This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          uHlcnnpdjG3SCNodkQbfGtW7dKaiTM4tNfYwwVPZ4hU=
Subject key identifier:   46:54:84:05:2F:04:43:32:99:3B:B8:1F:DF:B7:61:D1:9A:04:53:EC
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019BF72DB17540B1B25EDDF6F215E338168B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          07FB
Signing time:             Sun 25 Jan 2026 22:02:05 +0000
Manifest this update:     Sun 25 Jan 2026 22:02:05 +0000
Manifest next update:     Mon 26 Jan 2026 22:02:05 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: 9APm1aegduP7x/ijKNLYjsWnX6ruem1iyw3MN72PcTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:b1:75:40:b1:b2:5e:dd:f6:f2:15:e3:38:16:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Jan 25 22:02:05 2026 GMT
            Not After : Jan 26 22:02:05 2026 GMT
        Subject: CN=465484052f044332993bb81fdfb761d19a0453ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:e3:57:c4:89:b3:f7:83:bf:e8:3a:29:0b:
                    56:61:a6:1d:29:2c:b1:cc:55:af:37:4d:52:c2:83:
                    87:67:6a:b9:c8:fd:3e:c6:6d:e0:05:f5:23:1a:99:
                    51:89:80:ee:a4:63:1b:05:a4:08:2f:61:6c:08:c1:
                    ff:bd:ec:8e:23:2e:bb:02:2b:55:71:db:a2:a0:3d:
                    eb:e2:63:11:92:79:a9:09:0a:c6:3e:1e:1e:ab:e7:
                    8f:e6:eb:48:5d:9c:31:3d:e0:cc:58:bf:21:ee:79:
                    37:53:dc:7d:28:04:9f:e4:3a:fb:25:a1:78:84:e1:
                    2c:fe:e6:68:40:99:1c:7c:48:f2:00:33:23:41:79:
                    21:f7:ef:1b:8e:b0:95:5f:3f:a2:7c:be:79:47:37:
                    ae:b5:e8:b6:93:69:b1:51:97:e0:6f:b2:13:38:4c:
                    fc:85:9e:21:2b:59:bb:b2:94:45:9c:c4:d8:cc:62:
                    99:3b:63:4b:45:32:8c:a4:ff:5b:31:2c:be:df:7d:
                    32:c6:f9:67:94:99:94:da:83:88:9e:2e:e2:86:a7:
                    62:c7:3d:05:56:fb:05:74:56:45:db:40:53:cd:df:
                    78:35:88:c2:bf:53:f9:2d:b7:8c:92:ec:09:b7:64:
                    2e:56:36:45:ba:08:39:53:20:b9:02:ec:35:d0:44:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:54:84:05:2F:04:43:32:99:3B:B8:1F:DF:B7:61:D1:9A:04:53:EC
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:a9:21:ae:e5:69:16:8c:80:84:eb:d3:70:5a:e6:0e:24:
         ed:e5:96:71:28:a3:69:2e:61:42:25:71:57:c7:85:8a:82:94:
         3b:91:49:3d:8d:7b:ed:22:4a:e0:c1:b3:95:91:d1:f8:05:a5:
         ca:4d:7b:60:da:15:4f:6e:3e:c7:b9:aa:65:95:8c:18:8b:79:
         8e:40:92:cd:47:e0:e8:82:49:b6:e2:09:7f:df:2a:40:49:b0:
         18:63:d2:bb:f4:0c:d0:48:75:5a:59:b0:6c:c2:05:c8:a3:63:
         e1:f9:40:d3:9e:90:5b:44:9f:90:5d:7d:a3:6d:1c:37:a6:81:
         c0:f5:8f:97:bc:78:8c:df:b3:ad:7f:2a:d2:8b:bd:56:0f:c3:
         33:d1:ab:c2:0e:8a:77:46:03:ff:bc:35:0c:0c:bb:dc:4d:29:
         91:0a:c7:3d:30:e2:27:9e:9c:4a:50:cf:f5:2a:0c:ca:55:d2:
         6a:b0:57:aa:3a:b8:27:aa:23:ff:92:78:95:08:96:44:ec:29:
         1b:29:9b:82:85:43:70:ef:07:93:c9:de:b4:2e:99:37:ed:16:
         d7:54:1a:74:d2:c4:49:b1:a5:71:98:04:23:21:17:93:d8:21:
         1c:00:b9:ec:df:88:26:3d:ec:20:56:3d:3d:57:49:53:00:6f:
         de:e4:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:30 2026 by rpki-client