This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File:                     jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier:          IW+K1a7Gvi0rM2UPowxQsYdVe5DHVeMDKSLZEJ8fWNU=
Subject key identifier:   A2:6A:DF:9C:78:E1:9F:85:E4:80:F6:26:26:A5:03:D1:E8:6C:EA:6F
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       019C1CB9639BBF00606344F5033A893DC84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 05:00:37 +0000
Manifest this update:     Mon 02 Feb 2026 05:00:37 +0000
Manifest next update:     Tue 03 Feb 2026 05:00:37 +0000
Files and hashes:         1: AR0snb2WiBVjty2iEPK8q39KPZo.roa (hash: LRggRbjFzoUTOK1TTVfP+3KeKjujfqsLku1ZGYI58wk=)
                          2: F13pIjKslpUrOUGbjMV17CmkLWk.roa (hash: szqGRHA6NM3mWFGyDMMW+gpH0BvtN2cqf2OUgq/zN28=)
                          3: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: YhTT5Llxhv9ZeGIf4vDJZiQF55DmUcBKhg7rbH4eV58=)
                          4: olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (hash: DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:b9:63:9b:bf:00:60:63:44:f5:03:3a:89:3d:c8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Feb  2 05:00:37 2026 GMT
            Not After : Feb  3 05:00:37 2026 GMT
        Subject: CN=a26adf9c78e19f85e480f62626a503d1e86cea6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:d1:d3:f4:6b:13:1e:a9:f6:38:11:c3:a9:
                    54:6d:81:f0:33:cf:1f:61:ec:40:83:e1:e3:f7:d8:
                    52:4f:6f:82:15:01:62:4c:d5:0a:54:e9:db:e6:24:
                    09:3f:db:14:cf:d6:39:d7:15:67:a3:5b:04:15:1a:
                    a8:d1:92:dc:13:ca:eb:b4:82:e1:b0:06:72:ea:7c:
                    0d:9e:f0:44:ef:b2:21:ff:1e:6d:a9:42:07:71:2b:
                    9a:fa:93:d4:a6:b0:97:6f:1f:9c:ee:d6:de:f0:7e:
                    45:20:39:40:1c:40:8a:95:a3:dd:27:a8:04:7f:93:
                    18:35:0a:57:fd:70:96:a0:35:ca:69:fe:1c:d1:5a:
                    23:28:83:94:5c:9b:64:70:22:4f:a6:e0:2a:2b:2a:
                    5a:19:b6:ea:c5:0f:21:99:c8:cf:32:e2:ea:f4:74:
                    57:b3:12:06:3b:1c:34:37:cc:bb:56:52:a4:18:61:
                    f9:67:d0:c1:14:3e:9c:89:e8:83:23:1f:08:28:d9:
                    5c:56:0e:05:e4:70:48:67:1c:a0:99:df:1b:70:ac:
                    97:d4:4f:7f:b0:40:9a:48:00:bd:79:82:ce:d3:9e:
                    55:62:b8:24:78:d6:02:8c:57:12:0a:bb:a8:8f:6c:
                    c9:4f:fa:ee:cb:b3:16:cf:7e:49:db:3d:dd:3b:3d:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6A:DF:9C:78:E1:9F:85:E4:80:F6:26:26:A5:03:D1:E8:6C:EA:6F
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:4d:10:03:ce:9b:a3:e3:6a:66:29:0f:a8:e7:b2:43:c6:
         dd:82:7f:26:8e:5b:1f:03:01:d4:b5:62:9c:72:f3:13:67:b8:
         4e:b8:be:79:17:48:68:f4:28:46:93:4c:c1:25:ea:95:45:b1:
         1c:24:ba:6e:7d:3e:09:41:83:c2:74:ba:9d:c3:24:75:97:52:
         51:d2:36:78:06:b1:0c:be:91:12:26:10:2a:dc:c9:46:cb:a4:
         34:34:31:1c:75:d1:23:3d:7f:a5:6c:94:7b:5e:c2:06:7b:1e:
         d2:6e:7e:1b:0a:b9:b4:6e:8e:47:ac:11:0c:85:71:08:f5:82:
         cc:8a:08:38:b9:16:2c:52:f3:db:e6:3a:4b:c4:40:03:f0:ca:
         b9:75:52:da:b3:d1:02:8a:d1:54:0b:34:df:06:ef:3b:35:a6:
         d2:4d:d8:bb:f9:71:de:1b:67:8e:7c:9c:67:7a:b6:9f:ee:7c:
         02:e9:63:78:d9:25:fc:93:a5:08:90:14:8c:f8:ac:2f:0f:8a:
         59:b2:7d:63:03:1a:1d:bd:89:56:ae:f5:39:33:d2:e6:1a:bd:
         9c:71:65:7e:9e:ad:24:7c:9f:b0:0b:6e:e6:49:6f:92:9b:5b:
         83:e9:de:c8:aa:05:f9:8e:b3:63:e4:81:4d:19:cf:5e:b8:ec:
         b1:c8:e7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcuWObvwBgY0T1AzqJPchMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy
YzU4ODcwHhcNMjYwMjAyMDUwMDM3WhcNMjYwMjAzMDUwMDM3WjAzMTEwLwYDVQQD
EyhhMjZhZGY5Yzc4ZTE5Zjg1ZTQ4MGY2MjYyNmE1MDNkMWU4NmNlYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/7R0/RrEx6p9jgRw6lUbYHwM88f
YexAg+Hj99hST2+CFQFiTNUKVOnb5iQJP9sUz9Y51xVno1sEFRqo0ZLcE8rrtILh
sAZy6nwNnvBE77Ih/x5tqUIHcSua+pPUprCXbx+c7tbe8H5FIDlAHECKlaPdJ6gE
f5MYNQpX/XCWoDXKaf4c0VojKIOUXJtkcCJPpuAqKypaGbbqxQ8hmcjPMuLq9HRX
sxIGOxw0N8y7VlKkGGH5Z9DBFD6cieiDIx8IKNlcVg4F5HBIZxygmd8bcKyX1E9/
sECaSAC9eYLO055VYrgkeNYCjFcSCruoj2zJT/ruy7MWz35J2z3dOz1h8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJq35x44Z+F5ID2JialA9HobOpvMB8GA1UdIwQY
MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt
YjViOGQwMjQ0OGI4LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4
LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF31NEAPO
m6PjamYpD6jnskPG3YJ/Jo5bHwMB1LVinHLzE2e4Tri+eRdIaPQoRpNMwSXqlUWx
HCS6bn0+CUGDwnS6ncMkdZdSUdI2eAaxDL6REiYQKtzJRsukNDQxHHXRIz1/pWyU
e17CBnse0m5+Gwq5tG6OR6wRDIVxCPWCzIoIOLkWLFLz2+Y6S8RAA/DKuXVS2rPR
AorRVAs03wbvOzWm0k3Yu/lx3htnjnycZ3q2n+58AuljeNkl/JOlCJAUjPisLw+K
WbJ9YwMaHb2JVq71OTPS5hq9nHFlfp6tJHyfsAtu5klvkptbg+neyKoF+Y6zY+SB
TRnPXrjsscjnIw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:02 2026 by rpki-client