This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          tNaktg6iJCzjFnPwqZ1n+H2zp7q4TOPLOEtib5XM4YM=
Subject key identifier:   08:2E:0D:0F:4D:B1:C8:44:9D:68:47:B0:C9:63:C5:02:8C:E4:B2:5D
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       019C420F3F645B2AEA090A4182E08BECFBE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          11A5
Signing time:             Mon 09 Feb 2026 11:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:21 +0000
Files and hashes:         1: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (hash: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4=)
                          2: Fqol7Ql1lTnQ1pbIdCZcxbCF39k.roa (hash: +R5PirogobghNFmFq7p4/kohSnTc74mKrNVHXJGdCQg=)
                          3: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: LjbjIrNSXf2H5zTX93BBi7dK5I5FlnsVXV7ypVynsDA=)
                          4: tbK1AbVereS_NngI45L11SaPIkg.roa (hash: pGphgE8cOkuzyKQJOlm5N3l9aQFRIzUTSTIpMJ4LzH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:3f:64:5b:2a:ea:09:0a:41:82:e0:8b:ec:fb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Feb  9 11:00:21 2026 GMT
            Not After : Feb 10 11:00:21 2026 GMT
        Subject: CN=082e0d0f4db1c8449d6847b0c963c5028ce4b25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:86:e0:b4:1d:a8:8a:84:a4:f5:e3:24:0a:
                    cc:19:bf:40:dd:74:e2:8e:d7:d9:9a:5b:7f:4d:eb:
                    24:b7:fd:b1:d4:d8:c7:8c:98:e8:c6:37:16:67:2f:
                    42:20:fe:eb:8b:fc:8b:93:34:db:27:95:ae:bb:62:
                    3d:9c:bf:19:db:a0:1e:0d:f5:b3:35:bf:57:7c:7e:
                    d9:29:a2:ea:bf:6e:1c:29:c7:07:a2:f9:fa:de:fe:
                    5d:ec:a1:32:6f:f5:1f:70:91:81:cf:ba:02:60:9e:
                    f8:f4:02:24:43:cc:45:33:0d:1a:3d:b0:ac:a4:3d:
                    5a:35:26:01:e7:3c:f2:71:5e:49:d3:a0:a3:54:f3:
                    e8:58:4a:f1:10:1c:fc:94:3b:79:b7:25:67:af:e8:
                    9c:f3:c7:bd:83:3e:0c:23:56:32:f5:dd:59:41:19:
                    fa:80:e4:99:6d:52:a2:ca:e3:9e:65:3b:62:5f:dd:
                    24:d7:3a:8b:78:dc:2f:38:2e:f9:8a:96:3a:4a:67:
                    4c:1c:b2:03:fd:8c:96:0b:ca:bb:ef:4c:55:5c:5a:
                    49:da:2d:ed:c3:4a:80:86:28:5a:a9:61:d8:a5:59:
                    65:0c:e7:e0:e1:2a:f1:d1:33:6a:08:31:66:13:1f:
                    71:8b:78:48:1f:3a:0e:24:96:29:cf:b9:1b:a2:cd:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2E:0D:0F:4D:B1:C8:44:9D:68:47:B0:C9:63:C5:02:8C:E4:B2:5D
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:65:b1:9a:85:94:94:dc:55:2b:e3:08:f7:6a:7b:9e:87:d5:
         37:55:80:2e:76:94:28:6f:19:7b:e6:25:c8:97:d5:62:a9:2f:
         76:6d:86:d2:ad:4a:59:e9:ba:7c:92:a6:0c:d6:a7:20:d9:0f:
         76:f7:23:8e:c8:fc:5b:90:51:e4:d6:79:08:b5:75:4a:0d:ae:
         30:0a:87:2b:2e:f7:ed:d3:1c:48:ce:d9:3d:84:1a:e1:fe:a0:
         a9:e0:4b:c3:22:43:7e:d0:fa:64:99:12:52:cf:6a:2b:23:84:
         43:73:c7:5f:06:c9:c2:15:a4:09:e8:07:ec:13:4a:97:fe:a1:
         a1:d0:61:e4:93:98:e2:b8:09:3c:3e:4f:79:16:4d:a5:60:a6:
         7e:7c:d6:f3:35:a5:dd:cd:0c:d9:66:0d:84:f9:c7:e3:ac:9d:
         56:d0:5b:ba:21:21:0a:5e:93:3d:55:16:4f:92:c0:dd:0a:03:
         e4:6e:0d:a0:6a:d2:1c:08:45:87:1b:f9:9e:a6:cd:5a:a0:30:
         46:f4:c7:94:a7:e2:65:d0:29:9d:5f:cd:aa:29:98:14:e0:ea:
         1d:2b:d8:a1:fc:88:e3:11:f4:02:b9:09:93:28:4e:93:04:e2:
         39:45:1d:a2:b6:9c:a8:ca:55:8a:b4:e2:5a:a3:25:b4:ea:6d:
         58:b4:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:55 2026 by rpki-client