This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File:                     JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier:          Uqqhw7xNsIt2rmJWms27pXqyYHFl/Yu84JuH9dB02bY=
Subject key identifier:   38:03:A6:FF:BA:09:E9:DD:56:8B:20:CC:A7:C9:E0:93:5F:65:4B:2E
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       019C43C73A069D50B4EE028D3544D9560AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number:          16E4
Signing time:             Mon 09 Feb 2026 19:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:55 +0000
Files and hashes:         1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
                          2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
                          3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
                          4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: nr9WZWRowa2ZdMlSP2JFJ9lwla5kKXWFfeSLsrukoCc=)
                          5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
                          6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
                          7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
                          8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
                          9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:3a:06:9d:50:b4:ee:02:8d:35:44:d9:56:0a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Feb  9 19:00:55 2026 GMT
            Not After : Feb 10 19:00:55 2026 GMT
        Subject: CN=3803a6ffba09e9dd568b20cca7c9e0935f654b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:04:f8:bb:ec:c3:d7:8b:aa:10:53:db:aa:
                    65:f7:7a:31:e9:58:59:95:6d:31:2a:fb:d9:b7:3f:
                    18:dd:5a:55:6b:f5:8b:08:b1:45:80:8a:fd:71:b5:
                    c3:f1:05:2b:32:41:c4:12:77:8a:34:40:96:86:e9:
                    4e:64:33:0c:55:4e:7f:c4:23:ca:0a:92:9c:bf:5b:
                    f2:9b:a6:13:27:e3:49:21:35:23:cc:68:fd:d6:91:
                    4c:61:20:4f:f9:47:71:04:22:6b:a8:6e:c1:43:53:
                    c2:e8:18:46:8a:2f:55:73:ec:8b:02:6e:1e:05:7c:
                    46:46:3d:85:5d:33:6c:8c:28:58:65:8b:32:5a:f7:
                    61:6c:f9:6e:e1:6e:3e:c1:5f:c6:0b:6d:1c:69:3c:
                    35:ec:0b:34:e6:f0:ef:f7:48:98:78:79:12:ed:19:
                    c0:26:28:05:5a:6f:f2:ff:cc:16:5e:c5:a5:b9:7d:
                    5f:96:a2:f3:3e:c0:3d:0b:35:8c:22:55:78:e9:54:
                    99:4a:d6:64:c0:7f:bb:08:11:bf:d7:0a:ef:0f:b6:
                    d1:25:bb:3d:5e:74:d9:95:c3:6b:bc:e8:d8:6f:46:
                    cb:3d:c6:b6:9a:df:ef:02:47:58:91:d0:92:0c:71:
                    3a:e5:e8:d2:b2:0e:2b:44:89:8c:72:2b:15:fe:6f:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:A6:FF:BA:09:E9:DD:56:8B:20:CC:A7:C9:E0:93:5F:65:4B:2E
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:74:8f:32:79:aa:ca:53:7d:61:2b:de:de:79:02:97:2b:2d:
         77:dd:d8:dc:4c:7e:25:13:ff:16:ba:7b:18:fb:ff:38:f7:a1:
         04:d5:70:f2:4c:51:fa:0b:a4:c9:b9:8d:f2:80:aa:9e:ae:5b:
         7e:62:18:bc:f6:f1:09:35:9e:d9:96:e5:78:a4:57:16:df:ee:
         8b:08:5d:f7:65:fb:31:45:fa:86:ad:ba:21:fb:38:88:73:86:
         9c:e2:7a:eb:30:7c:17:33:a3:c1:90:f8:8b:31:27:4a:eb:eb:
         4b:32:36:af:ae:0b:f2:fc:19:15:15:03:d8:d6:3a:5b:12:2b:
         1f:fa:2e:aa:49:c0:10:99:e8:83:6b:11:ae:00:3d:e0:09:50:
         20:68:76:59:0f:16:d1:fc:a1:d2:27:71:dd:89:96:a2:a5:a5:
         4a:64:61:bd:d0:32:40:d8:ed:73:72:b1:85:0d:44:d5:71:6a:
         cc:0c:fc:ca:0b:e4:2d:1d:fc:08:95:fb:32:a6:10:6c:fd:88:
         d1:85:2c:1a:d9:2c:d7:88:de:82:8c:b9:06:a3:8b:a3:a7:0f:
         3e:67:1b:2a:d7:d1:0e:85:0e:6d:27:dc:bd:c1:98:84:d6:af:
         96:9e:3c:e2:50:ba:d2:ab:ac:0d:f4:37:3f:7d:f5:9d:a0:cc:
         03:a4:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:01 2026 by rpki-client