This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File:                     JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier:          xh9dxxt5yUHULoJ+Wwnq2pQKF5EAZJPLodTSrwzfIZA=
Subject key identifier:   37:9A:A6:07:8B:99:26:BC:D5:27:62:12:FD:F0:7E:F0:14:7E:0E:8A
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer:       /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial:       019C43904F0BA851EDEDE901A22C2A77E17D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:56 +0000
Files and hashes:         1: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: xjim8UG4JxvU7tt362ddw5ILKjST26JJFosRv9dIgy0=)
                          2: uggilkPXIQowDX7IENHctXgTYrc.roa (hash: bdstU+Ed9ZtoDiLImu8JYA/k3J0Pn1VQzFJ5dM1IotU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:4f:0b:a8:51:ed:ed:e9:01:a2:2c:2a:77:e1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
        Validity
            Not Before: Feb  9 18:00:56 2026 GMT
            Not After : Feb 10 18:00:56 2026 GMT
        Subject: CN=379aa6078b9926bcd5276212fdf07ef0147e0e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:c0:6f:44:ed:ec:c7:18:ba:68:a5:13:06:
                    b8:78:8c:06:fb:4f:3b:e4:b9:bd:4b:7b:ab:41:e2:
                    2d:9c:e1:63:bc:38:d3:14:82:41:10:e9:5d:bf:29:
                    aa:79:fd:51:ef:ef:7e:ab:30:b1:3f:57:86:c6:88:
                    9a:1d:1b:14:d8:9f:20:71:d6:aa:5c:aa:c0:14:5a:
                    c6:a4:76:00:55:07:95:18:55:05:04:82:37:ed:91:
                    b1:02:7d:0f:35:ec:1b:2a:63:f8:12:79:95:17:bc:
                    69:c6:d1:0e:74:fe:89:53:b9:7e:de:c7:01:a9:60:
                    2e:0d:4d:46:31:4e:d3:71:6f:dc:fe:93:90:60:c5:
                    1a:5d:a3:95:a9:1c:05:3d:8e:50:49:48:76:7d:fa:
                    9e:29:b6:c1:18:d1:36:5a:3c:12:79:17:04:22:83:
                    8c:8a:42:82:0d:85:bf:a4:e5:18:d2:c5:8e:f7:76:
                    69:7d:27:1a:e4:a5:26:b3:7a:cc:7b:61:8c:88:32:
                    77:c9:5c:6c:44:21:84:60:0b:bf:c3:95:28:bc:22:
                    d7:63:68:44:09:f0:eb:aa:2a:0b:5f:1a:74:4a:f0:
                    9f:3d:ad:96:34:10:b3:27:b1:f4:56:94:fd:c7:e7:
                    cf:58:f7:9e:ee:0c:2c:36:1f:94:a8:e1:d2:08:a9:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:A6:07:8B:99:26:BC:D5:27:62:12:FD:F0:7E:F0:14:7E:0E:8A
            X509v3 Authority Key Identifier:
                keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:15:e1:0c:2e:ba:be:17:8d:b0:33:f2:f1:c3:2f:e0:32:a3:
         96:0d:15:bc:84:57:9f:29:ce:99:23:61:fb:f8:5c:12:54:9b:
         ad:2d:6b:bb:1b:c5:9a:bf:dd:ba:ed:c7:27:c7:49:8f:eb:8c:
         fd:36:0d:ff:81:51:23:99:23:9f:24:be:7f:07:1a:27:f6:d8:
         5a:5c:ad:42:cd:3d:a0:a0:3d:d7:e4:24:ea:19:ee:68:5e:d0:
         bb:77:c6:3f:1b:d3:08:7a:91:fe:03:57:5e:e7:18:bd:3f:d1:
         5c:d2:99:82:47:1b:38:0b:fa:9c:a8:72:fa:e1:e7:d4:60:ad:
         e0:20:12:ce:d9:6d:83:de:cc:4f:87:92:f2:1e:47:06:25:81:
         65:8c:ec:aa:bd:6b:fe:4d:81:37:ec:53:c6:b9:10:b0:da:33:
         9f:35:ae:5c:39:34:0e:9f:19:db:8f:f7:33:3c:f2:01:43:4f:
         37:85:4c:e3:a6:40:91:92:ad:5d:d2:5d:23:f7:ee:e5:fc:38:
         32:54:28:7e:f3:28:4e:e8:95:8f:1c:34:26:4e:ee:21:ab:dc:
         6f:3c:70:ca:e6:3b:44:82:67:f7:39:4b:23:44:da:13:81:83:
         dd:2e:f2:69:1e:7a:23:e1:5c:98:39:be:de:ac:57:bf:f1:0d:
         71:05:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:05 2026 by rpki-client