This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File:                     1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier:          lKyuyM385lUDFGTeXmVgJKL4vqNv7qIxXsOOA3TsA8s=
Subject key identifier:   45:54:CC:67:A8:33:8D:29:28:59:84:E6:E9:53:8D:52:75:70:4B:02
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer:       /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial:       019C435900BD83518E5BB8A2F29771A06272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number:          0117
Signing time:             Mon 09 Feb 2026 17:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:32 +0000
Files and hashes:         1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: xpq8zYNI1nvJz3AC+6pdUUbBoO3JlYjlZIZn/uVceBY=)
                          2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:00:bd:83:51:8e:5b:b8:a2:f2:97:71:a0:62:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
        Validity
            Not Before: Feb  9 17:00:32 2026 GMT
            Not After : Feb 10 17:00:32 2026 GMT
        Subject: CN=4554cc67a8338d29285984e6e9538d5275704b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:39:0a:44:3e:db:59:d1:f1:62:17:88:a7:
                    c7:1c:b6:1a:94:c0:13:cc:fb:df:ea:38:f1:79:f2:
                    98:f2:56:0a:e3:1a:ad:28:70:70:d4:63:a6:ca:68:
                    5f:7b:e2:99:68:c2:4a:46:75:1b:bb:60:d7:1e:4c:
                    49:4b:69:f5:54:4c:0a:a8:98:7b:14:cc:c8:26:8c:
                    13:26:96:82:39:28:98:2a:34:d2:73:a8:a9:ea:c7:
                    f9:81:c5:7f:72:3a:53:20:e7:63:ad:95:fc:45:d2:
                    f2:a4:97:4f:a6:a8:7b:69:f7:27:5e:32:e3:3f:8c:
                    61:5a:fc:3e:4c:36:ec:b9:e8:e4:2a:69:28:c5:84:
                    72:6a:c8:43:56:17:a9:0f:f1:09:cd:b7:ab:e4:0c:
                    b7:d9:d9:0b:85:5c:11:f0:c7:d2:38:5f:25:2b:76:
                    0e:33:16:a5:3c:da:6c:6e:22:f5:69:e0:a0:b8:0d:
                    07:07:91:20:48:ef:28:5d:69:f6:df:57:91:fc:ed:
                    2f:e9:5c:6d:f8:9c:9c:87:d9:24:68:2d:a8:6f:0d:
                    9f:52:77:30:04:f8:4a:e3:b3:01:1e:a9:15:d0:e2:
                    64:a0:bf:fe:b5:b1:1e:6b:2a:78:0f:ca:ab:c4:2c:
                    42:a1:ad:d0:27:2a:51:7c:ab:d1:62:a7:11:a6:0d:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:CC:67:A8:33:8D:29:28:59:84:E6:E9:53:8D:52:75:70:4B:02
            X509v3 Authority Key Identifier:
                keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:91:be:a5:63:4d:a4:b7:e5:4d:95:43:4f:84:fe:1b:31:
         89:c2:73:bf:f8:16:01:84:81:d9:07:02:9f:14:30:49:12:7c:
         af:c4:95:3a:05:78:91:33:8c:23:bc:20:64:eb:66:1e:98:c2:
         40:87:0d:7e:af:a3:b2:9d:ac:1f:7a:92:2b:5f:82:76:14:34:
         9a:e2:3f:6d:63:e8:8b:1d:7f:c3:ab:c1:af:5f:92:9c:f2:ab:
         70:38:fc:99:b7:5f:6d:56:0c:98:ae:06:0b:4a:2d:b5:51:88:
         53:a4:a1:68:b2:06:9a:a8:3a:5c:de:40:fc:6a:5f:08:da:07:
         09:53:ae:95:db:e3:3e:3b:93:4f:44:a3:70:bb:48:c6:9a:73:
         b4:a4:dd:67:3c:c4:df:05:43:fc:20:35:36:6f:69:1d:55:26:
         26:4a:3b:f2:6f:54:0d:17:e2:0b:4e:21:16:58:2d:74:42:1c:
         41:92:9b:7c:9b:ca:95:46:6d:68:3e:58:db:cb:18:2d:d7:d1:
         8d:f4:a9:f7:eb:8f:6f:e6:6d:80:78:73:4d:11:a9:29:90:c1:
         f2:f3:80:f0:af:3c:5d:e6:03:ba:21:d5:cd:94:b4:8e:71:db:
         de:cf:e1:5a:fe:d5:b5:cc:2b:c9:5e:ac:45:62:a3:02:6c:a1:
         52:c5:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:16 2026 by rpki-client