This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          6IFyZtjN+XgM3BNSkkvLzof2veApu1e7HtF/BijyaBc=
Subject key identifier:   17:73:2A:60:E2:98:1B:10:94:F7:4A:E4:2B:82:B4:8B:65:83:C6:DC
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       019C424649A31F98D64303D58CCE5B9DF82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          171A
Signing time:             Mon 09 Feb 2026 12:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:28 +0000
Files and hashes:         1: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: i0bSlzyS0hqZ8kE+NMUiWI69Y6oY/b9gt1yDPVTqCGM=)
                          2: h_x0ekBlB-Vu0xc47t3AzPstchQ.roa (hash: VAUNA+0iLJYPACcmjqTF67TgcJj7mjzDkmwtAsutcxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:49:a3:1f:98:d6:43:03:d5:8c:ce:5b:9d:f8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Feb  9 12:00:28 2026 GMT
            Not After : Feb 10 12:00:28 2026 GMT
        Subject: CN=17732a60e2981b1094f74ae42b82b48b6583c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:1c:46:52:be:b7:80:e0:0f:bf:0a:75:e5:
                    8a:b4:9e:b1:a7:fa:0a:2c:12:c5:27:e3:a3:f8:2f:
                    c8:5c:b9:dc:95:1d:4d:a2:fd:b4:6c:af:69:7b:ec:
                    f0:91:6b:75:c2:33:4b:07:8d:98:05:69:3c:69:19:
                    95:99:d4:4f:f8:ff:06:c6:cc:76:2c:5c:23:06:fc:
                    35:68:0c:b4:f1:5a:17:44:36:01:1d:de:a6:b1:e1:
                    52:9b:16:5a:ed:ef:6a:8c:6c:3e:73:13:f7:4e:a0:
                    71:72:45:8b:29:74:c3:9a:e0:b3:75:93:e7:bb:e0:
                    9a:56:76:77:a2:c6:56:d2:1e:f9:6f:73:34:1a:4e:
                    ee:a0:7a:3a:a7:d7:43:fd:6d:91:a6:1b:1a:d6:97:
                    b1:ac:48:f5:bc:e1:34:54:df:4b:52:37:73:1d:be:
                    6d:6e:bc:40:98:d1:72:ad:cb:aa:f5:41:68:a1:01:
                    b4:d7:e0:d2:39:c0:69:dc:8f:57:e1:ec:83:c6:94:
                    16:6d:2e:33:ae:cb:63:5d:cc:df:10:e7:70:7c:aa:
                    55:32:8d:ee:6e:55:e1:f5:96:d9:50:ce:3b:89:31:
                    b1:dc:26:a2:c0:b6:32:18:ec:0f:7b:9a:c8:14:8b:
                    b7:f5:18:b1:36:3f:5d:6d:e6:7b:52:56:c9:2a:ca:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:73:2A:60:E2:98:1B:10:94:F7:4A:E4:2B:82:B4:8B:65:83:C6:DC
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:72:02:ab:6f:04:ca:0b:33:6c:2d:52:03:2d:8a:85:52:
         b0:11:ab:3c:a5:c0:9a:91:e8:3b:f1:88:ff:f6:f0:88:b1:c7:
         51:76:cb:20:28:14:09:4a:ea:6f:80:a5:c4:03:b6:fb:f4:6c:
         9e:2b:39:7d:82:90:d6:77:46:46:cf:84:13:b1:61:66:7b:bc:
         24:97:62:46:a4:cf:b1:28:ba:20:83:68:37:8f:c6:71:eb:0a:
         3b:f4:32:dd:22:2c:7e:ae:cb:25:98:f6:03:48:d6:93:78:44:
         7c:ca:53:e2:54:33:30:e2:3f:25:6e:5e:95:88:0d:9d:dc:b6:
         ed:67:13:c2:38:5e:7b:df:85:c1:d4:c4:5d:89:cf:0c:5b:c4:
         fb:0f:88:80:a5:18:fe:17:e6:81:3f:3e:42:21:83:94:80:7a:
         2c:0f:ec:6b:01:60:86:ea:1e:18:de:e7:a3:29:c7:82:df:a6:
         f3:c8:be:76:45:bd:a0:51:c7:7b:b3:6d:3d:70:ca:cb:6a:10:
         df:9c:b4:53:5f:9e:89:83:a7:d4:8f:3d:4a:fb:e2:33:66:7f:
         05:5a:51:84:be:f8:aa:51:fe:ac:ba:33:70:a9:22:41:cd:57:
         72:59:8b:27:7f:e0:dd:55:69:7c:e0:60:a5:f0:53:17:9a:b1:
         de:96:19:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkmjH5jWQwPVjM5bnfgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD
EygxNzczMmE2MGUyOTgxYjEwOTRmNzRhZTQyYjgyYjQ4YjY1ODNjNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3kcRlK+t4DgD78KdeWKtJ6xp/oK
LBLFJ+Oj+C/IXLnclR1Nov20bK9pe+zwkWt1wjNLB42YBWk8aRmVmdRP+P8Gxsx2
LFwjBvw1aAy08VoXRDYBHd6mseFSmxZa7e9qjGw+cxP3TqBxckWLKXTDmuCzdZPn
u+CaVnZ3osZW0h75b3M0Gk7uoHo6p9dD/W2Rphsa1pexrEj1vOE0VN9LUjdzHb5t
brxAmNFyrcuq9UFooQG01+DSOcBp3I9X4eyDxpQWbS4zrstjXczfEOdwfKpVMo3u
blXh9ZbZUM47iTGx3CaiwLYyGOwPe5rIFIu39RixNj9dbeZ7UlbJKspdbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdzKmDimBsQlPdK5CuCtItlg8bcMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpdyAqtv
BMoLM2wtUgMtioVSsBGrPKXAmpHoO/GI//bwiLHHUXbLICgUCUrqb4ClxAO2+/Rs
nis5fYKQ1ndGRs+EE7FhZnu8JJdiRqTPsSi6IINoN4/GcesKO/Qy3SIsfq7LJZj2
A0jWk3hEfMpT4lQzMOI/JW5elYgNndy27WcTwjhee9+FwdTEXYnPDFvE+w+IgKUY
/hfmgT8+QiGDlIB6LA/sawFghuoeGN7noynHgt+m88i+dkW9oFHHe7NtPXDKy2oQ
35y0U1+eiYOn1I89SvviM2Z/BVpRhL74qlH+rLozcKkiQc1XclmLJ3/g3VVpfOBg
pfBTF5qx3pYZSQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:18 2026 by rpki-client