This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File:                     jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier:          cXXgK8Q1UBGc/x7hFlsJnWp3uNXWK2/l+mtdf6fppNE=
Subject key identifier:   85:93:0B:F0:F1:03:C7:9B:F3:02:27:AD:36:7A:22:6D:13:EE:C7:D7
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer:       /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial:       019C427E0AA305AC69AFD1ADCF7086E1DDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number:          1084
Signing time:             Mon 09 Feb 2026 13:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:22 +0000
Files and hashes:         1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
                          2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: ns7NU9m+71uiftb0HPJjDMunPUYuSKsFhrcfeNf2OBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0a:a3:05:ac:69:af:d1:ad:cf:70:86:e1:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
        Validity
            Not Before: Feb  9 13:01:22 2026 GMT
            Not After : Feb 10 13:01:22 2026 GMT
        Subject: CN=85930bf0f103c79bf30227ad367a226d13eec7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:51:9c:af:8f:bf:e9:6f:c5:57:46:93:fd:
                    20:e3:1b:de:71:a6:6a:c1:5a:93:1a:33:13:a3:7d:
                    b9:f2:1c:62:64:0c:b8:ec:41:8d:33:aa:28:61:20:
                    ee:6c:db:96:e9:52:b8:dd:6e:ac:2b:62:95:15:75:
                    97:c8:b5:51:91:db:49:87:cc:68:2c:bb:41:5a:1c:
                    04:03:c7:bf:3d:52:7a:a7:e5:65:49:7d:85:75:00:
                    97:0d:7b:46:d7:25:40:e6:25:39:95:25:05:ea:c2:
                    23:14:8e:73:c2:61:41:f9:25:04:f8:f7:85:56:2f:
                    6e:1b:71:6d:c8:b8:2b:4e:44:47:24:6d:7f:c7:96:
                    f5:98:cf:2e:e9:12:86:11:99:1f:28:94:da:a7:de:
                    f5:e3:f2:94:a8:bf:3a:be:ed:f4:74:80:ba:3d:58:
                    8c:b1:b1:91:38:6a:e8:f3:1c:2a:66:0a:ca:dc:54:
                    5c:cd:c7:04:d6:1f:21:73:5a:8b:b0:1c:33:d5:12:
                    f3:cd:ab:af:c4:88:88:bf:7c:2f:b7:da:89:d2:c4:
                    fa:7e:ee:9c:fb:4d:e8:ca:0f:5f:f6:12:d3:33:fa:
                    71:af:80:b5:c9:41:8d:7a:29:1b:2d:8d:1a:23:dc:
                    84:70:ae:26:1e:3a:42:7e:3b:8e:41:3f:ee:2f:fd:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:0B:F0:F1:03:C7:9B:F3:02:27:AD:36:7A:22:6D:13:EE:C7:D7
            X509v3 Authority Key Identifier:
                keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:3e:f9:8b:bf:a6:35:13:0a:a6:74:10:af:5f:79:66:76:
         fa:1f:56:77:78:a8:81:83:97:c6:f7:2a:f4:53:a3:3c:20:1a:
         a9:24:32:5a:4b:46:d7:10:10:b1:10:3d:9f:d1:f0:02:59:43:
         1e:1e:70:5f:2d:98:66:bc:0a:66:34:ef:41:85:14:b2:a5:6c:
         34:55:04:c8:3c:4d:57:15:b8:81:ac:e0:e5:f2:e6:9e:d7:ee:
         56:89:2a:31:20:93:c8:7e:35:91:7d:6b:84:8b:78:3f:77:4b:
         1e:d6:ae:0f:a0:81:40:64:c0:ff:f0:61:c4:84:a6:78:19:6b:
         75:fa:00:bb:1d:04:3c:0c:27:62:c9:8e:fc:1a:a8:70:a4:bf:
         e5:b5:cd:11:5a:af:16:5b:d1:a0:9d:96:7f:4d:a4:1b:26:70:
         de:c6:f7:e5:7e:01:b1:b6:4e:6b:99:32:da:a1:ee:69:48:d2:
         f7:0c:41:35:21:3c:c9:fd:67:6d:80:da:56:5a:b7:8c:71:50:
         f0:13:79:09:3d:2a:47:18:9f:eb:4d:7a:47:67:cd:ea:5d:59:
         1a:0f:66:94:5b:e6:1f:50:4b:a8:4e:41:8b:45:23:ce:df:76:
         94:bd:ff:8c:40:2c:6d:53:98:b2:39:16:ef:ae:6f:bb:ac:51:
         4e:19:7b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfgqjBaxpr9Gtz3CG4d33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD
Eyg4NTkzMGJmMGYxMDNjNzliZjMwMjI3YWQzNjdhMjI2ZDEzZWVjN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArONRnK+Pv+lvxVdGk/0g4xvecaZq
wVqTGjMTo3258hxiZAy47EGNM6ooYSDubNuW6VK43W6sK2KVFXWXyLVRkdtJh8xo
LLtBWhwEA8e/PVJ6p+VlSX2FdQCXDXtG1yVA5iU5lSUF6sIjFI5zwmFB+SUE+PeF
Vi9uG3FtyLgrTkRHJG1/x5b1mM8u6RKGEZkfKJTap9714/KUqL86vu30dIC6PViM
sbGROGro8xwqZgrK3FRczccE1h8hc1qLsBwz1RLzzauvxIiIv3wvt9qJ0sT6fu6c
+03oyg9f9hLTM/pxr4C1yUGNeikbLY0aI9yEcK4mHjpCfjuOQT/uL/0DawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWTC/DxA8eb8wInrTZ6Im0T7sfXMB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkY++Yu/
pjUTCqZ0EK9feWZ2+h9Wd3iogYOXxvcq9FOjPCAaqSQyWktG1xAQsRA9n9HwAllD
Hh5wXy2YZrwKZjTvQYUUsqVsNFUEyDxNVxW4gazg5fLmntfuVokqMSCTyH41kX1r
hIt4P3dLHtauD6CBQGTA//BhxISmeBlrdfoAux0EPAwnYsmO/BqocKS/5bXNEVqv
FlvRoJ2Wf02kGyZw3sb35X4BsbZOa5ky2qHuaUjS9wxBNSE8yf1nbYDaVlq3jHFQ
8BN5CT0qRxif6016R2fN6l1ZGg9mlFvmH1BLqE5Bi0Ujzt92lL3/jEAsbVOYsjkW
765vu6xRThl7fA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:22 2026 by rpki-client