This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File:                     jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier:          kdAJLrGt6fpuqgExSQBKIjw6eSblHPy5nRmBwmaTlYQ=
Subject key identifier:   C1:14:68:2E:9D:C0:30:8D:16:28:83:5C:37:75:06:14:02:9A:AC:A7
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer:       /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial:       019C416A839E4895509584D17D9ECC172667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 08:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:25 +0000
Files and hashes:         1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=)
                          2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: aW+FpBXNXC8cKJvinPkhnkePiu0oEq5vb7fKQB0uQ/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:83:9e:48:95:50:95:84:d1:7d:9e:cc:17:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
        Validity
            Not Before: Feb  9 08:00:25 2026 GMT
            Not After : Feb 10 08:00:25 2026 GMT
        Subject: CN=c114682e9dc0308d1628835c37750614029aaca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:ad:bf:47:6c:a8:2b:fe:6a:95:f0:17:ca:
                    c1:fa:83:90:40:fe:14:7a:08:27:92:fe:91:6e:71:
                    5c:39:6e:a8:be:0a:70:d2:fc:2a:e2:b0:ee:64:f0:
                    5e:9f:92:0c:7a:10:8a:d9:b2:15:68:fa:cf:0d:41:
                    73:18:d3:42:09:d5:9b:27:7d:f0:ad:2c:37:5c:5f:
                    8d:b4:43:80:35:59:68:eb:62:2f:ce:a3:66:3e:26:
                    1b:ca:06:9e:1a:8b:85:2a:1e:10:4c:6b:d8:f1:5c:
                    fd:42:e5:4a:47:c1:f9:3f:95:c0:3d:34:f3:1b:0e:
                    56:48:55:94:ba:d6:00:aa:08:e6:d3:e0:19:1c:45:
                    a6:87:b8:8c:44:d2:52:7c:45:d3:3f:69:3a:2f:d5:
                    4d:c7:d2:31:ad:16:6e:0d:e6:0f:9a:61:c7:c8:b8:
                    7d:77:24:79:de:71:1e:a6:16:f1:d8:c8:96:2d:d2:
                    73:e7:94:26:55:43:88:27:4a:5f:62:9c:d6:02:f4:
                    90:f3:44:4f:ab:c7:f1:cf:9c:ca:13:d8:ba:c3:a3:
                    1f:fa:6f:52:3f:ee:25:d2:74:b0:75:5a:b2:ba:12:
                    f4:5c:49:43:1f:00:a8:03:0c:e0:6f:95:9c:83:14:
                    71:d1:6a:86:f8:74:00:86:24:eb:7a:15:8f:83:4b:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:68:2E:9D:C0:30:8D:16:28:83:5C:37:75:06:14:02:9A:AC:A7
            X509v3 Authority Key Identifier:
                keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:be:9b:9a:1a:ec:e6:14:9d:f0:56:db:12:63:55:e6:65:ce:
         3b:64:28:a0:00:46:0e:ce:3b:cb:16:c6:a4:82:6b:08:61:ef:
         c8:08:64:65:29:9e:aa:0d:dc:75:40:79:80:62:d5:c6:8e:57:
         16:f5:65:6a:c4:09:d0:bc:8e:c5:88:4c:04:ea:6d:0d:de:56:
         8c:eb:a9:c2:66:93:09:af:ca:f0:8c:fc:1f:0e:28:b0:b4:09:
         3e:b6:25:43:87:f4:70:52:9f:39:f1:60:df:62:86:66:4e:d8:
         4f:2d:22:e8:11:ad:e9:27:90:70:60:8b:a3:16:ad:6d:86:81:
         ca:e1:11:08:a5:ce:64:b4:3e:38:ae:6d:3c:dd:fc:db:98:b6:
         f1:a4:3e:e6:f5:b0:ee:49:79:78:92:44:9b:c8:dc:98:71:56:
         25:b0:1b:98:76:92:20:0c:bb:54:34:20:e8:e5:a4:c2:2d:98:
         82:f7:97:5c:f9:59:11:1b:69:6d:10:f3:67:38:95:f2:5c:09:
         ec:3f:c0:f0:6f:46:61:ad:e7:56:3e:c0:70:86:2a:39:1a:bb:
         d2:75:f4:b2:67:8b:49:f3:37:f6:7f:cd:3b:3f:84:f8:79:5d:
         90:b1:1e:06:71:7a:00:47:5a:64:14:23:47:12:a6:33:0f:13:
         73:8d:fa:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBaoOeSJVQlYTRfZ7MFyZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjYwMjA5MDgwMDI1WhcNMjYwMjEwMDgwMDI1WjAzMTEwLwYDVQQD
EyhjMTE0NjgyZTlkYzAzMDhkMTYyODgzNWMzNzc1MDYxNDAyOWFhY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yytv0dsqCv+apXwF8rB+oOQQP4U
eggnkv6RbnFcOW6ovgpw0vwq4rDuZPBen5IMehCK2bIVaPrPDUFzGNNCCdWbJ33w
rSw3XF+NtEOANVlo62IvzqNmPiYbygaeGouFKh4QTGvY8Vz9QuVKR8H5P5XAPTTz
Gw5WSFWUutYAqgjm0+AZHEWmh7iMRNJSfEXTP2k6L9VNx9IxrRZuDeYPmmHHyLh9
dyR53nEephbx2MiWLdJz55QmVUOIJ0pfYpzWAvSQ80RPq8fxz5zKE9i6w6Mf+m9S
P+4l0nSwdVqyuhL0XElDHwCoAwzgb5WcgxRx0WqG+HQAhiTrehWPg0tXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEUaC6dwDCNFiiDXDd1BhQCmqynMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR76bmhrs
5hSd8FbbEmNV5mXOO2QooABGDs47yxbGpIJrCGHvyAhkZSmeqg3cdUB5gGLVxo5X
FvVlasQJ0LyOxYhMBOptDd5WjOupwmaTCa/K8Iz8Hw4osLQJPrYlQ4f0cFKfOfFg
32KGZk7YTy0i6BGt6SeQcGCLoxatbYaByuERCKXOZLQ+OK5tPN3825i28aQ+5vWw
7kl5eJJEm8jcmHFWJbAbmHaSIAy7VDQg6OWkwi2YgveXXPlZERtpbRDzZziV8lwJ
7D/A8G9GYa3nVj7AcIYqORq70nX0smeLSfM39n/NOz+E+HldkLEeBnF6AEdaZBQj
RxKmMw8Tc436cw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:31 2026 by rpki-client