This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
File:                     jucXwqqWGqxFA_G0hGTfAjPOP6k.mft (raw, json)
Hash identifier:          Avg/9zJlO7ueIa0/5n2SExu9U+lBy17buJ7bjCm4JLk=
Subject key identifier:   68:3D:A6:47:BF:BC:2C:4E:17:AB:37:00:84:B7:48:A0:B0:36:DF:7F
Authority key identifier: 8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9
Certificate issuer:       /CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
Certificate serial:       019C4322A38402A055E009595224854D1823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 16:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:09 +0000
Files and hashes:         1: FrLpwJYm_z0oYv8U7JLQ8P3KcbM.roa (hash: 8L9pbzjRhlXXYzdKFRwuzPzPptTX51ON4RUCMnWRonY=)
                          2: jucXwqqWGqxFA_G0hGTfAjPOP6k.crl (hash: +tc+Ygk81+ifHbgW2unCLXgv5xkdtEfmim4G+gBnORo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a3:84:02:a0:55:e0:09:59:52:24:85:4d:18:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee717c2aa961aac4503f1b48464df0233ce3fa9
        Validity
            Not Before: Feb  9 16:01:09 2026 GMT
            Not After : Feb 10 16:01:09 2026 GMT
        Subject: CN=683da647bfbc2c4e17ab370084b748a0b036df7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:2d:32:62:79:bc:78:aa:6d:30:23:ee:c3:
                    5f:87:95:c0:08:89:e1:c2:50:f7:44:7d:83:91:67:
                    2b:22:99:2b:98:50:54:13:6f:37:77:24:b9:5a:39:
                    e7:8a:23:f8:e6:49:a0:0b:b2:63:47:0c:d2:ca:43:
                    9a:10:37:2f:af:0d:b7:89:d7:6b:e1:77:3c:cb:6f:
                    2b:63:98:02:e8:4c:d3:8a:4e:d9:ba:df:b6:4d:08:
                    27:0d:da:bb:13:83:e5:70:89:ba:bf:ca:77:6f:45:
                    4f:58:9f:ff:95:55:fe:07:92:43:2d:38:9f:a0:19:
                    16:c3:fe:d6:3f:f7:17:89:bd:5e:03:9d:8f:f3:29:
                    b5:be:1d:38:fd:20:0d:7f:75:4e:1e:95:95:da:94:
                    5c:f2:50:44:bb:8e:6d:ff:e5:03:73:07:a4:83:f2:
                    cb:68:47:74:dc:0f:0e:58:09:df:71:2e:6d:96:8f:
                    c1:c0:8d:53:23:e0:5d:17:bc:b2:76:1a:df:d3:a3:
                    27:f9:2b:8c:6b:78:6b:5a:a9:42:c3:28:4e:12:5a:
                    22:5f:bf:3c:50:b3:70:c9:55:98:81:03:75:ed:52:
                    03:76:fa:f5:9d:84:60:b8:b8:2f:0b:0d:94:f4:77:
                    ae:20:8c:6f:58:51:35:53:32:48:f6:cb:7c:e4:ff:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:A6:47:BF:BC:2C:4E:17:AB:37:00:84:B7:48:A0:B0:36:DF:7F
            X509v3 Authority Key Identifier:
                keyid:8E:E7:17:C2:AA:96:1A:AC:45:03:F1:B4:84:64:DF:02:33:CE:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jucXwqqWGqxFA_G0hGTfAjPOP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/130d77-c4db-485a-bcbf-329cb516d937/1/jucXwqqWGqxFA_G0hGTfAjPOP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a9:3c:df:3d:4b:c3:6b:32:ee:30:5a:1d:96:85:aa:f2:86:
         f9:25:c2:ee:c4:33:16:cd:17:89:1e:f7:08:dd:c6:e7:05:5e:
         16:54:d3:9d:96:71:f7:30:4b:0d:55:fe:7b:27:33:c1:f0:37:
         c0:c8:76:eb:be:30:6c:30:85:bb:e3:63:75:3a:14:03:58:c0:
         17:d7:5f:b3:11:87:67:0d:1e:6b:a3:96:45:06:90:82:c7:7b:
         be:a9:cc:a8:87:b2:90:09:8a:e7:82:7b:80:1e:01:2a:b0:27:
         13:01:4c:42:6c:41:c2:16:14:77:ab:22:8c:f0:60:18:a8:bd:
         7a:1a:db:ea:8b:df:3a:c1:ee:b2:6c:d9:21:4c:90:5d:57:38:
         1f:0c:44:0a:ce:70:9e:62:08:50:97:31:dd:b3:0b:ac:7e:b5:
         dd:25:45:aa:8d:5a:e0:7a:8c:af:3a:5d:a4:5a:94:aa:62:ee:
         d7:ad:9b:2d:68:6a:ad:40:25:81:cf:9c:21:27:cd:db:fb:8a:
         68:50:1f:8b:97:9e:82:58:05:c1:77:3a:a3:d0:3f:02:32:04:
         f2:7a:a7:d1:d5:4e:7f:7d:dc:95:1e:cf:75:e0:9f:c5:98:85:
         1a:fb:46:d8:a7:20:d8:40:87:ed:c5:ef:40:26:70:4b:03:a3:
         19:97:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:38 2026 by rpki-client