This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File:                     jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier:          Qxsyy9KwDLcRm3NZHZof5MLhP+8MKTdmbCSVkw7V1fo=
Subject key identifier:   C4:6F:DF:68:BD:D8:99:20:90:11:E9:A7:1E:53:0F:17:9E:A6:DA:5F
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer:       /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial:       019C42EAF3DA4FA2450E6B410B0A6C8C217E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number:          1412
Signing time:             Mon 09 Feb 2026 15:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:19 +0000
Files and hashes:         1: DDNpOrAqAOY0hs2uDPL3iCWLdnM.roa (hash: 8faJdkXXJZqTecw2oUQhwrCEcBbQjYDmWPFG/2WQ35U=)
                          2: YTLyjD8Zm08JN9ilWwpHNjSNOgM.roa (hash: ctWafbXvuy+Ew0x5ejjfVIYon0eWDnM21tPyQNTYZdQ=)
                          3: jhwcBBc8oOvXs_IDaLwdciLIw5g.roa (hash: 2wOw67KJ6XBImFQRXWSqni2LckUYvmgNYdwa7nlm6bU=)
                          4: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: WyvNTseTQTOd20XTeqJzMtgRYdwspOty6K/xagC8Q+M=)
                          5: oVTQSnnZbgxF4uVxhrTKvTjBHlc.roa (hash: EHUZVTErWURFxtqmqMqxx38zSEmivlq5W8eBCUAE6Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f3:da:4f:a2:45:0e:6b:41:0b:0a:6c:8c:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
        Validity
            Not Before: Feb  9 15:00:19 2026 GMT
            Not After : Feb 10 15:00:19 2026 GMT
        Subject: CN=c46fdf68bdd899209011e9a71e530f179ea6da5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:02:0f:a5:7c:d0:76:a6:86:6b:26:65:b7:
                    12:b5:7e:c6:7a:7f:78:5b:d3:55:50:1d:53:9c:a6:
                    35:09:bf:64:cd:f6:05:84:e8:89:15:b3:d9:28:d3:
                    a4:4b:86:a1:95:0f:c4:78:fa:91:73:9b:1a:e6:ca:
                    aa:fe:f6:06:ce:20:62:15:02:62:54:e8:aa:4c:96:
                    d2:bc:da:98:93:98:77:be:64:a3:01:46:3e:73:ba:
                    b8:23:4d:bd:33:51:2e:a9:26:30:3e:65:6c:64:8d:
                    78:9d:19:20:7f:44:ac:ff:46:39:5a:a8:05:32:21:
                    b0:3f:8a:7a:a8:18:a5:26:2b:4f:a7:8a:bb:a2:82:
                    49:b9:74:df:bc:3a:9d:8e:43:33:5e:4c:de:f5:08:
                    3c:23:cf:a1:83:0e:3c:8a:f4:10:da:77:01:c4:49:
                    30:b1:2a:dc:c7:75:6d:0f:d4:8c:90:fa:f1:bb:71:
                    d1:ce:a7:53:05:89:ce:14:61:ab:1d:fa:4b:d1:89:
                    c9:6e:8b:8f:6d:63:bb:e1:30:d2:7f:9c:a4:67:b3:
                    ba:f3:d5:ed:76:0a:3e:2e:22:81:36:47:76:e0:ea:
                    f4:34:00:d4:94:c6:6f:e5:11:36:8c:57:2d:fe:e2:
                    9e:72:ff:19:92:12:08:53:7b:01:48:5c:98:1b:88:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6F:DF:68:BD:D8:99:20:90:11:E9:A7:1E:53:0F:17:9E:A6:DA:5F
            X509v3 Authority Key Identifier:
                keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:09:6d:44:f5:ca:a2:4e:70:69:13:49:e2:2b:9e:00:2e:
         73:c0:99:92:71:f7:f2:8a:7f:c4:6e:82:33:55:77:29:70:63:
         d8:2f:3f:4b:ec:73:aa:f3:15:a5:dc:3e:07:1f:06:0c:8d:a7:
         80:37:12:79:61:6f:9d:c1:30:ed:69:07:84:03:8a:ec:18:c6:
         7a:7c:b0:4d:ef:55:1b:2a:aa:41:d4:b7:97:77:2c:66:0e:19:
         54:6c:81:05:c3:08:af:93:67:07:df:7d:ab:b6:88:8b:5b:51:
         18:16:53:26:a3:e7:5a:df:5d:68:94:6a:bb:4f:2e:d6:0e:47:
         42:51:a5:b0:04:88:ce:aa:81:17:92:28:a7:f7:50:7b:fb:8b:
         ce:ef:43:f1:3f:69:f7:99:6b:06:20:40:8f:2b:db:f6:d2:2c:
         77:9c:c8:f8:d2:df:9d:2e:2a:73:c6:60:17:08:76:8d:ce:58:
         b9:24:a2:9d:d2:e1:00:68:e3:18:fa:19:ef:52:69:dc:7b:d1:
         d5:39:06:b3:b7:7e:b0:48:fc:a1:0a:b3:c1:81:57:63:22:fc:
         fc:b9:71:3c:9d:dd:a9:52:c6:99:ab:c9:1d:d7:db:6e:7d:99:
         55:b5:b0:d1:19:16:47:28:06:0e:53:a4:e7:b9:0e:99:ea:88:
         1b:0e:ef:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6vPaT6JFDmtBCwpsjCF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjYwMjA5MTUwMDE5WhcNMjYwMjEwMTUwMDE5WjAzMTEwLwYDVQQD
EyhjNDZmZGY2OGJkZDg5OTIwOTAxMWU5YTcxZTUzMGYxNzllYTZkYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUcCD6V80HamhmsmZbcStX7Gen94
W9NVUB1TnKY1Cb9kzfYFhOiJFbPZKNOkS4ahlQ/EePqRc5sa5sqq/vYGziBiFQJi
VOiqTJbSvNqYk5h3vmSjAUY+c7q4I029M1EuqSYwPmVsZI14nRkgf0Ss/0Y5WqgF
MiGwP4p6qBilJitPp4q7ooJJuXTfvDqdjkMzXkze9Qg8I8+hgw48ivQQ2ncBxEkw
sSrcx3VtD9SMkPrxu3HRzqdTBYnOFGGrHfpL0YnJbouPbWO74TDSf5ykZ7O689Xt
dgo+LiKBNkd24Or0NADUlMZv5RE2jFct/uKecv8ZkhIIU3sBSFyYG4hQqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRv32i92JkgkBHppx5TDxeeptpfMB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4kJbUT1
yqJOcGkTSeIrngAuc8CZknH38op/xG6CM1V3KXBj2C8/S+xzqvMVpdw+Bx8GDI2n
gDcSeWFvncEw7WkHhAOK7BjGenywTe9VGyqqQdS3l3csZg4ZVGyBBcMIr5NnB999
q7aIi1tRGBZTJqPnWt9daJRqu08u1g5HQlGlsASIzqqBF5Iop/dQe/uLzu9D8T9p
95lrBiBAjyvb9tIsd5zI+NLfnS4qc8ZgFwh2jc5YuSSindLhAGjjGPoZ71Jp3HvR
1TkGs7d+sEj8oQqzwYFXYyL8/LlxPJ3dqVLGmavJHdfbbn2ZVbWw0RkWRygGDlOk
57kOmeqIGw7vBg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:12 2026 by rpki-client