This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File:                     Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier:          d5vdoERFV9a1CrONoj2soXVfKjt9qh+J1/FPLgFIYak=
Subject key identifier:   42:8C:6D:CA:10:58:97:F1:F9:42:95:D7:6E:BE:63:B0:12:A9:F9:60
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer:       /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial:       019C43C719EE59D769BAEBD3745CFD8FE8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number:          165E
Signing time:             Mon 09 Feb 2026 19:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:47 +0000
Files and hashes:         1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: df5cgWMYC3m2PvY8m8iZO/9yO7QdKv9ajr9n0levXmQ=)
                          2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:19:ee:59:d7:69:ba:eb:d3:74:5c:fd:8f:e8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
        Validity
            Not Before: Feb  9 19:00:47 2026 GMT
            Not After : Feb 10 19:00:47 2026 GMT
        Subject: CN=428c6dca105897f1f94295d76ebe63b012a9f960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:fd:07:40:de:ae:ad:96:9c:28:10:fe:cf:
                    a0:8b:d9:e5:ca:e8:27:3e:35:67:f0:25:d8:ab:95:
                    d8:66:e2:3d:bf:a9:e4:ce:b8:a2:2a:c5:4e:53:1d:
                    43:87:d6:83:6d:7a:f4:ef:d7:a5:ce:a0:0f:09:d6:
                    86:82:22:e6:f1:df:fc:73:4f:88:53:82:15:e6:42:
                    00:5a:3a:04:28:1b:c9:e2:dc:ac:3d:28:56:23:32:
                    84:de:d0:62:8e:68:d2:a4:7a:59:1c:15:99:bc:97:
                    ec:1b:55:74:2c:8f:3f:bd:e8:1d:a7:ba:92:0c:f6:
                    14:7b:62:fb:91:ce:00:75:70:92:a2:f9:14:91:82:
                    b4:08:55:d2:e0:05:0d:e9:af:e7:eb:69:fc:ea:d6:
                    1e:05:71:70:44:a5:a9:1c:b3:db:50:f7:da:55:9b:
                    a1:a3:53:1e:3d:db:74:49:1e:9c:1a:20:4d:35:19:
                    8e:77:cf:29:eb:9b:37:2c:98:45:53:29:0f:32:0f:
                    dc:62:e4:08:46:9e:9c:8b:98:89:12:18:5a:90:24:
                    72:ae:59:9d:c5:66:23:ce:82:b2:8a:9e:97:ee:fc:
                    18:69:bb:70:e5:c0:62:bf:09:97:f1:4c:50:3c:b3:
                    2b:f8:c6:25:87:c1:8a:bb:87:61:21:90:24:fd:98:
                    4e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8C:6D:CA:10:58:97:F1:F9:42:95:D7:6E:BE:63:B0:12:A9:F9:60
            X509v3 Authority Key Identifier:
                keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:39:0a:6a:3f:ba:fd:07:1b:36:0c:0a:90:9c:02:ab:28:
         a8:fe:5c:cb:88:51:f3:d5:e1:ac:ac:8c:c2:6d:45:72:92:3a:
         21:c8:37:3a:83:7c:97:f8:7f:37:c0:75:d4:38:9e:9c:d1:94:
         6d:36:a1:3e:c9:03:da:61:7e:83:08:f6:b4:3a:28:36:db:02:
         be:7f:03:be:76:43:93:99:7c:c2:ee:46:03:47:72:e5:a8:44:
         9b:ce:d1:76:a6:42:f4:b9:ec:5b:00:7d:7a:a1:4e:f9:bb:07:
         b6:d0:58:bc:f7:13:78:87:62:c1:dc:05:93:cb:0b:4f:26:44:
         12:f1:d8:71:cf:f0:dd:c9:83:99:9f:cc:67:d3:09:9b:26:38:
         f8:fe:b8:c1:a0:c6:79:27:c2:eb:3d:1b:8e:b3:0d:41:55:26:
         1c:0a:6a:c0:86:0d:a0:77:61:1e:60:77:42:5d:a7:3c:98:65:
         5b:29:c1:a4:38:c4:26:24:10:97:cf:f3:7e:e1:13:df:06:b8:
         b6:c4:7c:dc:14:95:64:4a:9b:13:f5:46:b4:86:66:03:fe:44:
         63:b6:55:14:d0:c5:e4:8e:6e:07:5b:5c:8a:2a:b2:35:e9:02:
         d2:81:59:8f:56:f1:0f:07:28:21:47:9b:3e:6e:32:f0:51:46:
         b3:d6:bf:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxxnuWddpuuvTdFz9j+i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjYwMjA5MTkwMDQ3WhcNMjYwMjEwMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg0MjhjNmRjYTEwNTg5N2YxZjk0Mjk1ZDc2ZWJlNjNiMDEyYTlmOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMP9B0Derq2WnCgQ/s+gi9nlyugn
PjVn8CXYq5XYZuI9v6nkzriiKsVOUx1Dh9aDbXr079elzqAPCdaGgiLm8d/8c0+I
U4IV5kIAWjoEKBvJ4tysPShWIzKE3tBijmjSpHpZHBWZvJfsG1V0LI8/vegdp7qS
DPYUe2L7kc4AdXCSovkUkYK0CFXS4AUN6a/n62n86tYeBXFwRKWpHLPbUPfaVZuh
o1MePdt0SR6cGiBNNRmOd88p65s3LJhFUykPMg/cYuQIRp6ci5iJEhhakCRyrlmd
xWYjzoKyip6X7vwYabtw5cBivwmX8UxQPLMr+MYlh8GKu4dhIZAk/ZhOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKMbcoQWJfx+UKV126+Y7ASqflgMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbU5Cmo/
uv0HGzYMCpCcAqsoqP5cy4hR89XhrKyMwm1FcpI6Icg3OoN8l/h/N8B11DienNGU
bTahPskD2mF+gwj2tDooNtsCvn8DvnZDk5l8wu5GA0dy5ahEm87RdqZC9LnsWwB9
eqFO+bsHttBYvPcTeIdiwdwFk8sLTyZEEvHYcc/w3cmDmZ/MZ9MJmyY4+P64waDG
eSfC6z0bjrMNQVUmHApqwIYNoHdhHmB3Ql2nPJhlWynBpDjEJiQQl8/zfuET3wa4
tsR83BSVZEqbE/VGtIZmA/5EY7ZVFNDF5I5uB1tciiqyNekC0oFZj1bxDwcoIUeb
Pm4y8FFGs9a/Kw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:32 2026 by rpki-client