This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          DFdAUuSnCgC06ZNahVU3ZyNrD0nYF4q+0p9Ib+luP64=
Subject key identifier:   7F:E1:26:60:81:D7:80:02:35:8A:2B:C1:31:B0:0B:0C:F1:E9:9F:31
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019BF2AAE03532BB6CE8192E221775E1C4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0EB5
Signing time:             Sun 25 Jan 2026 01:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:43 +0000
Files and hashes:         1: 1Frxfbc98CPNBXlvYxNVV4HDdfw.roa (hash: zDjUPNkwFr1cypuN/i7XmbHHkWcY1mRap2kucDPhT9w=)
                          2: 82JWIomOThmW0YMHKxDPuIJNFK0.roa (hash: hC4sRPtPg3GW3YOxAj+I1bNIwfqpwHn+ecr5wb73PWo=)
                          3: GKI0oMGPc_ao96H_Pxppo6dkqjU.roa (hash: zkKvY4dzGqAm86wlj6w2FQOXQJkkmZRclubHEKVhIrs=)
                          4: UbPR__GWgCOIAb3NQc0qlqrppxU.roa (hash: lTQfU6TbcxSvADq8zAUFbLRCThmdnW+zAxZAvDh4gWQ=)
                          5: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: wANEocENikMnuA88I770pCeeM3DOPSMfGv4m8b1X0ZI=)
                          6: mSOb8oL2yaxSaSAqBWs5Nse1M6o.roa (hash: P4pKI4jOB/owH0H61XW01BCRPQ5A8npRT1ANcLU/gqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:e0:35:32:bb:6c:e8:19:2e:22:17:75:e1:c4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Jan 25 01:00:43 2026 GMT
            Not After : Jan 26 01:00:43 2026 GMT
        Subject: CN=7fe1266081d78002358a2bc131b00b0cf1e99f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:d8:53:b8:d7:b7:e1:bd:65:82:fa:ec:b2:
                    f8:bb:f7:b0:4b:05:dc:e6:72:5e:44:f6:aa:6d:0d:
                    a8:8e:ce:23:62:d8:2c:57:e2:a5:50:41:d3:f6:d9:
                    d6:72:18:18:d4:68:73:4d:74:06:33:30:f9:5d:ee:
                    78:2c:af:a9:4b:e0:da:70:01:1b:f1:b1:5f:22:f8:
                    09:8a:70:6d:09:bc:25:eb:87:5a:97:6f:10:77:29:
                    1e:4a:13:40:f9:83:2e:42:64:92:72:60:13:a7:03:
                    95:ae:77:17:fb:a5:00:b8:72:b1:c0:d6:9b:72:27:
                    15:1d:25:e4:53:61:e1:dc:b6:ef:9f:ed:59:e6:95:
                    77:6a:e4:4b:79:83:47:34:e9:5e:5e:63:0f:9d:53:
                    17:7c:9a:bf:bb:d4:0e:44:6c:3e:8d:cf:05:9f:68:
                    12:ea:15:87:7a:ab:73:4e:b2:23:c7:fa:f7:1e:1b:
                    9a:db:34:c5:c9:71:bb:c6:33:45:7f:3b:32:1b:76:
                    60:33:7e:92:4b:a5:84:16:b6:04:d2:53:60:a7:f7:
                    21:6d:dd:dd:2f:29:b3:59:0e:2d:99:3b:12:b1:c8:
                    f2:59:49:f1:49:f2:21:f8:b7:78:8c:a8:db:0f:26:
                    f7:8a:d1:25:48:d4:9a:e8:d6:d5:ed:ac:00:00:d5:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:26:60:81:D7:80:02:35:8A:2B:C1:31:B0:0B:0C:F1:E9:9F:31
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:da:b6:99:82:a7:f7:bc:c2:02:74:fe:6b:bd:88:bd:5a:38:
         a1:1a:71:16:83:89:d4:78:cf:f1:4e:d9:e4:06:21:e3:38:7f:
         0e:91:e8:aa:aa:3a:4f:56:a4:79:91:d1:0c:ae:22:66:12:16:
         0c:86:cc:93:08:c2:c9:aa:26:ff:ef:7e:45:46:1e:8f:7b:3e:
         57:3c:90:2a:54:57:b6:d1:94:85:d3:09:20:75:09:1d:79:12:
         66:7c:f1:8a:32:ff:fd:a4:11:c8:33:a6:30:61:39:90:22:0a:
         06:56:2b:66:e7:b6:2c:0b:1a:18:93:5d:2c:96:2f:15:e9:bb:
         30:44:2b:96:93:2b:6c:28:52:5e:ef:6d:4d:d3:1a:c7:9f:a4:
         10:10:84:61:a6:e1:a8:05:fc:c3:d6:67:51:3d:ee:bb:a8:5e:
         5f:9c:5b:37:da:4d:e2:26:69:4f:f3:7c:46:09:85:2e:b6:ea:
         97:40:fa:75:52:dd:92:cb:8b:d5:c1:2e:88:52:23:d4:4b:fc:
         bc:e5:69:bf:ea:d1:07:90:6e:71:b0:a9:98:ae:01:e8:11:9e:
         54:08:57:ed:52:7d:60:36:68:66:35:c6:45:a0:2e:a3:32:8a:
         33:39:1e:66:7c:b3:13:7e:62:e0:cf:43:93:08:3e:3c:7a:14:
         af:4f:65:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyquA1Mrts6BkuIhd14cSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOTg3MDM5YjNmM2IyZGI5YjI5OGFlMGQ4ZDBlYjM0ODk2
OWFkNjIwHhcNMjYwMTI1MDEwMDQzWhcNMjYwMTI2MDEwMDQzWjAzMTEwLwYDVQQD
Eyg3ZmUxMjY2MDgxZDc4MDAyMzU4YTJiYzEzMWIwMGIwY2YxZTk5ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3nYU7jXt+G9ZYL67LL4u/ewSwXc
5nJeRPaqbQ2ojs4jYtgsV+KlUEHT9tnWchgY1GhzTXQGMzD5Xe54LK+pS+DacAEb
8bFfIvgJinBtCbwl64dal28QdykeShNA+YMuQmSScmATpwOVrncX+6UAuHKxwNab
cicVHSXkU2Hh3Lbvn+1Z5pV3auRLeYNHNOleXmMPnVMXfJq/u9QORGw+jc8Fn2gS
6hWHeqtzTrIjx/r3Hhua2zTFyXG7xjNFfzsyG3ZgM36SS6WEFrYE0lNgp/chbd3d
LymzWQ4tmTsSscjyWUnxSfIh+Ld4jKjbDyb3itElSNSa6NbV7awAANXgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/hJmCB14ACNYorwTGwCwzx6Z8xMB8GA1UdIwQY
MBaAFI6YcDmz87LbmymK4NjQ6zSJaa1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQt
NTYzNjAwMzE5YTFmLzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQtNTYzNjAwMzE5YTFm
LzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNq2mYKn
97zCAnT+a72IvVo4oRpxFoOJ1HjP8U7Z5AYh4zh/DpHoqqo6T1akeZHRDK4iZhIW
DIbMkwjCyaom/+9+RUYej3s+VzyQKlRXttGUhdMJIHUJHXkSZnzxijL//aQRyDOm
MGE5kCIKBlYrZue2LAsaGJNdLJYvFem7MEQrlpMrbChSXu9tTdMax5+kEBCEYabh
qAX8w9ZnUT3uu6heX5xbN9pN4iZpT/N8RgmFLrbql0D6dVLdksuL1cEuiFIj1Ev8
vOVpv+rRB5BucbCpmK4B6BGeVAhX7VJ9YDZoZjXGRaAuozKKMzkeZnyzE35i4M9D
kwg+PHoUr09lXQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:58 2026 by rpki-client