This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File:                     j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier:          m/uvQmo/2d3wKAjhzAPUmMM7GNccI3xHfuwquIavYC8=
Subject key identifier:   6B:16:7D:10:26:29:67:84:3F:8C:34:DB:5E:96:F2:00:2B:DD:85:C4
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer:       /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial:       019C427D4C3D5F03A6C00C48643B46EF1E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number:          10D1
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: UY4Yqxbc9sSKhreDQMl82padkQSAePrJ5QnJ7B4Lgus=)
                          2: t2ZZuk9Jhb77dG7jfBxACPE3v0Y.roa (hash: j8FLow634/sFX5We1fU/Tl5tl/Iw6/b+Vn5Ia8rywE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4c:3d:5f:03:a6:c0:0c:48:64:3b:46:ef:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=6b167d10262967843f8c34db5e96f2002bdd85c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:78:e1:f3:50:08:65:ef:23:d4:71:64:cc:
                    b6:e8:04:8e:99:12:e4:c5:e0:65:44:e8:2d:fd:60:
                    20:b0:58:ab:38:93:f8:1e:1d:0c:da:af:19:d6:ab:
                    94:7a:d3:50:89:c4:a2:6a:4c:bc:a1:d7:22:c0:6b:
                    03:34:bf:42:d9:56:72:1a:90:fb:45:9f:8e:72:e0:
                    5f:2b:65:bf:ac:85:52:c2:d1:58:39:74:db:7c:af:
                    bd:f0:4b:44:13:f3:8d:cc:f2:6b:b3:09:f3:67:6f:
                    bb:ae:50:c6:d6:94:86:ba:be:1a:61:6e:f7:48:1a:
                    13:a8:54:00:52:6f:7e:0d:0c:0a:23:63:a6:4a:4b:
                    0b:fc:53:93:ae:4c:b8:03:0e:7f:2a:1e:79:00:bd:
                    2a:c1:f7:f4:c6:88:ab:9f:e5:71:13:af:45:f2:1b:
                    c8:fb:56:17:2f:5f:8c:c2:5f:6a:da:7c:38:7d:ad:
                    fe:39:0e:6d:2c:02:f1:eb:62:0c:92:aa:af:4d:a3:
                    d9:38:37:95:08:f2:79:66:eb:7f:26:00:ee:b0:b0:
                    4b:96:22:2f:b3:14:59:58:36:8f:88:e2:6b:14:cc:
                    0c:6a:c0:ae:c5:c0:04:3c:84:33:b4:80:6d:51:94:
                    b0:7f:8f:c2:88:d7:4d:e8:d6:26:c0:2d:91:d2:34:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:16:7D:10:26:29:67:84:3F:8C:34:DB:5E:96:F2:00:2B:DD:85:C4
            X509v3 Authority Key Identifier:
                keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:ad:83:39:bc:e6:1a:90:a0:39:ca:3f:cd:a0:47:a7:f6:
         16:fc:28:fc:f2:28:61:e9:23:89:1f:be:13:f7:af:3c:3d:68:
         29:10:76:21:71:77:36:e7:90:49:8a:e6:da:b5:2d:43:f0:67:
         32:df:e7:1b:9f:38:9c:05:4c:75:b5:37:e0:1c:5b:c8:91:be:
         2e:1a:09:be:e4:09:d1:12:8c:12:30:e5:6d:12:20:77:03:ce:
         5d:b8:44:d9:87:29:d4:65:96:e2:cd:24:37:37:1f:ca:b9:2b:
         aa:54:0c:1c:39:60:b9:a1:e1:98:77:22:ef:a6:08:b3:fa:cf:
         96:2c:fe:0e:e7:e8:36:08:14:c5:d7:69:d4:69:fe:c0:09:a7:
         21:70:e5:16:d2:1b:16:ed:8d:6c:1f:20:ad:a7:b2:cb:92:20:
         6f:c9:45:74:b2:dd:1b:79:09:5e:55:20:33:d8:a0:1a:b7:cd:
         c2:3f:fa:b8:f7:af:c6:d7:d3:40:8b:d5:cd:80:6f:af:98:e8:
         49:be:cf:1b:d7:2e:78:24:c2:20:40:fe:1c:05:cf:7f:8b:1e:
         68:89:b5:4a:b8:b8:55:28:34:f5:d8:44:29:e4:f6:b7:ab:ca:
         92:31:45:79:c0:95:75:1b:38:bf:7c:6f:16:68:7c:8b:01:39:
         eb:59:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:42 2026 by rpki-client