This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File:                     rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier:          YgAem6I0t+DFuQd4Ipls7L8XropBwSvLN84DPgGnpig=
Subject key identifier:   6E:9A:27:E1:4D:3D:0B:8D:F5:36:7A:BA:4D:C9:6D:84:29:76:55:89
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer:       /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial:       019C4358D1DA8F6E92351F9FBE4F9CBBCC4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number:          15CE
Signing time:             Mon 09 Feb 2026 17:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:20 +0000
Files and hashes:         1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
                          2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
                          3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: OLP4vEwBSBUPTtrL37qGMnDQv6DLajfYSCtwKBvDQqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d1:da:8f:6e:92:35:1f:9f:be:4f:9c:bb:cc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
        Validity
            Not Before: Feb  9 17:00:20 2026 GMT
            Not After : Feb 10 17:00:20 2026 GMT
        Subject: CN=6e9a27e14d3d0b8df5367aba4dc96d8429765589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:48:a6:6e:84:35:c3:db:e1:aa:1f:40:ef:
                    a9:fd:44:dd:7f:f9:56:e3:6d:26:f4:db:d4:10:93:
                    a9:f1:5b:08:04:89:c7:9f:f6:2f:0b:60:eb:c9:b6:
                    16:81:1c:9e:7c:3e:ac:ce:e4:8b:1e:98:2d:97:e0:
                    97:25:4b:8f:b8:32:b0:d9:39:a4:d3:fa:39:dd:c6:
                    8e:f0:68:b1:63:1f:03:82:c6:2d:d0:18:7e:6e:cd:
                    a6:67:df:b0:c1:e5:77:b4:d8:9e:db:ac:2a:0c:2e:
                    aa:f3:a7:03:de:27:bd:4a:d6:70:30:c9:e9:c1:a1:
                    cb:02:8c:b6:b3:08:08:32:cb:e4:cf:33:5b:eb:66:
                    b3:8f:e2:56:a8:79:30:d0:2c:59:26:a1:c9:06:24:
                    7b:b3:c6:dd:68:7e:8a:87:d6:89:bb:2d:b8:30:39:
                    d3:99:9a:e3:0b:20:64:d0:2b:a8:dd:0f:48:83:ec:
                    15:cc:95:1c:57:ad:18:5a:4e:a7:f7:fb:bc:3f:db:
                    1d:d9:3e:9e:53:00:03:6b:6c:f4:5b:0d:d8:85:6b:
                    34:ea:00:23:51:32:1b:9e:4e:3e:86:c5:64:ea:c2:
                    2e:d7:22:32:18:20:9a:89:28:c7:f3:08:42:59:5c:
                    9f:a2:3c:d2:d8:bf:a1:62:22:39:3c:93:cc:45:0b:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:27:E1:4D:3D:0B:8D:F5:36:7A:BA:4D:C9:6D:84:29:76:55:89
            X509v3 Authority Key Identifier:
                keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:f4:d8:7a:62:9f:5e:80:3c:d5:df:55:5d:18:01:47:61:
         0d:1e:c2:a8:ba:3e:46:6a:36:67:d5:5f:7d:2a:b0:45:50:02:
         15:51:a3:e3:5e:b1:dd:93:40:cf:a7:2e:44:78:2c:70:10:35:
         af:12:b8:a0:2b:a8:0f:c5:6f:5c:21:1f:19:8d:8e:2c:d0:a6:
         21:ed:2b:d5:9f:ec:4d:71:b1:d7:00:fe:6e:66:56:ad:eb:e9:
         df:ce:e5:2e:10:fb:9d:0a:99:be:48:44:bd:12:51:0b:d1:18:
         fd:95:9c:33:bb:ec:28:ab:56:51:4f:9d:72:5c:93:bd:4e:b8:
         d9:5c:5f:70:c2:2f:94:69:0c:6d:5b:c3:6e:50:b1:84:9b:5b:
         2f:86:a0:53:21:77:c1:2e:21:5d:c0:bd:53:8e:30:d6:d6:0d:
         43:7c:f8:00:a3:7c:62:b9:38:4f:14:0f:bd:b0:a3:c6:62:f8:
         56:2c:5b:f0:58:f0:1a:89:e8:da:d7:f7:9d:a9:d1:f0:e2:c7:
         b8:b4:f5:8b:14:ae:4b:6c:e9:e1:8f:7e:f9:af:3c:84:70:4b:
         d0:5f:d1:ee:71:69:27:5c:6c:b9:2e:5c:c6:d9:38:dc:f3:96:
         1a:e5:aa:89:a5:32:e1:ea:5f:b2:1b:56:0d:fb:89:6d:ca:ec:
         99:72:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:06 2026 by rpki-client