This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File:                     JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier:          JjcgrKPC+Cu4P09wpPSF8DLe4XNxgY3AoJo+zRjpyOc=
Subject key identifier:   B6:04:34:41:92:F2:0D:B6:02:A9:99:FF:6F:0B:E5:0F:FE:BD:6F:B7
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer:       /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial:       019C44DA4A3BC334FBDF222394CFE561443A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number:          023C
Signing time:             Tue 10 Feb 2026 00:01:22 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:22 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:22 +0000
Files and hashes:         1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
                          2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: QRaCzyv9ng3NoiozGK4tOxKq+9KuS/s3q4b5iEHUUgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:4a:3b:c3:34:fb:df:22:23:94:cf:e5:61:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
        Validity
            Not Before: Feb 10 00:01:22 2026 GMT
            Not After : Feb 11 00:01:22 2026 GMT
        Subject: CN=b604344192f20db602a999ff6f0be50ffebd6fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:f7:96:51:47:23:0b:ee:d9:57:cd:5c:2c:
                    40:82:d9:d7:96:9f:3b:69:2a:41:50:b2:16:4c:c6:
                    50:d2:d8:a0:06:0f:6e:6d:6d:c2:73:73:07:a6:ca:
                    8d:bc:78:29:03:2e:40:fa:a2:e1:0f:15:7e:ea:1f:
                    26:7e:04:3a:b6:d8:f3:29:da:d4:dc:71:e4:22:84:
                    15:9a:4f:36:43:24:52:1c:49:b9:18:e8:1a:ad:f4:
                    00:d6:64:03:76:95:1d:5e:e9:9f:92:81:6e:56:cf:
                    4c:f3:7b:22:b2:7b:da:75:93:23:ea:50:71:dd:0d:
                    a6:32:ae:56:4a:7e:32:a3:3e:c7:98:43:5b:2c:51:
                    41:d7:a8:cc:f5:c6:f8:2a:a9:a1:e9:ec:30:d8:af:
                    b4:52:6a:5e:ca:56:38:a8:3a:8c:00:30:08:3b:62:
                    8b:db:eb:b5:6f:8c:38:6d:5f:41:75:c5:e0:6a:a7:
                    f4:31:1e:ac:f3:9d:24:3d:cc:e3:bf:60:1b:c4:f6:
                    42:1c:fe:26:34:5f:2d:d0:91:f8:99:17:0f:0e:13:
                    54:01:b9:a0:f7:dc:14:84:94:e5:ce:aa:f1:64:db:
                    86:a1:95:63:15:2d:ed:ff:31:fe:61:97:cc:c3:d4:
                    db:b7:45:81:6f:c3:e6:a9:1d:aa:78:c7:02:c9:39:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:34:41:92:F2:0D:B6:02:A9:99:FF:6F:0B:E5:0F:FE:BD:6F:B7
            X509v3 Authority Key Identifier:
                keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:70:30:a5:88:09:f4:68:02:32:e6:91:ec:d3:13:cd:ec:
         0d:1f:f6:80:7b:df:a6:8e:e3:02:12:f1:55:a1:24:0b:1b:3c:
         a5:94:2e:fe:41:dc:83:00:98:00:3d:58:17:d2:d2:d9:02:13:
         28:b0:c2:78:34:13:64:15:df:b4:53:52:16:62:a8:87:27:9b:
         fc:e7:e7:a7:71:dd:30:cb:fd:17:c8:e1:29:ab:1d:b0:fe:0b:
         fa:c1:19:65:8e:1d:48:6d:87:26:28:a5:b4:29:24:cc:24:cf:
         6e:88:65:0d:68:66:9c:9d:76:98:74:64:ec:91:c2:dd:a8:7c:
         2c:31:e7:1e:79:fd:63:74:0e:f7:0a:5e:4a:da:3c:e8:23:7b:
         4c:c8:4e:1e:dd:8d:5a:31:35:10:15:7f:c8:b9:4c:b8:85:ad:
         21:04:73:53:5b:6b:14:83:21:f2:fc:fc:2c:f9:39:05:71:f9:
         61:9c:c8:2f:05:23:55:32:4d:b3:c3:c2:4d:22:a8:7e:65:ac:
         86:6c:d8:f7:ec:ca:36:a7:d6:b9:57:3d:39:cd:71:45:6c:dc:
         92:bc:f7:d5:a4:9f:85:b8:d4:85:82:57:7a:2e:90:ff:8a:84:
         d9:1e:b2:32:65:75:7e:44:13:14:01:d9:82:8f:c3:03:3b:dc:
         d5:47:28:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2ko7wzT73yIjlM/lYUQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTYzMzE4MmRkZDU1OGI0MWJhMTZjNTE5ZWU0NjE0NTBk
ZGRkZDkwHhcNMjYwMjEwMDAwMTIyWhcNMjYwMjExMDAwMTIyWjAzMTEwLwYDVQQD
EyhiNjA0MzQ0MTkyZjIwZGI2MDJhOTk5ZmY2ZjBiZTUwZmZlYmQ2ZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxz3llFHIwvu2VfNXCxAgtnXlp87
aSpBULIWTMZQ0tigBg9ubW3Cc3MHpsqNvHgpAy5A+qLhDxV+6h8mfgQ6ttjzKdrU
3HHkIoQVmk82QyRSHEm5GOgarfQA1mQDdpUdXumfkoFuVs9M83sisnvadZMj6lBx
3Q2mMq5WSn4yoz7HmENbLFFB16jM9cb4Kqmh6eww2K+0UmpeylY4qDqMADAIO2KL
2+u1b4w4bV9BdcXgaqf0MR6s850kPczjv2AbxPZCHP4mNF8t0JH4mRcPDhNUAbmg
99wUhJTlzqrxZNuGoZVjFS3t/zH+YZfMw9Tbt0WBb8PmqR2qeMcCyTluNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYENEGS8g22AqmZ/28L5Q/+vW+3MB8GA1UdIwQY
MBaAFCVWMxgt3VWLQboWxRnuRhRQ3d3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEt
NWI1NDFmMzQ3MzJlLzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZmViMWEtMjliNS00NGE2LTkyZWEtNWI1NDFmMzQ3MzJl
LzEvSlZZekdDM2RWWXRCdWhiRkdlNUdGRkRkM2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6JwMKWI
CfRoAjLmkezTE83sDR/2gHvfpo7jAhLxVaEkCxs8pZQu/kHcgwCYAD1YF9LS2QIT
KLDCeDQTZBXftFNSFmKohyeb/Ofnp3HdMMv9F8jhKasdsP4L+sEZZY4dSG2HJiil
tCkkzCTPbohlDWhmnJ12mHRk7JHC3ah8LDHnHnn9Y3QO9wpeSto86CN7TMhOHt2N
WjE1EBV/yLlMuIWtIQRzU1trFIMh8vz8LPk5BXH5YZzILwUjVTJNs8PCTSKofmWs
hmzY9+zKNqfWuVc9Oc1xRWzckrz31aSfhbjUhYJXei6Q/4qE2R6yMmV1fkQTFAHZ
go/DAzvc1Uco2g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:07 2026 by rpki-client