This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
File:                     jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json)
Hash identifier:          PlwMljcgU5dgy9slaXlZ3INoL+EKTeobRTZJ1fJzNJw=
Subject key identifier:   2B:A9:27:3F:65:5A:63:66:6A:62:5E:20:E7:E4:82:00:5F:CB:D0:E5
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Certificate issuer:       /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial:       019BF6BE86A8E12148DAE298521688D3A9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
Manifest number:          10D1
Signing time:             Sun 25 Jan 2026 20:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:39 +0000
Files and hashes:         1: 2dl-f-UK6z-wcsJEmLBo_kTVQA0.roa (hash: E+Lj08rzgs1LC3v6bo+hL91M0+iDXn1Q2UMdAOL8ihg=)
                          2: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (hash: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0=)
                          3: MxVivBucAENp2PAscr5joXqh_oY.roa (hash: qdH6vqEjmsgzasuWWeKuMXOT/SGrMj1v+Oi8w3/Eecw=)
                          4: PPTpKN0G94Qk3SCfG74G6E4gLdw.roa (hash: IpDfPDw0GzTAcezF6u+iyqtASEo3jItEu1XZDEJz9Yk=)
                          5: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: PyFwir32H1z+2or63A8Mg9sPX98bxSze6hEq9CNxBYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:86:a8:e1:21:48:da:e2:98:52:16:88:d3:a9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
        Validity
            Not Before: Jan 25 20:00:39 2026 GMT
            Not After : Jan 26 20:00:39 2026 GMT
        Subject: CN=2ba9273f655a63666a625e20e7e482005fcbd0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:80:c6:2e:4e:77:ee:49:5f:5d:fc:ec:9c:
                    f3:1a:f2:6e:35:07:72:eb:6e:5a:21:61:3f:74:ac:
                    e9:83:bd:fd:8a:fe:d0:30:3d:f5:e3:c8:05:ef:cc:
                    1c:1c:d0:30:60:b8:07:02:02:7a:46:8d:10:07:3c:
                    90:cf:f1:cd:fc:5d:b9:38:ba:5b:31:86:48:d5:d9:
                    3a:ae:eb:4f:22:a8:f8:d2:b7:85:3b:6d:e9:27:f0:
                    6d:6d:4d:a8:f7:bc:b2:90:79:07:60:0c:42:9b:68:
                    ac:e8:e1:42:3a:97:75:08:fe:4d:c2:e8:ac:7f:d3:
                    71:08:f3:c4:82:aa:56:fb:fb:e2:d7:50:96:12:a6:
                    68:96:fe:27:01:4c:47:bb:10:e8:b3:33:12:8e:67:
                    0b:82:4d:8a:a9:39:7a:05:65:36:11:df:1c:ed:7b:
                    ce:dc:94:ca:15:e9:ef:57:3c:a6:8d:69:2b:c4:c5:
                    34:27:9f:7d:d7:43:b6:04:a6:32:f0:6e:ca:1d:57:
                    07:a9:33:0d:46:b7:ef:10:1c:d2:48:72:8a:6d:83:
                    c6:1a:76:90:29:73:7c:60:57:2c:51:ae:3d:89:65:
                    e3:59:69:30:4f:ba:19:47:0e:5e:c9:5a:d1:25:26:
                    85:e8:26:98:81:af:1e:e7:ad:dd:f1:75:43:76:6a:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A9:27:3F:65:5A:63:66:6A:62:5E:20:E7:E4:82:00:5F:CB:D0:E5
            X509v3 Authority Key Identifier:
                keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:37:4e:d6:85:f1:b0:bd:44:5c:6f:c5:21:38:51:01:4f:74:
         a3:2e:2d:f0:3a:d2:9c:05:43:c7:df:1d:57:07:0f:6d:cf:44:
         cf:ec:30:9f:7f:71:90:33:e9:dc:41:a7:70:53:5a:09:79:22:
         f9:d6:dd:9a:a7:01:d8:ae:5a:77:19:5b:78:f1:d5:6a:91:cc:
         6c:38:48:df:3e:6c:58:ef:82:c8:2e:b5:ea:eb:d6:e9:09:88:
         22:62:59:ff:48:bd:b9:53:2c:ff:17:ea:91:44:86:fb:70:da:
         2d:6a:e2:2b:a8:86:a5:70:b5:44:db:ac:4b:32:a8:0a:96:e6:
         01:5a:7a:21:64:62:1d:59:43:fb:1c:42:76:e9:3f:aa:28:63:
         29:38:15:5d:40:62:ec:c1:e4:1b:39:45:e2:6e:e5:02:23:d4:
         2c:4b:2c:66:50:39:a7:5e:1f:51:9c:67:77:5e:7b:85:fd:fe:
         9d:f6:b2:e1:4b:d6:93:14:b0:ba:08:87:c3:8a:73:90:51:ec:
         99:a2:ec:63:61:97:b0:ce:a0:61:00:65:f6:76:d8:a9:b4:fb:
         7e:d3:4c:54:ad:a4:33:0d:03:43:aa:9c:bb:87:83:44:82:1e:
         d3:f7:92:a5:c8:d6:c7:ea:ad:37:86:e6:04:94:53:87:c2:90:
         31:f0:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:05 2026 by rpki-client