This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          fTD1krsck2E/Cv1bQha+nZsbct+zm7KevbBSTkDY/GY=
Subject key identifier:   91:FC:DB:48:67:12:40:FE:CB:28:69:71:D0:5D:6C:87:7D:70:FC:3F
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019C27747A17AC249F7EA1685AAF9D44B87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          0262
Signing time:             Wed 04 Feb 2026 07:01:10 +0000
Manifest this update:     Wed 04 Feb 2026 07:01:10 +0000
Manifest next update:     Thu 05 Feb 2026 07:01:10 +0000
Files and hashes:         1: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (hash: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0=)
                          2: MZF_p3jMKGfUhISu7itbGm8fVPc.roa (hash: 1+Bei67+jd9KSPOgvA1EOkdwYvs4YCuptX/4MdFdYpM=)
                          3: Yf20QMXkj8GFJGSLeIPw0rNOpPU.roa (hash: aWACKntsxHH3Va6cTR9cG1/KJpBjS153dDHspJ2qJ94=)
                          4: eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (hash: Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=)
                          5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: sboYNhye/1aFzZFKsX81IOMU5PcU1mj5N20l8fUzSqg=)
                          6: njp42lmk79PcnKdSKL7dBNAF-pA.roa (hash: fNgEvWqAsrEHm2QEX+Q7tOEmushfbaHX+HahMzZ89W4=)
                          7: ty6QDaVODiYQLRspH3UycajMk0A.roa (hash: FtWFx0VsvTm7b4c9sjAieCXjIjfYkBipIpfvr2217ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:27:74:7a:17:ac:24:9f:7e:a1:68:5a:af:9d:44:b8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Feb  4 07:01:10 2026 GMT
            Not After : Feb  5 07:01:10 2026 GMT
        Subject: CN=91fcdb48671240fecb286971d05d6c877d70fc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:07:5a:43:ba:d7:09:ea:00:35:c5:75:c9:f4:
                    9d:dc:17:c5:39:9e:da:3e:f0:f2:25:7c:34:2f:40:
                    03:bf:fd:b4:4c:70:45:9c:49:b1:84:b4:87:b0:48:
                    10:5b:00:f9:96:13:a6:c9:82:5d:66:33:d9:7a:69:
                    2d:e7:cb:78:4d:00:3f:f7:7d:55:03:b6:78:0b:ed:
                    ea:57:cc:58:d6:98:d3:af:12:92:6a:6d:f2:9f:64:
                    38:f4:57:9f:0b:77:89:31:5f:04:b8:be:37:b2:37:
                    a3:55:ed:2d:ac:9f:4d:3c:13:48:45:e0:dd:8d:d7:
                    af:bd:9c:f4:2e:4d:5b:6d:c6:41:1d:ee:bd:74:cc:
                    c1:7f:f5:6a:22:61:f2:e8:c1:af:4a:fa:c9:61:5b:
                    06:0f:4c:c2:df:23:88:fe:89:aa:0a:ad:1c:e1:a3:
                    73:0b:56:d3:3a:81:2c:4a:c7:07:e5:e0:ac:4f:1d:
                    c2:00:5e:c8:6f:87:f7:d4:b4:a1:90:62:d3:4a:2e:
                    6d:95:0f:a5:1c:05:41:9a:ca:4c:66:2d:36:4b:98:
                    b0:b7:38:89:58:ec:52:24:8b:2e:b1:e2:b5:59:e7:
                    c5:0a:55:59:18:f8:fd:e2:eb:61:b9:dd:93:de:af:
                    17:8e:37:7e:b8:75:41:28:7c:f0:9e:7a:2a:39:76:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FC:DB:48:67:12:40:FE:CB:28:69:71:D0:5D:6C:87:7D:70:FC:3F
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:09:37:db:91:b6:6e:c1:ac:4e:98:78:f5:69:40:81:c6:1c:
         94:1f:23:f8:71:fd:1b:62:77:49:c3:0d:20:67:38:ac:95:2b:
         50:81:f3:3e:c0:d7:2c:71:61:ae:d4:18:1e:17:63:56:42:fa:
         b0:dd:8d:02:60:00:b4:ed:0c:21:da:71:87:fe:09:60:7c:31:
         9a:34:f6:50:41:0f:17:47:c9:12:fe:80:4b:df:2d:a2:12:b5:
         fc:a8:fa:40:80:62:49:2c:76:ef:31:f0:65:7c:90:cb:50:59:
         b2:40:d5:10:da:09:48:f5:6d:30:54:ad:14:e7:4b:99:d2:c9:
         33:29:a0:34:d1:bc:79:a4:cd:b9:6d:f0:d2:b6:05:7e:72:d0:
         04:5e:09:40:ed:0a:43:24:35:17:ba:ff:f9:e4:b3:b9:1b:0e:
         de:ed:c5:3c:61:24:60:e2:11:3f:4a:6a:e0:45:5d:71:dd:a0:
         04:1f:95:5d:a1:dc:1d:b3:b1:7f:0e:19:d1:b4:09:22:b7:c6:
         b9:34:52:8a:41:b6:f6:da:b5:49:e7:29:b0:d8:cf:9c:79:2c:
         d2:a0:7b:9d:58:2d:9c:f6:ea:f1:aa:92:c4:86:83:81:7b:c5:
         f7:04:50:6c:16:be:c4:75:22:9e:76:2d:e2:11:2e:e7:eb:b8:
         62:4d:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 14:47:38 2026 by rpki-client