This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          UcU2jd9aO/vtl7rgaXIyX6yuzsguBvJFVPBgQ5tqzCo=
Subject key identifier:   A2:95:B1:EF:34:4B:A3:6D:9C:40:FE:2A:FF:5D:1C:CA:1A:95:94:40
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019BF38713B2C5581DFEBD371E6CB03ABCDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1787
Signing time:             Sun 25 Jan 2026 05:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 05:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 05:01:14 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          11: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          12: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: XB4SUTNWlqP4NOH50jlr4awJzR1NeaFA8DaTWBjr5ck=)
                          13: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          14: oNUyO24qjfd5xtSDIWPcDNoijxo.roa (hash: WoMYVT2feU1FlqCnW1Iw0oCuWmwfAa3ijaSrKK3RFe8=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:87:13:b2:c5:58:1d:fe:bd:37:1e:6c:b0:3a:bc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Jan 25 05:01:14 2026 GMT
            Not After : Jan 26 05:01:14 2026 GMT
        Subject: CN=a295b1ef344ba36d9c40fe2aff5d1cca1a959440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:7b:6b:b5:f1:42:a1:a0:93:26:09:6b:5e:
                    33:84:7f:26:c6:5a:09:70:bf:a0:0e:bc:01:6c:f7:
                    47:3e:90:5d:e1:53:23:76:ef:41:c9:84:1a:d8:54:
                    e2:15:a8:5b:c3:f6:9c:7f:44:c8:58:42:93:eb:a9:
                    35:a5:37:e4:11:d1:5f:4e:8f:65:cf:18:df:e2:1d:
                    eb:49:89:9e:f6:d2:62:26:d2:f4:ca:9a:2d:5e:13:
                    02:57:bb:34:6c:66:4f:0c:68:83:3f:85:5b:d8:a0:
                    d0:43:95:76:53:c5:ab:de:cd:1c:92:e0:37:11:0c:
                    9f:01:40:d3:89:07:14:a7:9e:47:9c:d1:42:09:dc:
                    83:ae:19:80:89:dc:29:a6:07:85:be:3a:62:02:65:
                    6c:ee:76:db:bd:c0:ab:f4:b7:4f:f3:64:12:80:51:
                    2f:94:e6:c1:c7:c0:9d:03:df:af:23:de:a1:f6:43:
                    b7:61:1b:28:c7:82:6d:98:db:6d:b3:23:3f:a2:4d:
                    db:1c:15:92:f9:dd:b0:48:5e:fd:03:fb:a0:b2:bd:
                    52:45:cb:f0:f9:60:df:11:40:ec:b3:a6:01:41:76:
                    4f:15:2f:38:0e:aa:01:ec:51:ae:e6:eb:90:a3:98:
                    9a:e6:e8:ed:c3:96:58:e0:b9:a5:36:a8:6b:f2:df:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:95:B1:EF:34:4B:A3:6D:9C:40:FE:2A:FF:5D:1C:CA:1A:95:94:40
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:79:55:af:0d:7f:f8:2b:09:7b:ab:ca:4c:0c:c6:24:ff:
         74:36:56:f6:44:da:f6:79:8a:8e:32:6c:7c:56:8d:78:38:54:
         4d:da:66:96:90:ff:8d:6f:95:36:6d:15:ff:38:b7:f6:3a:2e:
         da:fa:cb:d9:3e:8b:c4:7f:7d:52:6e:be:3c:5a:e4:a9:d2:5b:
         d7:b9:83:13:2b:79:d2:08:a8:02:62:8b:c5:a8:fb:18:10:65:
         d0:26:64:91:16:9b:fe:a4:2d:5f:08:90:cc:a6:7f:af:fc:4e:
         91:2c:6a:9f:60:96:ba:47:73:86:e9:0b:a3:de:8b:3c:6e:f8:
         09:2a:fc:b0:f8:e3:3c:73:29:fa:6c:35:f4:22:b5:56:fd:d2:
         ca:61:5c:3c:bb:fb:bb:74:25:c1:d6:84:8e:72:6c:2a:90:20:
         e2:78:74:98:a3:60:f8:4f:49:3a:e7:80:87:ae:af:82:55:b1:
         d1:7b:9b:99:e6:48:79:89:38:60:7d:ec:60:0d:d1:88:da:a2:
         1f:c9:88:04:19:25:97:ed:74:66:19:a9:a7:aa:73:11:6f:2f:
         b2:9b:65:3b:fc:6c:47:17:e0:c7:c9:4f:1b:df:0e:1f:0b:62:
         79:96:0f:1d:c1:62:0b:c3:1b:48:e3:16:44:05:e6:19:c4:e0:
         23:44:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:23 2026 by rpki-client