This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
File:                     jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft (raw, json)
Hash identifier:          mZsOHUJZQvNVmV0VqyzuYLfWKLUfLVBQg3ZzPRZoPOI=
Subject key identifier:   56:88:E8:0D:25:30:BE:7B:EB:EA:80:26:3E:36:6C:F9:7B:BC:72:8A
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Certificate issuer:       /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial:       019C42464668508B0256D492B40015DE7D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 12:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:27 +0000
Files and hashes:         1: AanVvurhzUc2_YlhTUVI0EdSJQM.roa (hash: D8Ey7qoWHGx1lJPT+RSbE0DodoNoh42qXfRsH7R0814=)
                          2: jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl (hash: 68gi3aw3slos4sY5NcLov5UqIhZvMbbVrUi8erpL/m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:46:68:50:8b:02:56:d4:92:b4:00:15:de:7d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
        Validity
            Not Before: Feb  9 12:00:27 2026 GMT
            Not After : Feb 10 12:00:27 2026 GMT
        Subject: CN=5688e80d2530be7bebea80263e366cf97bbc728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:b5:64:ca:23:0f:07:b1:8b:d7:84:3c:a8:
                    dc:b1:12:a8:3b:db:3d:3c:af:93:e1:8d:f5:a7:3c:
                    c5:06:80:74:4c:dc:2e:2e:30:d1:cb:db:15:12:23:
                    9c:35:b5:50:df:99:06:8a:f7:ab:ff:1d:51:6d:fc:
                    5b:94:41:fa:9e:e5:57:9e:fa:ed:9b:c8:a9:88:23:
                    bb:aa:2f:31:3b:ba:54:4d:bc:32:23:a1:1d:87:66:
                    7f:d2:de:15:29:a1:f1:66:94:eb:fc:62:f7:a9:25:
                    fe:32:6d:ee:13:1b:4d:c1:6b:96:45:27:a8:34:f6:
                    78:45:30:e2:46:94:83:5b:27:b9:78:e9:ec:a1:5a:
                    b7:f4:d0:ac:1d:3c:8d:53:f5:72:50:4b:9e:2f:72:
                    08:30:51:16:6a:ba:d6:e2:e2:1a:6c:83:ff:f5:bf:
                    2b:9f:07:35:34:40:81:19:f7:71:15:08:00:d3:48:
                    f9:59:db:52:27:e7:27:49:9d:c4:ef:84:aa:d0:65:
                    47:1c:e1:43:b3:43:7d:36:8e:cd:26:8e:45:46:b3:
                    5e:d7:9c:05:64:9b:75:99:65:1c:5e:b1:ef:a1:b3:
                    0c:6f:e3:2b:29:db:35:38:e8:5c:1c:da:2c:46:81:
                    e0:b6:14:67:dd:05:88:5f:dd:6e:c5:8c:50:c5:10:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:E8:0D:25:30:BE:7B:EB:EA:80:26:3E:36:6C:F9:7B:BC:72:8A
            X509v3 Authority Key Identifier:
                keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:22:da:8d:b5:ec:5c:97:5c:a1:41:40:3d:8f:33:63:29:
         df:e7:6f:e1:1e:6c:29:f0:47:b1:46:9e:81:46:28:44:dd:b5:
         25:ef:c6:a0:6d:fd:cb:41:0b:a8:60:87:84:60:28:df:ea:55:
         2e:25:33:24:db:3f:61:09:e0:ba:c8:f8:e9:8c:90:31:4b:c7:
         32:ae:a3:11:27:0e:b1:fe:00:72:f4:17:ea:33:ac:2f:46:9a:
         32:ab:68:77:4f:df:64:63:42:75:2b:69:4b:fe:b5:7b:89:f5:
         4d:d1:c6:58:c5:f5:77:da:63:8f:3a:3d:18:84:c0:89:72:0f:
         f8:66:1a:56:cf:bc:cf:9b:95:95:ba:e6:66:15:a3:30:4a:27:
         82:17:62:2d:3d:59:d2:8d:86:4d:0e:a5:ed:33:56:31:73:14:
         e9:69:50:21:98:8b:cd:0e:bb:75:a4:4a:01:e0:2e:5b:c2:57:
         92:91:d9:e6:0d:49:f6:b5:b8:c6:e0:df:43:d8:0d:d6:83:0b:
         02:07:95:7e:e5:98:53:a9:71:81:97:6b:ed:52:20:34:da:4b:
         86:0d:20:07:17:9e:ae:5f:d2:38:ff:be:a3:32:5a:87:c8:de:
         a6:d1:00:0a:96:81:62:d8:e5:01:4f:6e:97:a1:f1:e4:98:b0:
         a3:a5:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:35 2026 by rpki-client