This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File:                     JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier:          +mX8Hy4R4tkgcmgPpLR+kW4qrSZbbVYV35K++HYRmyA=
Subject key identifier:   47:D3:88:D5:33:A1:92:73:E0:AF:0C:7B:D9:B6:01:E4:E2:C9:D0:85
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer:       /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial:       019C427DDE8F5BE7345D8D1AEE84B724B66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number:          0B2B
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: BQivohsh3mDQck/K3LPOerWYk/Ts1A6xYp4Y2KtZ27o=)
                          2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
                          3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:de:8f:5b:e7:34:5d:8d:1a:ee:84:b7:24:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457027e3a087b65f968b535e415f67432695876
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=47d388d533a19273e0af0c7bd9b601e4e2c9d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:e4:8f:1c:35:5f:93:e3:43:3a:75:b3:72:
                    89:22:46:44:ae:a6:c2:36:ee:33:23:5f:b3:57:92:
                    e3:f8:07:66:9c:b7:cb:b8:81:b5:ff:a8:fa:79:48:
                    21:ca:cc:e4:a6:69:99:c6:5e:97:5f:c2:4c:5b:7d:
                    69:d7:6a:68:66:db:08:3a:8c:1f:48:8e:77:44:07:
                    c2:e4:95:8f:df:82:f5:c9:57:36:71:c5:b0:61:d7:
                    2c:c5:d3:bd:1f:f5:02:e8:ad:9c:64:98:f5:ba:cb:
                    31:7a:a2:67:4c:8a:56:4b:5c:86:7d:14:8d:30:84:
                    61:83:21:3c:f0:87:0b:2d:da:08:a7:41:e5:e5:e9:
                    42:da:51:65:ae:72:8c:ca:0d:96:f8:6a:96:cb:ea:
                    0f:e9:1b:2c:1f:4d:33:19:a3:84:51:11:e2:6f:31:
                    a0:32:98:3c:a2:b4:f7:48:d5:e3:90:84:59:a4:e6:
                    3c:81:73:3b:e0:63:ce:1f:2a:c3:c5:7a:c7:b5:06:
                    d6:3e:e3:ef:29:45:e9:0a:ab:5a:b3:40:97:88:a1:
                    e7:fc:c2:68:03:48:d3:08:99:70:82:9e:d8:49:4a:
                    4d:27:ff:2a:59:b7:06:26:0a:fe:d7:82:88:17:15:
                    ab:72:bb:c9:21:5f:34:fa:a0:42:af:51:af:d3:59:
                    b8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:88:D5:33:A1:92:73:E0:AF:0C:7B:D9:B6:01:E4:E2:C9:D0:85
            X509v3 Authority Key Identifier:
                keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:57:3e:40:92:82:1b:07:49:13:36:7e:44:1a:3a:55:e9:20:
         38:9f:c4:44:1d:5d:b4:3a:18:f7:ce:7b:bc:2b:27:e4:a4:2f:
         27:a4:f1:bb:ac:00:f6:eb:3a:39:0a:7b:01:68:74:4c:9b:c7:
         f5:ed:83:87:5c:c7:fe:e7:8a:bc:8a:fb:83:53:a7:c3:0b:fd:
         08:03:ff:bb:92:60:c6:1d:f4:89:32:65:a9:0e:79:3c:fa:ac:
         d0:7a:9a:17:11:02:95:00:70:47:d8:66:e9:c9:8f:4e:82:c8:
         d3:f1:b6:28:7e:78:4b:33:e3:70:a6:b7:10:12:15:06:dd:f3:
         bf:19:6c:2f:60:0e:99:38:28:16:72:30:87:56:2b:1b:8b:12:
         e7:47:40:9c:58:03:cf:a4:52:a4:6f:f3:86:1d:20:dc:09:01:
         47:5d:45:cc:41:67:fe:23:f4:76:31:c5:8a:48:8a:c0:c2:c5:
         98:d7:50:d3:76:78:9c:c3:5c:1e:be:56:46:7f:d7:00:bb:ca:
         f7:71:27:a3:4c:17:66:d5:67:fa:a6:6c:b2:2c:91:a1:6a:ba:
         11:c9:67:1e:f4:59:65:ea:c7:b7:1c:5a:3b:bc:ec:34:37:f9:
         70:7c:7d:3e:f0:32:9c:6e:b1:61:d4:bd:de:a5:f1:ce:66:78:
         83:73:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:57 2026 by rpki-client