This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          uDNSimRV4Sprg7gNnyI+uxxO3v97rpBLlxKIklc8OXQ=
Subject key identifier:   77:05:91:C4:B6:8F:A1:36:20:0C:83:6A:CF:D1:73:24:BC:3D:F3:43
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019BF53EB63CAC11970D3FD63A69C4B457E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          17FC
Signing time:             Sun 25 Jan 2026 13:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:26 +0000
Files and hashes:         1: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          2: IclPz-fZli7cIc7b8M4tFr6tV3Q.roa (hash: vEiHTipYewbkeIs3YXH2Y8E/vYyuwCaIUL976UsKXH8=)
                          3: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          4: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          5: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: o1rcDPFLTC4YQNWEH6TSPxt5UVbUiVgdvwlkTdSJozg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:b6:3c:ac:11:97:0d:3f:d6:3a:69:c4:b4:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jan 25 13:01:26 2026 GMT
            Not After : Jan 26 13:01:26 2026 GMT
        Subject: CN=770591c4b68fa136200c836acfd17324bc3df343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:23:17:fd:46:87:60:c1:66:b6:5e:e9:7f:
                    c9:88:a2:f3:9c:32:65:54:4a:35:c9:da:d2:6a:0b:
                    7b:6c:79:c0:7a:52:18:59:0b:6b:93:aa:db:db:2c:
                    09:d0:5f:ad:0e:a5:5a:81:07:b1:98:75:39:5a:58:
                    9f:6e:2c:cf:5b:f3:d9:06:44:22:9d:89:dd:1b:b8:
                    8c:c2:f5:35:6a:32:fa:1a:80:99:5e:44:ac:12:d8:
                    f0:e2:99:62:31:14:f0:54:20:c4:d8:4f:d5:fb:2c:
                    97:a7:59:c9:34:a0:c4:ac:7a:02:98:46:2f:bd:37:
                    e6:58:7b:46:9f:0d:f3:3c:ce:40:d5:03:0b:82:1f:
                    90:a8:22:f3:d5:93:97:7e:57:12:a4:89:8f:49:86:
                    15:ea:f9:62:86:6c:73:f8:17:38:85:af:33:0f:c9:
                    eb:ef:9d:b7:93:94:48:24:6c:16:e9:0e:18:33:cc:
                    3c:6c:9c:de:fd:2f:ee:60:5a:dd:83:1a:de:e4:5d:
                    bd:a1:b5:12:95:c6:53:aa:98:c2:a3:c9:75:10:71:
                    a5:3a:bb:ea:cd:8d:1f:30:d7:85:12:57:ed:fc:0b:
                    f1:fe:3b:b5:ba:a0:de:0c:23:11:58:8b:f5:41:54:
                    7a:aa:6f:fa:f2:dc:ff:fd:f7:e5:ff:59:5e:5c:57:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:91:C4:B6:8F:A1:36:20:0C:83:6A:CF:D1:73:24:BC:3D:F3:43
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:f6:20:3b:92:b8:e3:19:a1:94:50:98:d9:da:f2:c3:2f:
         c6:04:d2:ab:cb:e9:57:2d:ba:c7:c7:59:ee:a0:26:cc:ad:7d:
         85:09:83:f8:e8:41:79:a6:12:ee:a0:8e:72:f8:b4:3a:93:32:
         e6:0f:cb:c6:61:67:0a:82:32:e7:10:5b:b6:cc:bb:36:39:9a:
         ac:81:4a:74:25:c4:70:d1:29:b1:c0:08:22:46:cd:90:03:01:
         58:55:f7:f5:c7:ba:0c:8d:bf:c2:7b:d7:e7:90:8e:69:09:b1:
         4d:19:42:54:40:fd:12:ad:41:a1:fd:ae:6d:52:da:e4:59:f9:
         70:e4:97:03:46:f2:a1:bd:a5:50:c1:09:3e:93:61:ff:7a:0e:
         c2:34:18:c3:a9:ef:6a:bd:3b:4f:9a:a8:41:e0:be:28:38:e5:
         b7:d6:db:32:b6:de:34:20:7e:90:13:7d:2c:35:cb:d4:f1:46:
         41:3e:71:f6:12:67:14:30:e4:ab:c6:01:80:fc:0d:a3:99:f1:
         63:10:d3:57:42:2d:11:d6:41:15:59:39:73:29:68:e8:cf:89:
         5e:8b:a4:95:d4:fa:47:29:e4:71:fd:c5:ba:7e:43:7b:5a:d9:
         60:3e:c7:e4:8f:bb:f1:20:33:d1:f2:64:55:8e:0b:85:d2:86:
         51:bd:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:07 2026 by rpki-client