This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File:                     JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier:          8fQ9uOcGYxT0+aNq15W7+jYuEFsuIuRVw3GKIkAo018=
Subject key identifier:   BF:8E:1E:53:52:1C:81:6E:A3:A9:A2:1B:3B:75:61:6E:DA:62:88:79
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer:       /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial:       019C4434CB021D1F642FE4884A4CAAB5E612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number:          0598
Signing time:             Mon 09 Feb 2026 21:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:36 +0000
Files and hashes:         1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: uXtszfaq+huo2VBSU+MuVbBKcE7o8fw5+isgllr2vgg=)
                          2: m1C5L7CbhAcIOumOYRBFsLzm0eE.roa (hash: SYAtLc5fN9d8S/lPjJCzeOzecwlCkRAmvHG5vPw/tRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:cb:02:1d:1f:64:2f:e4:88:4a:4c:aa:b5:e6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
        Validity
            Not Before: Feb  9 21:00:36 2026 GMT
            Not After : Feb 10 21:00:36 2026 GMT
        Subject: CN=bf8e1e53521c816ea3a9a21b3b75616eda628879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:c1:44:61:7d:3f:3f:36:c0:b7:48:3f:12:
                    39:e2:bd:96:7e:fc:1b:1b:53:42:8c:ea:e2:20:c2:
                    6e:48:98:b6:17:27:94:ab:67:a3:65:57:75:f3:d6:
                    f3:90:0e:be:8b:fa:1a:97:06:52:ff:5c:5d:9c:f3:
                    2d:a0:61:2c:49:2c:b0:86:85:5a:fc:a6:26:cf:90:
                    63:9c:7c:51:f8:07:75:9d:a1:d5:aa:e1:2a:a4:35:
                    e4:cb:ac:ee:24:60:07:fe:87:54:e8:b7:36:77:1b:
                    f1:39:fc:8a:cf:94:ca:80:7f:13:69:62:4b:29:a7:
                    2e:4e:5c:ac:77:d2:26:74:c6:e7:71:c4:77:e6:95:
                    7e:ef:21:78:94:be:f3:ef:85:f2:2b:c3:76:c3:33:
                    bb:85:74:70:5e:1a:21:d0:2b:47:e8:bd:b3:d7:29:
                    c4:f4:c5:aa:af:18:96:5f:19:97:0c:92:93:a0:eb:
                    00:c8:03:19:ca:78:8b:8b:02:8e:57:72:47:0a:35:
                    66:93:d9:a3:06:01:19:4b:f6:89:f3:09:e5:45:6d:
                    4d:2d:8e:62:0a:72:41:4b:ba:f2:d0:1d:56:49:74:
                    9f:57:ec:e6:bb:f6:c9:77:96:b1:b1:bd:ac:e7:69:
                    4a:04:27:d0:16:15:46:76:dd:1e:b3:60:99:6c:01:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:1E:53:52:1C:81:6E:A3:A9:A2:1B:3B:75:61:6E:DA:62:88:79
            X509v3 Authority Key Identifier:
                keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:80:97:03:23:c9:1a:93:2c:e5:42:fd:64:64:92:bf:6b:
         75:de:2e:4c:1a:19:0a:26:55:9b:60:63:32:e1:2f:b0:90:64:
         68:d6:70:66:79:28:30:a9:07:96:12:e6:e7:4f:91:17:db:55:
         fe:26:ca:a0:47:3b:00:a3:47:f9:39:56:8c:86:4e:3c:28:26:
         22:ec:52:57:46:23:75:e5:7b:c3:6c:e1:e5:fc:d2:22:c9:bc:
         ba:f5:16:e6:d5:fc:65:d8:8b:cf:56:00:67:93:c4:bc:4d:e4:
         62:f1:ab:e9:80:02:f5:22:10:81:77:4b:ca:f9:fd:d6:06:ef:
         09:d4:f2:07:91:ec:0b:5a:b2:74:fb:e8:7d:f7:21:4a:cd:f0:
         54:91:18:dc:f3:4c:6d:26:7d:1c:15:4c:c4:1b:29:cc:8e:10:
         07:8b:74:c6:36:71:ca:1e:21:bb:e7:9f:14:3a:fc:6e:91:d0:
         3c:76:4e:b7:cc:24:c1:ed:9d:13:85:97:d1:6d:09:71:c6:1d:
         af:41:3c:1d:75:34:e7:5d:21:23:76:15:9b:21:eb:57:94:1d:
         55:9e:87:f0:30:7d:90:9a:c7:cc:be:14:36:92:a4:a4:27:58:
         d7:b1:e8:e0:56:2e:ec:81:f2:63:fa:ef:9b:b5:71:cb:48:42:
         49:2d:7f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENMsCHR9kL+SISkyqteYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm
ZjRkMjQwHhcNMjYwMjA5MjEwMDM2WhcNMjYwMjEwMjEwMDM2WjAzMTEwLwYDVQQD
EyhiZjhlMWU1MzUyMWM4MTZlYTNhOWEyMWIzYjc1NjE2ZWRhNjI4ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPBRGF9Pz82wLdIPxI54r2Wfvwb
G1NCjOriIMJuSJi2FyeUq2ejZVd189bzkA6+i/oalwZS/1xdnPMtoGEsSSywhoVa
/KYmz5BjnHxR+Ad1naHVquEqpDXky6zuJGAH/odU6Lc2dxvxOfyKz5TKgH8TaWJL
KacuTlysd9ImdMbnccR35pV+7yF4lL7z74XyK8N2wzO7hXRwXhoh0CtH6L2z1ynE
9MWqrxiWXxmXDJKToOsAyAMZyniLiwKOV3JHCjVmk9mjBgEZS/aJ8wnlRW1NLY5i
CnJBS7ry0B1WSXSfV+zmu/bJd5axsb2s52lKBCfQFhVGdt0es2CZbAEy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+OHlNSHIFuo6miGzt1YW7aYoh5MB8GA1UdIwQY
MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt
YzA3Yjk4ZjZlNzY1LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1
LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaCAlwMj
yRqTLOVC/WRkkr9rdd4uTBoZCiZVm2BjMuEvsJBkaNZwZnkoMKkHlhLm50+RF9tV
/ibKoEc7AKNH+TlWjIZOPCgmIuxSV0YjdeV7w2zh5fzSIsm8uvUW5tX8ZdiLz1YA
Z5PEvE3kYvGr6YAC9SIQgXdLyvn91gbvCdTyB5HsC1qydPvoffchSs3wVJEY3PNM
bSZ9HBVMxBspzI4QB4t0xjZxyh4hu+efFDr8bpHQPHZOt8wkwe2dE4WX0W0JccYd
r0E8HXU0510hI3YVmyHrV5QdVZ6H8DB9kJrHzL4UNpKkpCdY17Ho4FYu7IHyY/rv
m7Vxy0hCSS1/yg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:21 2026 by rpki-client