This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          dGyEa4RYOOUWTtFCRASVJUYnibwEZflJ7HcqsT6DS1g=
Subject key identifier:   6F:88:8B:04:D6:E6:B3:FE:5E:89:5C:7E:B8:78:49:4C:C6:FE:EA:1D
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       019C4358FFF48FEA3AF6402867E46CF9ECDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          086E
Signing time:             Mon 09 Feb 2026 17:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:31 +0000
Files and hashes:         1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: b3vPKBhlQBoB7+DOAOEIz8HWVI3BHiQEoMoxUBNmSmc=)
                          2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:ff:f4:8f:ea:3a:f6:40:28:67:e4:6c:f9:ec:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Feb  9 17:00:31 2026 GMT
            Not After : Feb 10 17:00:31 2026 GMT
        Subject: CN=6f888b04d6e6b3fe5e895c7eb878494cc6feea1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:4e:9c:c8:a7:f0:44:a8:be:92:49:4f:47:
                    8d:69:8e:89:4f:d0:ad:a6:12:df:b0:22:37:90:7e:
                    63:f9:1b:f3:9c:0a:8c:0a:37:1d:3e:58:84:41:7c:
                    e9:d3:46:11:0e:41:77:03:82:0c:fe:2a:1f:53:fe:
                    20:fb:ba:bc:ee:a3:60:31:25:d6:60:fd:a9:c1:fd:
                    f8:0c:b1:37:a5:e6:ba:d9:f2:8f:b6:2c:b5:f8:a4:
                    62:8f:10:23:d7:5e:10:a4:76:ed:8b:da:4d:1b:0f:
                    87:b0:01:bd:49:aa:5f:29:6e:f2:ea:76:f3:6d:50:
                    c6:1e:0d:b2:a0:8d:98:c3:28:c5:7a:73:89:da:1c:
                    ae:db:a6:20:18:96:fe:c6:a5:77:ad:df:f7:cb:41:
                    4d:00:9a:1a:6e:d2:78:bd:e4:c1:a4:f9:68:8f:75:
                    65:ed:2f:7b:a2:c2:0b:b5:6f:0a:5e:15:25:fb:a3:
                    69:00:a2:94:ca:ec:4d:a5:9b:25:32:68:c5:18:c6:
                    d1:df:f6:f5:76:92:69:a0:dc:48:d0:79:01:03:85:
                    7a:a1:1b:f5:95:e4:90:9c:e3:b7:b0:f4:0b:ab:87:
                    1b:b9:86:4e:28:6b:2d:ab:09:e6:fc:a2:cc:a9:9a:
                    25:7d:19:6a:bb:d7:88:ed:77:7c:11:f4:11:7d:34:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:88:8B:04:D6:E6:B3:FE:5E:89:5C:7E:B8:78:49:4C:C6:FE:EA:1D
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:47:c7:e3:b4:68:99:c0:e2:01:33:ab:d8:fa:59:3a:22:
         83:e7:c5:f5:cc:db:ea:14:02:29:53:b5:36:f4:0a:a7:5f:4f:
         0f:d8:66:e6:08:20:37:a9:89:b1:bb:ab:3c:20:eb:5c:78:68:
         e2:10:73:22:3e:6e:11:58:91:62:15:16:5b:ab:ff:d9:da:3d:
         cc:0a:3e:23:fc:dc:2e:13:14:84:48:b1:07:8b:3f:fd:c6:46:
         ca:63:55:5c:ce:a0:c0:49:77:03:2c:6c:46:b1:5c:12:3b:b3:
         cd:ba:36:b2:e1:29:ae:f7:8e:78:55:0a:89:96:41:7e:df:dc:
         75:92:d2:16:55:e3:84:ac:98:a8:f2:a3:74:b4:2c:d4:66:ad:
         13:41:e7:3d:a3:ef:a7:ce:30:26:86:fe:04:aa:ac:3b:3d:7f:
         04:a0:26:30:a2:9d:60:d9:a6:d0:fe:d7:09:d5:fb:f2:04:ff:
         45:5a:3f:a8:3f:37:c7:f7:7b:17:7b:6b:67:52:7c:62:2d:a1:
         f0:0c:72:c3:93:8d:91:07:3c:78:9f:ab:c4:28:96:74:a4:5f:
         48:a1:93:2d:da:77:eb:45:a3:a6:76:f7:2c:06:9b:ee:36:3a:
         fa:71:14:32:f0:a3:8a:a0:24:9b:8f:26:8b:e4:d4:c9:2c:6c:
         a2:bb:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:25 2026 by rpki-client