This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File:                     JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier:          3IF+DU3ptWmU4ESJPnYLeZHv5K2h7gKFZeEEChU/PWo=
Subject key identifier:   D7:63:D9:70:AA:B2:A0:9B:A2:98:11:4B:57:8E:C6:FE:44:B1:4E:50
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer:       /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial:       019C427D7B7323CD2864FA91F87DB296A157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 13:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:45 +0000
Files and hashes:         1: 3xiDzGgK4e9ceC4u7RUWp0fz_SM.roa (hash: DZHEO3sSIJCigbbB46icKw7YPH6Y87vFoZ5HjcDSncs=)
                          2: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (hash: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg=)
                          3: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: uTCwJB23tzHACaWL7MlpOKXzagUNoDSlP2D2CZJhqWM=)
                          4: eEZUpEtjObJ9yeYuMAQAw_0jXUU.roa (hash: nuE7s/MKLf67lp3yMJo4q3u/cNq9UefHf0q9u+Y32mI=)
                          5: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (hash: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:7b:73:23:cd:28:64:fa:91:f8:7d:b2:96:a1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
        Validity
            Not Before: Feb  9 13:00:45 2026 GMT
            Not After : Feb 10 13:00:45 2026 GMT
        Subject: CN=d763d970aab2a09ba298114b578ec6fe44b14e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:c9:56:61:db:c9:f8:bd:9a:62:0c:a8:c3:
                    49:71:63:fd:77:50:6b:b9:53:9c:89:da:e0:1f:33:
                    af:ec:dc:f3:1a:2c:fd:5a:ef:c2:0b:20:b1:76:e4:
                    be:b7:7b:48:51:ef:40:e5:05:22:c0:92:21:db:23:
                    a9:c1:8c:5b:71:d4:d5:19:fd:c2:b7:c0:b0:c0:5b:
                    d0:09:cf:82:c5:a2:2e:22:17:47:7d:dd:86:57:3a:
                    77:97:f2:d2:81:8f:e3:0d:a2:90:46:d2:b6:4d:b5:
                    a9:4b:c8:88:79:ee:af:24:1f:46:d0:3b:cd:8e:08:
                    35:dc:7f:08:de:70:39:d4:ae:4b:55:31:12:a7:0d:
                    b9:aa:60:04:69:d1:a5:49:fe:04:a1:34:66:60:41:
                    d3:36:00:0f:7f:52:a1:43:e6:1f:ef:e3:58:f2:5f:
                    2d:45:88:12:ee:d6:5d:48:86:b9:64:27:da:e2:f2:
                    5c:76:6d:c4:0a:1f:40:9d:4d:a4:71:ec:04:74:13:
                    c7:c8:6d:ba:2b:9d:98:bc:b0:a5:99:fc:55:34:f8:
                    a8:74:c9:63:c2:e5:81:7f:93:ba:25:4b:76:1e:f6:
                    e3:17:8f:eb:ee:9c:33:68:65:db:80:38:bd:f7:d7:
                    32:8e:6a:44:a2:cb:e4:b9:52:3b:a8:00:a5:77:6e:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:D9:70:AA:B2:A0:9B:A2:98:11:4B:57:8E:C6:FE:44:B1:4E:50
            X509v3 Authority Key Identifier:
                keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:62:81:f6:71:9e:12:4c:05:69:3c:9c:50:36:3f:77:0b:
         1c:b3:f1:54:57:60:59:b8:a6:d4:07:9e:d5:98:e4:c4:b3:d3:
         50:b7:32:34:09:c5:55:86:84:38:5c:89:3a:58:36:59:8b:42:
         0d:12:34:2f:59:e4:00:5f:45:46:8d:1e:45:a1:5c:6a:89:1b:
         18:92:11:9d:42:23:fe:eb:0e:af:d9:aa:08:35:ef:f7:66:af:
         36:28:19:eb:4c:6d:58:69:ab:80:c6:74:d7:b5:04:59:85:dd:
         18:dd:c0:06:cc:9d:80:90:b8:91:d0:84:5a:b2:89:39:95:52:
         6b:01:ee:37:5d:30:c4:15:5d:dd:a1:46:df:3d:05:ad:89:dd:
         9e:37:64:d1:a8:2e:8f:2b:b9:41:8b:74:a4:48:9f:14:16:e5:
         cc:1c:ad:c9:a7:fd:ed:18:23:6b:d8:01:56:27:50:6c:38:97:
         4d:91:32:66:4c:86:d5:0d:48:85:d3:2c:fa:da:08:ab:3d:85:
         d3:aa:15:c7:52:83:7f:d8:f0:79:a0:0f:a6:f0:e8:75:7e:28:
         f4:03:40:93:92:15:e4:0a:52:2a:81:8d:80:49:28:8c:07:b0:
         5d:ef:6d:06:94:ca:a7:37:f8:f1:fc:f7:ad:94:fa:f8:0a:c6:
         b3:8b:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:38 2026 by rpki-client