This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File:                     jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier:          RmtDgrIE9JwJuRNAuZH0j3OPIt10pUcL1FbcspeUG88=
Subject key identifier:   8C:05:EB:53:B2:81:CD:21:9F:E3:CD:10:18:82:02:AE:40:5E:94:87
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer:       /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial:       019C4434DFB06EE58B303EF8719275D1AB3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number:          0F1F
Signing time:             Mon 09 Feb 2026 21:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:41 +0000
Files and hashes:         1: WixuCuv6oK2h_hFTQCqiu7aJKaY.roa (hash: q9PZjoZVbTamxQQPVsYxw6N358GhwOGzbBLOqLT/7OQ=)
                          2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: HNnQ+l62NKJ5Stwk/FrUOBHgd7RKZaJL1V6nUKFmkKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:df:b0:6e:e5:8b:30:3e:f8:71:92:75:d1:ab:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
        Validity
            Not Before: Feb  9 21:00:41 2026 GMT
            Not After : Feb 10 21:00:41 2026 GMT
        Subject: CN=8c05eb53b281cd219fe3cd10188202ae405e9487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:2d:a4:18:a5:78:5c:2b:da:1e:9e:f5:47:
                    27:cf:0f:95:e0:cc:34:80:30:9a:7f:d0:bb:74:99:
                    54:30:14:d9:6a:3e:ad:57:6d:8a:35:f4:a4:f7:71:
                    a0:d9:5e:47:42:a0:5f:07:66:d2:15:0a:32:c5:c8:
                    fe:79:01:1b:af:93:e5:66:c8:4e:60:2b:1a:c1:31:
                    0b:48:a4:3d:1b:0e:89:1f:55:5d:85:06:e5:8d:bb:
                    2b:ab:b5:4e:90:12:24:6a:7a:f2:75:fc:88:5a:a2:
                    c9:d2:aa:4c:a3:0e:0f:a9:a8:0f:1d:ac:1e:78:ed:
                    24:18:f8:9b:cd:74:21:83:fa:d3:04:cc:af:c7:0a:
                    f2:f2:78:77:0e:ef:94:d3:2a:32:11:a9:6f:b3:16:
                    ec:dd:31:48:51:4a:19:36:ea:66:b0:8e:5f:62:14:
                    12:cb:4a:7b:a7:61:9a:4e:25:c9:58:d6:c8:41:70:
                    cf:aa:34:94:0e:de:02:cf:7d:d8:26:ed:c2:19:01:
                    36:ff:a2:29:67:aa:9e:3c:dd:b6:54:3f:4c:2e:26:
                    30:d3:f3:f7:84:34:d5:85:a5:42:3f:6c:b8:cc:02:
                    b6:7f:8c:f2:24:ce:de:61:9c:76:72:98:d1:6b:13:
                    c4:dc:01:2a:d1:7e:98:cd:df:34:1f:47:6e:b7:2d:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:EB:53:B2:81:CD:21:9F:E3:CD:10:18:82:02:AE:40:5E:94:87
            X509v3 Authority Key Identifier:
                keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:b7:f7:d1:50:9c:4e:9e:2d:cf:c1:c3:36:35:a6:df:a7:
         06:8a:06:41:bf:6a:64:61:a9:b4:c1:f7:a5:ec:98:9f:50:de:
         bf:71:9c:72:88:75:df:5b:ac:21:5b:ad:66:d9:81:f6:4d:79:
         15:ca:42:e8:33:6f:8f:56:d2:f0:f4:ff:bd:58:22:52:09:26:
         ca:8f:7e:cc:09:95:f1:f6:6f:f4:75:9b:04:02:35:40:80:6b:
         74:42:86:ed:64:ce:d3:60:ac:8c:17:1f:ae:06:d7:0c:d3:43:
         cb:90:b6:e0:24:68:70:7f:4f:8e:e8:63:32:63:21:ed:79:47:
         7f:6f:aa:bf:21:59:bd:b3:b3:21:bf:36:9f:83:df:e4:8e:73:
         3f:f4:5b:c7:6a:a0:78:2c:dd:30:d9:c5:1d:09:83:0e:16:0f:
         58:a0:19:cd:66:c9:aa:75:a1:c5:aa:ae:04:5c:28:d3:d3:04:
         91:20:77:fd:6b:22:7d:21:23:62:b1:5b:24:2e:ee:67:66:17:
         c3:eb:f4:e3:a0:03:e1:0c:4e:40:83:22:7d:9d:45:eb:c4:e5:
         d8:88:d1:82:66:86:92:20:a8:68:bb:7a:47:15:3f:39:e5:b7:
         dc:e2:4d:bd:9c:f7:b0:42:05:d7:dd:48:82:f3:8e:ae:d9:04:
         47:01:d8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENN+wbuWLMD74cZJ10as+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODEwZWRjNTFhYmQ2MWU2OWYzYzY5ZWU0OWQ4OGU5ODk2
YTZmMDkwHhcNMjYwMjA5MjEwMDQxWhcNMjYwMjEwMjEwMDQxWjAzMTEwLwYDVQQD
Eyg4YzA1ZWI1M2IyODFjZDIxOWZlM2NkMTAxODgyMDJhZTQwNWU5NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkMtpBileFwr2h6e9Ucnzw+V4Mw0
gDCaf9C7dJlUMBTZaj6tV22KNfSk93Gg2V5HQqBfB2bSFQoyxcj+eQEbr5PlZshO
YCsawTELSKQ9Gw6JH1VdhQbljbsrq7VOkBIkanrydfyIWqLJ0qpMow4PqagPHawe
eO0kGPibzXQhg/rTBMyvxwry8nh3Du+U0yoyEalvsxbs3TFIUUoZNupmsI5fYhQS
y0p7p2GaTiXJWNbIQXDPqjSUDt4Cz33YJu3CGQE2/6IpZ6qePN22VD9MLiYw0/P3
hDTVhaVCP2y4zAK2f4zyJM7eYZx2cpjRaxPE3AEq0X6Yzd80H0duty3E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwF61Oygc0hn+PNEBiCAq5AXpSHMB8GA1UdIwQY
MBaAFIyBDtxRq9YeafPGnuSdiOmJam8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEt
NDAxNDQ3OGJiNmM4LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zOTI1NGMtNTI4Ni00Yjg0LWI2OTEtNDAxNDQ3OGJiNmM4
LzEvaklFTzNGR3IxaDVwODhhZTVKMkk2WWxxYndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8m399FQ
nE6eLc/BwzY1pt+nBooGQb9qZGGptMH3peyYn1Dev3Gccoh131usIVutZtmB9k15
FcpC6DNvj1bS8PT/vVgiUgkmyo9+zAmV8fZv9HWbBAI1QIBrdEKG7WTO02CsjBcf
rgbXDNNDy5C24CRocH9PjuhjMmMh7XlHf2+qvyFZvbOzIb82n4Pf5I5zP/Rbx2qg
eCzdMNnFHQmDDhYPWKAZzWbJqnWhxaquBFwo09MEkSB3/WsifSEjYrFbJC7uZ2YX
w+v046AD4QxOQIMifZ1F68Tl2IjRgmaGkiCoaLt6RxU/OeW33OJNvZz3sEIF191I
gvOOrtkERwHYRA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:37 2026 by rpki-client