This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File:                     J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier:          KW1855fzOGusnxrAqEZ32tb4A5OpLhc9BydHnfZCKmY=
Subject key identifier:   41:9B:67:20:B0:E2:9E:09:11:20:45:11:41:04:34:FC:9B:0B:99:2E
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer:       /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial:       019C42EB29808D2E0E11729FB08ACE3BA87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number:          10EA
Signing time:             Mon 09 Feb 2026 15:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:33 +0000
Files and hashes:         1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
                          2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: UgZLbAdUJ23bzc40zyVnF89WCgFvipGPReaHbxushcI=)
                          3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:29:80:8d:2e:0e:11:72:9f:b0:8a:ce:3b:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
        Validity
            Not Before: Feb  9 15:00:33 2026 GMT
            Not After : Feb 10 15:00:33 2026 GMT
        Subject: CN=419b6720b0e29e0911204511410434fc9b0b992e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:3d:55:47:8b:7a:b3:d4:93:6c:50:93:46:
                    93:6c:4e:2d:64:48:70:de:8f:51:74:f6:47:91:77:
                    28:67:96:44:a2:f6:16:2c:88:27:ab:b9:47:98:eb:
                    90:76:a1:b4:cb:f7:e5:a0:72:83:49:c6:2d:ad:03:
                    93:b9:d0:a9:1f:7b:80:70:a8:dc:57:aa:08:7c:d6:
                    a9:85:12:8b:54:e6:1d:3a:41:a6:6b:b0:44:f4:8e:
                    d7:f6:47:ce:7a:8d:40:d6:35:31:82:b9:3f:e1:4f:
                    b1:91:90:5a:83:8f:9f:93:09:89:47:08:c6:bd:16:
                    d1:3d:ac:6d:55:bf:47:7e:1a:a0:e6:a8:c9:6c:2c:
                    81:c1:86:c0:0e:ec:38:76:54:58:02:54:8c:74:31:
                    0b:50:d9:3f:30:d3:d7:2b:07:0c:7b:1c:0f:15:fe:
                    23:a2:26:4e:46:65:2d:24:9d:a3:d7:f8:f7:c5:2c:
                    c8:b3:7c:f7:04:bc:94:f4:f7:2e:af:a5:32:af:c5:
                    da:33:6b:f2:b6:9e:46:40:5a:4d:1d:79:a4:56:ff:
                    ef:23:72:65:09:dd:20:9f:a1:5a:cd:9a:86:3f:d5:
                    53:29:75:35:7c:82:60:21:3f:d5:b5:25:78:5c:83:
                    91:27:7c:a2:ef:46:d6:29:f9:19:25:ff:45:74:30:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:67:20:B0:E2:9E:09:11:20:45:11:41:04:34:FC:9B:0B:99:2E
            X509v3 Authority Key Identifier:
                keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:90:a6:bd:43:5b:f1:cf:ed:79:02:76:bf:d2:98:f2:24:26:
         57:79:c1:e3:18:95:89:ad:41:27:d2:a0:ee:f7:7c:79:05:1d:
         5d:3e:14:2a:50:de:e3:c0:14:2c:b0:d7:b7:2e:49:96:78:ea:
         24:09:15:75:69:34:51:f6:51:9f:8f:4f:26:9f:f9:7f:53:46:
         e0:c3:5b:83:06:00:ff:e3:d3:fd:f0:c1:bb:cf:03:69:40:4a:
         1b:09:a0:ba:b5:7d:46:e7:16:30:c6:cd:d9:74:9e:bc:f7:f8:
         6a:c2:09:dd:66:94:84:ab:a5:8b:60:af:f5:01:99:c8:56:47:
         cf:24:d7:71:eb:7f:50:6b:52:be:d8:14:39:c3:ad:f8:25:51:
         3e:cc:96:63:1e:c7:14:a1:f8:48:53:e2:2f:61:a3:22:25:f6:
         d8:2f:40:b4:e6:4e:19:66:29:58:e2:41:0c:59:ef:a1:fe:1c:
         a2:24:ea:58:97:0d:93:0a:bf:ce:7e:ed:7e:d5:99:21:06:a7:
         c6:dc:8a:78:8d:64:78:de:12:9b:2e:cf:77:64:60:e9:27:2d:
         2f:d7:da:76:d1:d3:68:39:28:ea:d6:43:db:04:ef:48:9a:0d:
         67:97:f4:02:82:b4:d8:81:42:da:7e:b6:5c:d5:dc:16:97:f3:
         ad:ca:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:00 2026 by rpki-client