This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File:                     JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier:          x3R92h6wnwzjh41KWJiEAWkjDvYOaYHmvMHt/NCmR8Q=
Subject key identifier:   E8:28:26:F7:59:3E:97:08:E3:60:13:6B:A2:40:30:B5:72:5C:05:7D
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer:       /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial:       019BF79A9686BB4038E74C70CA3AD72EC0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number:          061F
Signing time:             Mon 26 Jan 2026 00:01:01 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:01 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:01 +0000
Files and hashes:         1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: 2YsinWl0QW7tUtH+54Y2X2kHc1i62wlHGNH+ZxiFwtk=)
                          2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
                          3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:96:86:bb:40:38:e7:4c:70:ca:3a:d7:2e:c0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
        Validity
            Not Before: Jan 26 00:01:01 2026 GMT
            Not After : Jan 27 00:01:01 2026 GMT
        Subject: CN=e82826f7593e9708e360136ba24030b5725c057d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:5e:5e:13:f3:ef:5a:59:36:73:61:f1:71:
                    62:d3:4f:9c:70:08:1a:95:d2:d3:d5:f1:11:95:30:
                    47:a7:52:94:d5:cb:cc:c2:f5:b4:98:86:80:74:42:
                    47:be:0f:7c:ab:fa:80:29:dd:1d:76:cf:21:a0:d4:
                    d1:78:b7:b7:62:e8:41:ad:d9:d0:26:ee:f8:3c:d6:
                    ce:27:9d:0e:03:45:f3:24:1e:eb:c0:ee:3c:db:1f:
                    33:11:a3:b9:38:a7:50:30:67:af:6c:27:d6:ca:fa:
                    1a:d1:c7:10:ee:46:6c:e2:58:05:3b:8e:95:6d:a0:
                    46:b8:3a:fe:5e:7c:30:19:d8:ac:c9:8b:8a:ae:31:
                    b3:90:8f:b7:6c:6a:59:a5:c0:fa:86:88:4d:a5:3a:
                    b9:b0:bd:01:7d:7a:4b:36:78:76:a6:b9:fd:51:01:
                    1d:b7:37:1e:75:9d:24:4c:28:4e:5a:7c:94:b4:56:
                    fa:ff:e8:d9:a7:81:01:33:3e:84:2d:17:17:1d:6a:
                    29:ee:ae:27:57:a3:5e:08:ed:e0:35:aa:9d:fb:e0:
                    a2:ed:8b:0c:92:2e:da:b8:ca:f5:14:3e:d7:86:a1:
                    fc:bc:df:c5:39:54:0a:d2:77:8c:ba:70:74:c6:6c:
                    b1:de:7a:ef:7b:ca:24:56:ba:1c:45:08:ef:9a:64:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:26:F7:59:3E:97:08:E3:60:13:6B:A2:40:30:B5:72:5C:05:7D
            X509v3 Authority Key Identifier:
                keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:7b:c8:18:21:f7:34:0a:ab:b9:2a:85:3c:85:22:46:6d:
         13:ad:d3:4b:7c:d8:41:b8:29:54:4c:8b:63:bb:76:53:95:c9:
         98:81:96:b0:4c:0a:c6:f1:4d:90:1a:eb:14:d6:ea:8c:bb:23:
         ae:ae:b9:9a:8a:7b:54:72:3c:87:72:49:5e:bb:4c:c7:58:f0:
         e3:a6:82:65:07:e0:79:99:e3:fe:f0:e4:2c:81:8e:94:66:97:
         9f:3d:cb:95:ec:f6:81:37:73:bd:9e:24:92:bd:81:fd:ed:73:
         e5:90:ce:15:44:2c:94:6b:08:f3:90:e3:e0:a6:00:b1:e0:fa:
         da:8d:55:59:13:7f:f8:2c:2c:b5:43:a5:57:77:c1:d5:56:2a:
         31:1d:f7:3a:c9:17:84:a1:28:ab:7f:dd:55:6c:60:28:0c:ba:
         05:9c:03:c5:a0:99:19:d8:4b:53:f5:51:13:b2:06:13:4a:5f:
         08:27:ee:29:ee:d8:7a:19:ed:48:a9:fd:13:86:de:1f:ce:97:
         2b:70:aa:e0:88:6b:81:9f:e2:b0:60:c5:9c:81:a4:99:44:9f:
         58:b8:a1:fc:d7:75:d5:16:f0:b5:33:c9:ec:3c:62:21:c5:b8:
         68:e6:5d:70:6f:a9:ba:81:d4:cd:6b:26:2b:02:81:86:6b:37:
         b0:19:a7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:53 2026 by rpki-client