This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          RI3yskWq+pThGtLLLZ82M9ZRMe09rGNRVkUqCEeEZ8U=
Subject key identifier:   F2:AD:A1:DC:33:D8:72:9A:A2:55:0E:88:35:9C:14:29:3E:31:38:B1
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019BF50741033CE96FC614AC8F2D3218031F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1842
Signing time:             Sun 25 Jan 2026 12:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:51 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: Zykjge1+X/I/v4RZsjZLpXOMldz1ffPobZfB47vhg+g=)
                          3: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          4: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          5: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          6: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:41:03:3c:e9:6f:c6:14:ac:8f:2d:32:18:03:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Jan 25 12:00:51 2026 GMT
            Not After : Jan 26 12:00:51 2026 GMT
        Subject: CN=f2ada1dc33d8729aa2550e88359c14293e3138b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:4f:7b:79:26:a9:43:70:21:45:e2:e0:f4:
                    04:25:21:b5:1e:7a:a0:df:af:b6:d9:e2:f6:7b:d3:
                    35:a6:db:94:70:ca:2d:90:6a:1f:d3:9f:6c:c0:fb:
                    40:ce:85:6d:d1:82:ec:ad:0d:65:2f:c8:a6:e6:9e:
                    de:17:59:d6:b7:f2:83:c3:5f:95:17:78:aa:7c:77:
                    c0:e6:77:b4:89:13:87:eb:0d:ac:45:be:14:24:ac:
                    9f:3e:66:16:c5:dc:5b:86:02:eb:c4:92:52:b9:bc:
                    f6:64:90:0e:8f:a2:05:b2:12:37:d0:c7:ca:7b:67:
                    89:4d:3b:c4:12:e7:54:fe:94:c0:2e:e8:15:9a:5b:
                    d1:40:2e:bf:e6:cb:6b:b5:a5:28:4d:39:83:f0:8c:
                    80:e0:e8:3b:82:b3:8e:f9:bf:7e:73:bc:51:16:65:
                    da:20:15:73:22:64:f6:17:e5:26:63:57:cc:39:e5:
                    ef:85:ad:6d:cf:5d:d5:b9:b5:ac:e4:73:f2:2c:c9:
                    60:04:18:dd:c2:49:87:ef:f6:af:74:b6:d5:81:52:
                    df:e3:9c:ca:79:87:35:23:c2:69:be:17:ff:9d:93:
                    a9:d3:dd:3a:b0:42:1a:4c:82:d7:23:15:e4:bd:ec:
                    68:4c:98:8e:4c:c7:24:d2:b1:30:6a:56:5a:d6:10:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AD:A1:DC:33:D8:72:9A:A2:55:0E:88:35:9C:14:29:3E:31:38:B1
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:8c:e8:f5:6f:76:89:84:72:d0:46:ff:43:5e:cb:b6:63:
         ed:2d:f4:4d:34:d1:40:2c:2f:73:a2:75:bf:36:35:44:20:43:
         fc:71:f6:72:f5:cb:4b:16:f2:db:f6:71:8d:a3:82:9a:7b:73:
         28:95:2d:0d:1a:fe:ad:3b:2d:e0:cd:e7:f5:6f:fb:b3:76:18:
         bf:85:96:51:2e:19:af:8a:6c:9c:b5:8a:0e:ea:89:bf:41:32:
         81:6e:61:58:17:65:4e:c5:36:a1:85:fb:c7:de:17:e3:29:94:
         ce:56:d4:62:83:ef:14:90:11:28:b5:09:fe:72:a3:3e:f5:18:
         dd:04:40:f8:46:d5:ea:cf:ab:26:71:4e:c8:5f:de:25:c0:20:
         71:6f:26:9a:cd:1d:f8:18:8c:9c:58:e2:10:90:b7:29:dd:05:
         52:44:72:d3:62:bb:55:5f:15:2b:5b:97:e2:0e:26:2d:fc:12:
         42:24:1b:a3:c3:9e:3a:9c:f2:9f:75:3b:04:f7:ba:25:42:53:
         fb:b7:e9:0a:2a:05:79:66:e3:39:a3:cf:b4:96:2d:41:c0:f6:
         6b:b0:f6:fd:7e:30:d7:44:06:03:e1:a5:ee:bc:82:f4:54:57:
         de:ac:f1:0f:ac:e1:54:f9:c3:29:44:89:e2:c2:ed:b4:a8:0f:
         04:0e:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:37:06 2026 by rpki-client