This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File:                     j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier:          1l4Su+BqU1hyIviAB12+90miSyHwH97IFgdfoerfSRE=
Subject key identifier:   FE:70:93:64:7E:C7:AB:73:0E:EA:30:94:1E:2D:55:D3:16:CD:39:0A
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer:       /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial:       019C43590A9E5E2A17BC292083D9EC9B70C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number:          1628
Signing time:             Mon 09 Feb 2026 17:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:34 +0000
Files and hashes:         1: LQlTFpdDcZcla07mIRRJrFGaP1c.roa (hash: sT/VihqangGQBYKbzBN6tq9t4QWOtBBUVZJiEDdhqx0=)
                          2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: Byu2TqSB5zUn2xi4Q1VUahz3ha+0djZJniuWia5VN/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:0a:9e:5e:2a:17:bc:29:20:83:d9:ec:9b:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
        Validity
            Not Before: Feb  9 17:00:34 2026 GMT
            Not After : Feb 10 17:00:34 2026 GMT
        Subject: CN=fe7093647ec7ab730eea30941e2d55d316cd390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:8c:ec:43:d7:6b:29:ee:ed:4e:fc:64:c8:
                    ca:6d:cc:48:4b:db:cc:41:34:e3:d2:41:ff:3d:ff:
                    bc:01:1b:49:88:e1:53:55:d1:3b:f6:35:a9:64:d6:
                    b2:e8:fa:dd:51:4b:e1:23:55:82:4f:a8:f1:ba:40:
                    52:84:f2:e9:3e:10:ca:82:97:d2:7b:bc:b7:d3:e0:
                    f5:20:0a:33:cc:19:c5:61:8f:a1:6e:24:65:f8:47:
                    72:ea:19:47:2a:ce:6a:e1:12:05:64:2a:1c:f4:6b:
                    45:d6:7b:6d:a5:04:d5:4b:55:78:15:c6:95:bd:8f:
                    e7:73:d1:bd:48:0e:68:d5:a4:9a:17:47:ad:23:6f:
                    7a:60:0e:55:69:db:c9:a2:1b:96:47:5a:33:38:6b:
                    c8:42:6b:0b:5a:53:3e:66:9f:8e:83:a9:7a:c1:65:
                    d5:fd:1b:23:6a:2c:7d:25:58:b1:17:93:74:ef:88:
                    53:53:4e:11:78:e7:78:f5:03:6b:be:53:b1:fe:2c:
                    ed:7a:34:6f:92:dd:f6:24:58:2a:79:30:c5:37:45:
                    33:a5:29:16:93:c9:7c:2e:8d:38:18:3f:17:73:e6:
                    14:c2:59:f2:4d:16:3f:2b:1b:bc:88:95:3a:c8:34:
                    09:b4:44:75:7a:8c:ce:a4:f2:60:95:f8:9d:10:1f:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:70:93:64:7E:C7:AB:73:0E:EA:30:94:1E:2D:55:D3:16:CD:39:0A
            X509v3 Authority Key Identifier:
                keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:61:7a:53:0d:3c:6e:0b:00:08:bf:d7:a8:22:ca:97:2d:d3:
         81:3e:4c:1f:9a:ca:d8:0f:8a:d3:4a:df:fc:34:47:66:58:8b:
         f0:45:31:c3:c6:cb:4a:47:59:84:69:f9:d7:50:ee:33:93:e8:
         c8:05:6e:95:58:75:6f:bf:1a:0f:c6:5b:82:e5:10:7b:3d:14:
         2d:85:c2:eb:21:41:64:05:d3:04:3d:76:d4:db:08:e6:88:c8:
         1d:56:b8:09:7b:50:a3:ad:ae:fb:a8:48:3f:d6:41:23:21:bc:
         9e:23:35:a9:7d:73:b5:63:32:a6:6a:c0:00:24:c2:0f:b9:da:
         00:be:b7:0e:14:46:ae:4c:ba:ef:f7:c5:cc:f0:15:99:22:41:
         e2:66:2d:54:07:9f:e9:27:0b:27:d5:19:bb:63:10:9c:94:c2:
         4c:2a:25:88:ed:e6:b2:96:7c:3c:2b:a5:22:cc:a2:9e:c9:12:
         57:c0:86:3d:8d:07:8d:d4:56:d3:bc:fd:e0:2c:1f:7b:99:51:
         4a:1d:a0:95:76:7c:5c:a2:1c:8a:e9:7a:4d:79:23:34:79:20:
         83:60:ee:b6:ef:71:5d:9d:bc:ea:77:05:db:51:29:ae:5b:0e:
         c0:50:33:87:6f:4c:9e:0b:d3:a8:1f:c6:6c:0e:54:53:3e:ae:
         0d:c3:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:20 2026 by rpki-client