This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File:                     J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier:          YrPH8Jd04UctZnlRxR50pTchMsMUbF0Ob4mwM29Qgrc=
Subject key identifier:   E4:1C:E8:CA:ED:F7:5F:1D:23:42:28:C9:F9:02:EC:47:F6:AA:30:15
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer:       /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial:       019BF650A8A0128CAB5376778212CDCADF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number:          1461
Signing time:             Sun 25 Jan 2026 18:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:39 +0000
Files and hashes:         1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: VusOJ0ZJU9YAI4xTqkZZt0YCzbJb0yVoL6qn4l+Bxe4=)
                          2: h53oA3SujEDr4ELckr6UN9W2NOk.roa (hash: EVBN35qoptKAigPRFwoWW6G0+97b+KvRqgyf+bRb3+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:a8:a0:12:8c:ab:53:76:77:82:12:cd:ca:df:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
        Validity
            Not Before: Jan 25 18:00:39 2026 GMT
            Not After : Jan 26 18:00:39 2026 GMT
        Subject: CN=e41ce8caedf75f1d234228c9f902ec47f6aa3015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:d5:fd:59:4a:98:d3:1a:07:4e:47:3f:a7:
                    95:bc:17:9f:c5:05:c3:dc:e0:4e:94:2a:ca:a2:e9:
                    0a:4c:99:91:e1:c1:91:4d:bb:ca:db:e2:c6:9e:55:
                    f9:56:b1:bb:04:55:f4:19:e7:c0:36:4d:17:df:30:
                    41:10:0c:08:70:a1:d8:74:80:4d:b7:b3:98:fb:ce:
                    81:12:67:b5:22:c9:a1:e1:16:86:ef:39:1b:77:38:
                    78:c9:d2:e5:ed:6b:1d:93:67:d7:f9:0b:11:2e:5b:
                    9e:14:d2:10:13:87:9d:84:82:13:a4:19:94:c0:18:
                    8d:7d:94:26:14:72:35:45:e7:c2:7a:de:a9:94:b5:
                    e4:a1:b2:af:63:d0:dc:5d:5c:5e:e2:2c:a6:ac:a7:
                    6d:d3:6e:fb:42:e9:f9:d7:a8:4a:5e:2b:04:5c:ad:
                    cf:bd:2f:70:52:ee:07:c7:89:57:9c:4a:34:0a:53:
                    8c:88:34:94:8c:9c:57:78:cd:11:ac:cf:14:41:71:
                    3f:18:2a:5f:a6:02:1b:7e:03:ba:5e:e9:16:8c:1e:
                    9f:12:33:06:f5:3a:9d:74:75:22:67:2e:8d:b7:4e:
                    52:95:7b:ec:07:64:a0:6d:b6:0b:c2:d4:ae:4b:de:
                    75:d3:42:2d:88:04:0b:de:82:92:a3:38:6d:a1:9f:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1C:E8:CA:ED:F7:5F:1D:23:42:28:C9:F9:02:EC:47:F6:AA:30:15
            X509v3 Authority Key Identifier:
                keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:ed:48:73:18:ba:46:00:af:60:52:62:b4:7d:69:1d:18:
         12:6f:20:d7:ab:36:1e:3e:09:fe:ac:b6:c5:ac:cc:09:6e:7f:
         b8:b5:bd:05:c1:e0:9d:84:38:33:08:46:fd:d0:11:08:37:b7:
         bd:18:08:5c:5d:d1:0f:50:66:c2:b6:f1:b1:c0:9a:1b:bc:87:
         6c:95:61:d3:9e:b6:16:19:7b:88:78:26:6d:8d:9f:2f:e1:2c:
         76:38:7c:86:87:e5:1f:bf:b9:07:1a:ea:ba:f0:eb:0b:d8:83:
         6e:26:64:8a:ea:85:12:d7:6c:88:fe:9c:47:31:57:1a:18:e8:
         81:71:c6:7a:ec:b4:2c:cc:83:6f:69:94:32:98:8b:eb:85:df:
         e0:38:66:c0:f2:80:82:ae:bd:1b:b6:1f:41:fd:f8:2b:75:7b:
         1f:86:4b:db:25:f3:ce:f3:3a:ec:9a:38:25:21:dc:d0:b8:b3:
         a9:a9:f5:f4:e3:60:f9:cf:0a:5a:47:1b:fd:ff:50:f8:8e:1f:
         c3:58:cf:dd:ab:66:75:b8:16:75:0f:e9:7f:0c:3c:bb:6c:a1:
         5f:97:d8:24:b9:6d:41:9c:cc:10:db:ed:9f:80:df:75:14:32:
         5f:39:ae:c6:a8:9b:3a:b8:f1:ed:06:ba:e0:21:3d:0a:a9:6b:
         73:e0:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:33 2026 by rpki-client