This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File:                     JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier:          gUiXgY5uBVyg6DJUufU4frxxd3hSz5A6PMpROYRwhtw=
Subject key identifier:   20:13:CF:B2:D4:2C:B5:20:43:5D:04:3C:76:D5:44:B4:7D:A8:66:33
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer:       /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial:       019C41338BC6ED009E7BCF053AB0620B2F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number:          17A0
Signing time:             Mon 09 Feb 2026 07:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 07:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 07:00:22 +0000
Files and hashes:         1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
                          2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: qxvsqPNudrsxV8tvg8X2XnlHQjn7IXLr+F1vv7eYsqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:33:8b:c6:ed:00:9e:7b:cf:05:3a:b0:62:0b:2f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
        Validity
            Not Before: Feb  9 07:00:22 2026 GMT
            Not After : Feb 10 07:00:22 2026 GMT
        Subject: CN=2013cfb2d42cb520435d043c76d544b47da86633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:e1:84:6a:7c:af:1a:5a:bc:22:c4:a5:c6:
                    a4:a2:33:46:3e:ed:36:2f:48:27:46:64:fd:18:e3:
                    87:03:c2:29:3e:89:ab:62:6f:65:c0:26:36:b6:55:
                    b4:36:a7:b4:c9:ce:06:22:42:d9:d0:94:95:b3:4f:
                    b8:4d:fa:37:ca:b1:50:6a:5b:93:96:ed:c8:d7:1e:
                    2a:1f:60:d8:5c:cf:ed:ad:54:1d:3f:2a:c4:3c:56:
                    ca:62:12:3b:80:bf:2d:f0:bb:f5:c1:02:f6:c7:b2:
                    10:51:7a:be:6d:42:33:96:99:f5:05:28:cd:e2:29:
                    81:f8:96:de:85:46:a9:c3:c6:6c:33:05:46:61:55:
                    88:fa:87:ab:94:fa:66:1f:51:31:04:58:e9:70:45:
                    62:bf:47:13:09:20:78:77:e1:8a:97:6d:63:e8:41:
                    2e:e4:81:3f:a9:fc:91:aa:36:a9:2c:9a:b4:90:6c:
                    df:92:ca:a2:51:72:3b:6e:d1:c5:93:45:4d:0e:c3:
                    e5:80:16:d9:18:52:8b:a5:b3:92:e6:cf:b7:2d:42:
                    dc:2e:7f:cd:32:d2:29:08:eb:13:ce:7c:e1:2f:f0:
                    0d:44:d1:59:8d:26:90:74:47:ec:5a:b5:d7:42:35:
                    09:83:eb:a8:de:ed:64:b6:d3:3c:c6:c5:1e:ec:40:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:CF:B2:D4:2C:B5:20:43:5D:04:3C:76:D5:44:B4:7D:A8:66:33
            X509v3 Authority Key Identifier:
                keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:1a:99:39:00:e2:dd:f1:d7:db:93:04:80:16:a8:b2:c1:c9:
         17:e2:3d:a7:bb:6c:f6:f3:62:bf:d4:7a:db:50:c8:43:8a:4b:
         b6:7a:4a:f2:67:df:bf:cd:9f:b9:25:23:64:34:20:9f:84:eb:
         8e:d6:c1:09:fd:8c:ab:2b:9a:03:6f:5e:1a:a1:75:5e:0c:82:
         9f:a1:64:e9:51:88:01:97:5e:80:d6:2f:49:6c:83:b5:c9:85:
         1d:73:96:79:2c:95:fe:a5:37:f3:ac:00:ab:be:70:75:08:6b:
         a0:21:30:5a:64:34:b6:b8:6b:17:ae:2d:9f:9d:16:61:18:ea:
         be:dc:01:17:e6:ce:1c:80:61:b1:a5:b6:58:5c:8f:f7:cf:c9:
         c5:b4:9e:24:5a:ac:7f:87:2b:08:a9:a3:a0:94:2f:fb:a0:87:
         cc:7d:18:6b:4a:82:3d:47:d1:1a:9f:5d:c1:73:a5:76:da:4d:
         2f:2e:dc:c4:6c:67:49:de:ed:2c:64:1c:74:27:d8:26:fb:ff:
         a3:1c:dc:4f:34:8b:74:6d:76:15:b3:37:60:15:51:11:76:30:
         ee:37:cc:fb:9f:b7:29:6e:05:3e:da:76:26:f0:22:b5:e0:d4:
         6f:3e:47:87:f9:42:55:da:97:63:6c:49:5c:c5:f8:84:42:c6:
         89:3e:5e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM4vG7QCee88FOrBiCy8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh
ZTA2MGQwHhcNMjYwMjA5MDcwMDIyWhcNMjYwMjEwMDcwMDIyWjAzMTEwLwYDVQQD
EygyMDEzY2ZiMmQ0MmNiNTIwNDM1ZDA0M2M3NmQ1NDRiNDdkYTg2NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPbhhGp8rxpavCLEpcakojNGPu02
L0gnRmT9GOOHA8IpPomrYm9lwCY2tlW0Nqe0yc4GIkLZ0JSVs0+4Tfo3yrFQaluT
lu3I1x4qH2DYXM/trVQdPyrEPFbKYhI7gL8t8Lv1wQL2x7IQUXq+bUIzlpn1BSjN
4imB+JbehUapw8ZsMwVGYVWI+oerlPpmH1ExBFjpcEViv0cTCSB4d+GKl21j6EEu
5IE/qfyRqjapLJq0kGzfksqiUXI7btHFk0VNDsPlgBbZGFKLpbOS5s+3LULcLn/N
MtIpCOsTznzhL/ANRNFZjSaQdEfsWrXXQjUJg+uo3u1kttM8xsUe7EAS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCATz7LULLUgQ10EPHbVRLR9qGYzMB8GA1UdIwQY
MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt
NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk
LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxqZOQDi
3fHX25MEgBaossHJF+I9p7ts9vNiv9R621DIQ4pLtnpK8mffv82fuSUjZDQgn4Tr
jtbBCf2MqyuaA29eGqF1XgyCn6Fk6VGIAZdegNYvSWyDtcmFHXOWeSyV/qU386wA
q75wdQhroCEwWmQ0trhrF64tn50WYRjqvtwBF+bOHIBhsaW2WFyP98/JxbSeJFqs
f4crCKmjoJQv+6CHzH0Ya0qCPUfRGp9dwXOldtpNLy7cxGxnSd7tLGQcdCfYJvv/
oxzcTzSLdG12FbM3YBVREXYw7jfM+5+3KW4FPtp2JvAiteDUbz5Hh/lCVdqXY2xJ
XMX4hELGiT5eow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:43 2026 by rpki-client