This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          VAFYQhNwGh9Qmccz8lxPOiPy7KsGFP6VSqxO7hAnecg=
Subject key identifier:   B4:1C:B5:93:B7:3C:BD:E4:68:F9:C4:95:F2:0A:5C:EC:C9:D5:B6:CA
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019BF6F5A6976F16C772961ABB462F427ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1843
Signing time:             Sun 25 Jan 2026 21:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:52 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: OGcOXla9XvslBx9Z783enqkcrNl+LSeY4ieKQiMXFB4=)
                          3: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          4: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          5: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          6: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:a6:97:6f:16:c7:72:96:1a:bb:46:2f:42:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Jan 25 21:00:52 2026 GMT
            Not After : Jan 26 21:00:52 2026 GMT
        Subject: CN=b41cb593b73cbde468f9c495f20a5cecc9d5b6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:a0:30:60:31:d3:18:ec:11:05:bd:ee:98:
                    4b:cf:87:2c:40:c5:33:41:e8:71:f5:5a:04:96:4f:
                    fe:bc:4b:f9:ba:e8:f1:cd:32:1a:70:5a:37:31:55:
                    32:79:05:9a:fa:55:f9:19:24:f5:05:c9:ab:6c:db:
                    26:5d:6b:4b:e1:16:f6:b3:96:a3:e5:cd:20:81:23:
                    36:8d:f3:c6:ac:7a:c9:56:28:47:b4:b0:33:72:42:
                    af:9c:e7:eb:90:b8:3d:46:76:34:98:51:f2:97:6a:
                    b8:eb:22:68:7e:d5:34:6e:0f:00:b2:d6:5e:eb:26:
                    c1:c8:d6:93:f8:f2:bb:89:4b:86:8a:b6:65:49:40:
                    3a:97:fc:3c:58:cf:72:84:f5:48:3a:e3:7a:72:a5:
                    5a:73:59:49:c9:e0:b6:f5:62:7e:65:2a:ba:32:b9:
                    03:3c:06:ee:7f:61:8f:b3:8f:e7:a6:92:5b:ea:3f:
                    b1:15:d2:ac:28:24:06:36:23:41:d5:bc:c3:a2:d4:
                    52:c2:fb:21:29:88:4e:07:53:ee:5b:77:de:8c:a0:
                    40:5d:c6:c0:dd:c6:b9:f8:3d:38:54:31:09:db:69:
                    50:f5:7b:44:43:9a:ee:f2:39:f4:f2:73:83:41:a4:
                    01:76:b9:aa:51:6c:28:57:b1:71:c8:56:74:24:2a:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:B5:93:B7:3C:BD:E4:68:F9:C4:95:F2:0A:5C:EC:C9:D5:B6:CA
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:d7:37:63:91:0d:3d:a1:a5:ff:68:b9:54:ba:8c:e7:ca:
         39:1e:7f:20:82:b2:e2:f6:d3:9d:b3:45:06:a0:e9:41:52:a7:
         ca:c5:2e:9b:7c:83:14:ad:b0:36:7e:a4:b7:26:c7:1f:7c:28:
         04:77:11:5e:bf:d0:e0:bf:b3:e6:f8:1e:45:de:40:f7:d5:d0:
         9b:cf:a3:8f:1d:6d:f2:2f:e7:b8:1e:69:80:ef:6d:78:cb:f9:
         16:8e:a4:74:24:1d:a7:a4:93:76:28:c6:54:1f:ed:44:c4:96:
         3a:0e:f0:d5:a6:89:1c:20:5c:9a:96:20:df:45:83:6e:f0:e7:
         c2:8f:a2:b1:e7:df:69:75:80:8d:5f:e8:8d:a3:16:47:02:e6:
         ff:23:ad:64:34:77:18:6f:41:6a:72:52:a2:09:55:c0:d2:bb:
         39:6e:bc:f7:78:d2:f2:fc:89:c6:0b:bd:a9:dd:c0:73:48:f0:
         95:79:05:22:79:93:7a:a7:7d:7f:bf:c1:e9:c7:6b:70:7b:24:
         ba:f6:b4:1b:24:68:71:0c:81:1e:b0:fa:95:68:d7:38:1d:01:
         35:96:a9:96:10:9c:40:da:39:5d:5a:7a:df:51:b4:18:27:59:
         03:a3:27:1c:bd:cc:ff:e0:59:39:2f:b3:58:83:eb:d0:cb:43:
         4c:db:85:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29aaXbxbHcpYau0YvQn7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YmE0ZjUyYWMxYmUwNzU1ZDM0YmM1NDgzYzA2MWJkZjI5
MzQ0N2UwHhcNMjYwMTI1MjEwMDUyWhcNMjYwMTI2MjEwMDUyWjAzMTEwLwYDVQQD
EyhiNDFjYjU5M2I3M2NiZGU0NjhmOWM0OTVmMjBhNWNlY2M5ZDViNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylOgMGAx0xjsEQW97phLz4csQMUz
Qehx9VoElk/+vEv5uujxzTIacFo3MVUyeQWa+lX5GST1BcmrbNsmXWtL4Rb2s5aj
5c0ggSM2jfPGrHrJVihHtLAzckKvnOfrkLg9RnY0mFHyl2q46yJoftU0bg8AstZe
6ybByNaT+PK7iUuGirZlSUA6l/w8WM9yhPVIOuN6cqVac1lJyeC29WJ+ZSq6MrkD
PAbuf2GPs4/nppJb6j+xFdKsKCQGNiNB1bzDotRSwvshKYhOB1PuW3fejKBAXcbA
3ca5+D04VDEJ22lQ9XtEQ5ru8jn08nODQaQBdrmqUWwoV7FxyFZ0JCpErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQctZO3PL3kaPnElfIKXOzJ1bbKMB8GA1UdIwQY
MBaAFCS6T1KsG+B1XTS8VIPAYb3yk0R+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEt
YmY1OWZjMWNiMjZkLzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEtYmY1OWZjMWNiMjZk
LzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8DXN2OR
DT2hpf9ouVS6jOfKOR5/IIKy4vbTnbNFBqDpQVKnysUum3yDFK2wNn6ktybHH3wo
BHcRXr/Q4L+z5vgeRd5A99XQm8+jjx1t8i/nuB5pgO9teMv5Fo6kdCQdp6STdijG
VB/tRMSWOg7w1aaJHCBcmpYg30WDbvDnwo+iseffaXWAjV/ojaMWRwLm/yOtZDR3
GG9BanJSoglVwNK7OW6893jS8vyJxgu9qd3Ac0jwlXkFInmTeqd9f7/B6cdrcHsk
uva0GyRocQyBHrD6lWjXOB0BNZaplhCcQNo5XVp631G0GCdZA6MnHL3M/+BZOS+z
WIPr0MtDTNuFuQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:20:52 2026 by rpki-client