This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          +R9KvoMXaJdhC7qkkrQAh/EtD7wMTpUXWu+q4uDKES8=
Subject key identifier:   50:98:9A:1A:D8:AA:80:F6:0D:39:74:48:A6:3A:84:97:C5:05:B6:04
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       019C2D082D159BD2DD2F56FEECD6E0893DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          148C
Signing time:             Thu 05 Feb 2026 09:00:36 +0000
Manifest this update:     Thu 05 Feb 2026 09:00:36 +0000
Manifest next update:     Fri 06 Feb 2026 09:00:36 +0000
Files and hashes:         1: BDPTI5i4mKqpMJBYvSboypMMNuE.roa (hash: RTLrC8P78AL/8G7o0NMHm7j+X+zOpyoxook+7m1TQVo=)
                          2: d2KT8A8pg82saNRdGq6GRMXB3UA.roa (hash: dF7P01hXnA73GTd4pqtox0R46I5SwoggxbtIgrQCC9Q=)
                          3: rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa (hash: oMOWLalKve6BcbDPvs16UdYfNlQpBDtwtyZAEUofk5I=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: +XW1IDQakHuJfmj9Z58LwjWZ2FxOYr6AeGSswkkni5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:08:2d:15:9b:d2:dd:2f:56:fe:ec:d6:e0:89:3d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Feb  5 09:00:36 2026 GMT
            Not After : Feb  6 09:00:36 2026 GMT
        Subject: CN=50989a1ad8aa80f60d397448a63a8497c505b604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:30:96:91:a3:e0:1d:12:f6:82:ff:0e:8f:
                    64:73:b7:cd:52:3e:44:93:38:85:68:53:54:51:91:
                    22:0d:06:fa:dc:e6:a7:ba:93:38:df:59:24:f9:93:
                    4c:42:98:1a:28:56:7e:ef:3b:ad:63:7c:ef:ad:ca:
                    ef:0e:c5:3e:55:e7:9c:eb:4e:96:91:40:27:7e:d7:
                    a4:c1:bc:d5:d5:b4:71:ce:7c:37:76:6c:12:0b:fe:
                    c4:f9:ee:bf:ae:67:3e:1a:58:b2:38:07:be:34:a3:
                    9b:fe:0f:df:e9:61:98:6a:d6:71:f2:09:01:85:73:
                    1a:e4:1a:5e:01:cc:d8:6a:7f:3e:ba:98:67:22:bd:
                    4e:ea:58:11:30:86:9a:37:86:e5:e4:34:17:05:36:
                    1f:df:01:cb:8c:9c:0b:e1:22:4d:04:88:27:92:a8:
                    e4:d5:0d:8b:81:35:e4:2f:b2:29:a1:e2:78:55:99:
                    79:02:9e:dc:9b:ce:76:a9:26:35:78:7b:d3:ae:2c:
                    32:68:12:4c:19:ff:74:65:12:76:47:95:8c:1a:a2:
                    11:14:f7:8b:e9:85:1d:29:30:fd:e7:8a:c4:ed:9c:
                    d0:9a:50:53:9f:f0:e4:00:3b:44:ec:c2:26:88:80:
                    77:60:0e:ce:f5:8a:54:c2:ba:70:21:d7:21:54:f9:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:98:9A:1A:D8:AA:80:F6:0D:39:74:48:A6:3A:84:97:C5:05:B6:04
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:20:92:a6:89:b0:dc:a7:f6:f6:e2:25:e6:5d:0c:1e:92:23:
         32:6f:ea:d7:31:f1:3d:c1:cb:5c:83:02:f8:19:55:ba:ab:c0:
         16:2f:17:3f:30:4c:e6:be:b4:33:5b:ef:4e:7f:2e:2f:94:55:
         48:dd:4a:29:8d:a9:07:8c:bd:dd:dc:1a:8d:8a:80:39:68:f4:
         5c:e0:fe:7a:a3:b0:87:65:a6:58:f6:80:3b:c1:92:5e:f6:bc:
         90:bc:4c:48:e6:f2:3b:df:27:35:24:08:0f:af:14:5b:11:40:
         98:ed:fd:1f:b5:5f:f7:df:d8:92:38:ea:c4:ac:a0:cc:ff:74:
         53:06:3a:36:9d:5c:22:91:e8:5d:54:75:ab:49:dc:58:42:43:
         4f:6f:70:ad:a1:8f:59:fe:e4:f7:f4:5f:4a:2a:7c:68:fd:78:
         30:07:0d:e1:6e:18:ad:9c:da:09:c5:11:c9:29:4f:04:93:28:
         5a:2d:95:92:51:d2:54:82:16:79:22:fa:7e:df:30:30:8f:30:
         da:b7:db:a1:ba:44:1e:f1:f0:3a:2c:ff:f5:2e:31:6f:f0:44:
         f0:b9:26:ad:c8:e6:89:78:82:2a:e5:32:7b:bf:0c:ae:e5:21:
         e9:41:36:af:0b:24:77:90:55:76:f0:59:6f:6a:6c:8d:12:fc:
         c8:5c:16:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwtCC0Vm9LdL1b+7NbgiT3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi
NTU2MTgwHhcNMjYwMjA1MDkwMDM2WhcNMjYwMjA2MDkwMDM2WjAzMTEwLwYDVQQD
Eyg1MDk4OWExYWQ4YWE4MGY2MGQzOTc0NDhhNjNhODQ5N2M1MDViNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ngwlpGj4B0S9oL/Do9kc7fNUj5E
kziFaFNUUZEiDQb63OanupM431kk+ZNMQpgaKFZ+7zutY3zvrcrvDsU+Veec606W
kUAnftekwbzV1bRxznw3dmwSC/7E+e6/rmc+GliyOAe+NKOb/g/f6WGYatZx8gkB
hXMa5BpeAczYan8+uphnIr1O6lgRMIaaN4bl5DQXBTYf3wHLjJwL4SJNBIgnkqjk
1Q2LgTXkL7IpoeJ4VZl5Ap7cm852qSY1eHvTriwyaBJMGf90ZRJ2R5WMGqIRFPeL
6YUdKTD954rE7ZzQmlBTn/DkADtE7MImiIB3YA7O9YpUwrpwIdchVPmM2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCYmhrYqoD2DTl0SKY6hJfFBbYEMB8GA1UdIwQY
MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt
NzQ5N2U1YThmMTFiLzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi
LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyCSpomw
3Kf29uIl5l0MHpIjMm/q1zHxPcHLXIMC+BlVuqvAFi8XPzBM5r60M1vvTn8uL5RV
SN1KKY2pB4y93dwajYqAOWj0XOD+eqOwh2WmWPaAO8GSXva8kLxMSObyO98nNSQI
D68UWxFAmO39H7Vf99/YkjjqxKygzP90UwY6Np1cIpHoXVR1q0ncWEJDT29wraGP
Wf7k9/RfSip8aP14MAcN4W4YrZzaCcURySlPBJMoWi2VklHSVIIWeSL6ft8wMI8w
2rfbobpEHvHwOiz/9S4xb/BE8LkmrcjmiXiCKuUye78MruUh6UE2rwskd5BVdvBZ
b2psjRL8yFwWqw==
-----END CERTIFICATE-----
Generated at Thu Feb 5 19:27:47 2026 by rpki-client