This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          uvTAMB/L9u0xcxmsTqSI3NQc3jz1jvAQUunHr1kKS/8=
Subject key identifier:   22:B1:D4:9A:00:9B:D5:8C:F8:88:3E:FC:28:89:D6:FB:80:8E:0C:7C
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       019BF318D6BD6384B7E5E4949E4B056C2131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          101C
Signing time:             Sun 25 Jan 2026 03:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:49 +0000
Files and hashes:         1: DShqO0Ue11GUy5d8RFMckaCauhk.roa (hash: PD8/R6zXgkXFWzaUz+2PUMdYJX3ZY2n+651dnXziaN8=)
                          2: HhUP9V6D6eMcyfe9trO5RFkUgrk.roa (hash: dLLQt7TFTOMK0HJ6sdmoFfSXq6h2xikykKO4e94KISk=)
                          3: KvYzATzwIL9g-iqhBKjN6pRQns4.roa (hash: Bq4sJCKB4JPFIy91hhv99d4z3fVb9NtKRyY/klM1Ank=)
                          4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: gwcP4DHcnQ+1QEaFlMTTIz1bNhaChCnaJHg0k8xbInQ=)
                          5: vKntuT3xVwdgWmZ3-NPNbmwYIuo.roa (hash: i9XFeCZuakWWqMNbjgXUo7/eL4g2IBgqmIa52Z/2v4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:d6:bd:63:84:b7:e5:e4:94:9e:4b:05:6c:21:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: Jan 25 03:00:49 2026 GMT
            Not After : Jan 26 03:00:49 2026 GMT
        Subject: CN=22b1d49a009bd58cf8883efc2889d6fb808e0c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:0f:83:c7:89:bf:b7:a2:d1:75:8c:ef:5e:
                    de:8b:df:eb:ea:82:c3:e9:a6:58:dd:bd:e8:f8:ae:
                    9b:02:40:ce:b3:a5:75:30:8f:04:f9:89:e6:93:5c:
                    17:83:87:6d:cb:9b:37:00:0e:b1:cd:0a:5d:68:de:
                    8d:3b:55:d1:bd:d6:f2:09:98:5a:4c:ac:c5:63:5d:
                    81:f6:b3:1d:2f:93:c5:9b:0d:28:d6:15:91:fc:48:
                    e2:91:69:35:70:99:eb:c2:4c:69:1c:cb:cd:87:c1:
                    8c:48:e5:87:1d:15:1e:19:c3:b6:a4:cb:41:f6:dd:
                    83:8f:af:99:1b:54:d6:a7:af:38:23:14:f3:e5:e8:
                    ad:2e:96:77:a2:e0:37:9e:0b:d8:74:9b:ca:19:ef:
                    53:1b:20:d7:17:ad:9f:ed:97:4b:1e:db:78:b5:36:
                    da:fe:6e:fe:4e:47:ce:c1:db:b0:41:a4:99:4d:00:
                    d4:d5:46:49:c2:c1:ab:f5:d4:84:2f:3e:8f:b8:a7:
                    8b:06:c5:4a:c3:a9:8d:69:37:92:55:ac:c4:51:57:
                    8a:43:2a:b0:2d:40:10:aa:cc:f5:6b:41:05:70:de:
                    a5:ff:39:17:38:d6:ac:f5:0c:ca:e9:7c:0b:04:9e:
                    d4:b1:73:5c:f2:6c:e5:88:aa:29:50:bf:58:bf:7c:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:D4:9A:00:9B:D5:8C:F8:88:3E:FC:28:89:D6:FB:80:8E:0C:7C
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:cf:0f:f1:65:8a:02:aa:c7:86:ed:36:2d:46:ba:56:87:
         8d:d0:ee:36:47:90:39:41:c2:6d:c0:07:a2:6c:f1:26:a4:53:
         b0:61:dd:26:ea:93:59:96:26:34:26:d9:d1:f1:91:b2:be:bc:
         57:b1:fa:cf:fc:c9:80:6b:1e:65:7a:a6:e1:66:d6:22:d4:2e:
         fa:5e:b5:ed:bf:bd:8e:5d:3c:ad:53:71:a1:ea:21:74:1c:29:
         79:c3:b1:f2:29:de:c6:d6:f8:16:1e:46:6e:68:3a:f3:c4:95:
         a1:b6:1d:c7:0b:8f:97:2b:a7:1a:39:64:e2:ef:1c:c2:4f:40:
         26:cd:f5:c4:d3:79:6f:75:c2:f6:41:16:76:f5:07:38:64:3a:
         94:80:e9:11:db:9b:37:19:99:ca:0e:7a:eb:cf:c9:75:c6:15:
         43:f1:14:b3:9c:99:36:6c:3c:e9:de:85:be:7d:54:77:89:79:
         9b:d8:cb:50:11:8a:86:32:49:22:eb:b6:a2:b6:46:e9:69:77:
         81:9c:9c:68:d9:83:b8:e5:b2:a5:7c:64:9d:a0:ec:4f:8f:4c:
         35:38:8f:f0:09:b3:bf:9d:67:a4:ee:71:9a:d9:19:9d:77:fb:
         23:06:98:6c:9e:a7:57:9c:4b:ff:23:26:61:dd:0e:7a:52:8d:
         24:87:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:28 2026 by rpki-client