This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          VLiWHHZx3jvhbYwutfqsfz/+l6B0ZdBoc3fEXTtrOMI=
Subject key identifier:   DF:55:44:B3:78:B4:31:75:66:63:80:23:8D:9F:E0:29:B9:EC:04:65
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       019C432246C070C811ECCEE5866F9E9CC928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 16:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:45 +0000
Files and hashes:         1: 4X9bzbTjxxEC-csNdknM31iR6Vk.roa (hash: g5Y0JUJxW/m2Y8F30up7Txp8xJPm4qz4gVK4xJRO0QQ=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: fXuOL6XuaWrbzHAwKkK5hBDNTvNM+0CGfnpFWeci1nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:46:c0:70:c8:11:ec:ce:e5:86:6f:9e:9c:c9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: Feb  9 16:00:45 2026 GMT
            Not After : Feb 10 16:00:45 2026 GMT
        Subject: CN=df5544b378b43175666380238d9fe029b9ec0465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:1f:7e:eb:e5:b5:93:95:60:e8:58:ee:f8:
                    3e:3a:e6:51:8b:ce:94:90:37:0e:1d:17:78:dc:2a:
                    bf:98:d8:3e:88:20:ec:ed:63:83:96:e8:c4:ca:0c:
                    f0:7d:7b:ae:36:bf:12:9d:a1:64:77:ad:6f:1f:ab:
                    0c:cc:44:55:fb:32:e7:76:f6:a5:f8:02:ed:fe:f4:
                    33:60:21:83:91:85:83:a3:a3:c1:18:c7:91:af:30:
                    29:81:23:5e:d8:dc:14:60:fb:6a:59:89:55:e8:7d:
                    ed:50:ec:21:6a:eb:eb:a6:6f:14:8c:ad:b7:71:09:
                    0f:fa:b5:62:7c:cb:19:8c:58:e8:77:be:cc:8e:e5:
                    63:90:85:db:4a:21:56:21:8e:06:03:b2:a7:7b:f9:
                    7b:31:f3:1e:bd:77:02:2e:63:bb:5f:f7:7a:7c:f7:
                    af:f8:32:69:7d:00:5e:ac:28:1c:90:89:fe:f6:dc:
                    c3:fe:7d:6b:af:de:bc:d9:d9:15:50:2f:6b:32:dd:
                    61:7e:60:47:03:25:05:29:e8:0a:b2:98:a0:96:15:
                    ca:30:36:5a:fc:5e:58:09:ca:f9:f6:d2:9b:a3:1f:
                    1c:35:15:64:02:58:ff:2e:50:28:b4:6e:91:31:d9:
                    f0:c8:b9:18:b4:28:0e:b4:d8:c5:6f:fb:a0:dd:c7:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:55:44:B3:78:B4:31:75:66:63:80:23:8D:9F:E0:29:B9:EC:04:65
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b0:dd:a3:5d:be:ba:a5:c1:ae:ab:8c:a0:dd:a7:01:08:e5:
         cd:8e:7b:a9:a1:95:61:45:13:28:d2:eb:fc:6b:1a:c8:87:61:
         43:cb:d8:c0:a8:60:57:03:2b:73:b3:d8:ec:a8:91:00:ef:68:
         e8:2a:2d:f7:6f:26:f7:0c:24:23:eb:de:40:65:96:96:d2:b0:
         1a:a5:d0:12:5a:43:9f:8c:7b:a6:b5:aa:ea:84:a4:2b:12:2d:
         4c:0e:b4:fe:dc:16:ee:80:46:05:77:de:ae:08:39:56:0f:ae:
         57:00:bd:2e:65:65:60:06:ca:cf:be:c9:68:75:cf:09:f7:b2:
         0a:f8:5d:44:c0:8b:08:3d:2c:40:a8:dc:88:ef:d5:9b:a4:89:
         14:4f:38:be:ed:be:8b:ca:0d:d3:55:11:9b:4f:57:02:c9:83:
         06:03:bf:ab:7a:b9:d0:ea:75:32:7d:1c:23:39:40:6a:b8:c1:
         3d:8a:3b:7d:6a:d4:59:84:d2:62:c0:69:03:16:4f:b2:b4:62:
         28:1a:13:cc:be:13:3a:7a:38:99:e4:c6:55:44:ed:92:50:38:
         f8:68:a0:a8:da:b1:b6:8c:4f:7d:cf:d3:9e:be:cf:d1:6f:13:
         a9:0c:af:f4:10:6e:e8:57:b2:e6:3f:40:b2:31:6a:56:57:4c:
         ca:e8:65:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIkbAcMgR7M7lhm+enMkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5
ZjdhMmYwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD
EyhkZjU1NDRiMzc4YjQzMTc1NjY2MzgwMjM4ZDlmZTAyOWI5ZWMwNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwggffuvltZOVYOhY7vg+OuZRi86U
kDcOHRd43Cq/mNg+iCDs7WODlujEygzwfXuuNr8SnaFkd61vH6sMzERV+zLndval
+ALt/vQzYCGDkYWDo6PBGMeRrzApgSNe2NwUYPtqWYlV6H3tUOwhauvrpm8UjK23
cQkP+rVifMsZjFjod77MjuVjkIXbSiFWIY4GA7Kne/l7MfMevXcCLmO7X/d6fPev
+DJpfQBerCgckIn+9tzD/n1rr9682dkVUC9rMt1hfmBHAyUFKegKspiglhXKMDZa
/F5YCcr59tKbox8cNRVkAlj/LlAotG6RMdnwyLkYtCgOtNjFb/ug3ceSBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9VRLN4tDF1ZmOAI42f4Cm57ARlMB8GA1UdIwQY
MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt
ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy
LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLDdo12+
uqXBrquMoN2nAQjlzY57qaGVYUUTKNLr/GsayIdhQ8vYwKhgVwMrc7PY7KiRAO9o
6Cot928m9wwkI+veQGWWltKwGqXQElpDn4x7prWq6oSkKxItTA60/twW7oBGBXfe
rgg5Vg+uVwC9LmVlYAbKz77JaHXPCfeyCvhdRMCLCD0sQKjciO/Vm6SJFE84vu2+
i8oN01URm09XAsmDBgO/q3q50Op1Mn0cIzlAarjBPYo7fWrUWYTSYsBpAxZPsrRi
KBoTzL4TOno4meTGVUTtklA4+GigqNqxtoxPfc/Tnr7P0W8TqQyv9BBu6Fey5j9A
sjFqVldMyuhlRg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:04 2026 by rpki-client