e:e7:ec:02:a5:b1:95:fb:5a:8d:14:ba:f5:a8:
         c1:47:a4:f0:68:d9:9f:0f:cb:72:87:53:62:89:74:a7:53:94:
         89:d4:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 07:17:03 2026 by rpki-client