This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          PzHXIbGOqVHD2kn7H2FIlQhS7dIrub3lPq8XsUNE0ks=
Subject key identifier:   A3:50:2C:B6:57:AB:BB:F3:14:45:18:2E:CC:BA:B9:46:7A:FC:68:78
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       019BF8ACD8B2D6C5161AB77EDAB838BD2784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 05:00:35 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:35 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:35 +0000
Files and hashes:         1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
                          2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
                          3: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: ofyPUs+ysUqAzB4usrGLixnsyj3KVW57mXDdRT7sous=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:d8:b2:d6:c5:16:1a:b7:7e:da:b8:38:bd:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Jan 26 05:00:35 2026 GMT
            Not After : Jan 27 05:00:35 2026 GMT
        Subject: CN=a3502cb657abbbf31445182eccbab9467afc6878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:7e:b8:2d:81:32:2d:4e:28:43:e0:4b:5e:
                    8d:9e:97:7a:77:fd:03:a2:50:79:5f:fe:02:82:07:
                    f7:51:87:1d:95:6f:cc:9c:5a:cd:a9:10:3a:3d:17:
                    8f:c4:5e:1c:44:dd:be:bc:94:cf:6a:c8:c9:4d:4b:
                    86:97:84:e0:fe:41:f7:30:d0:ae:d8:dd:8a:9f:7d:
                    43:05:94:ab:b0:c3:09:07:ed:cc:3a:12:6d:d2:34:
                    16:b4:cc:ac:45:a4:b2:a3:f8:85:46:fa:54:8f:5a:
                    66:99:0a:e2:8e:3b:30:0b:10:de:82:ca:e0:4f:df:
                    23:45:51:3b:02:56:cf:31:a3:6d:e8:c5:36:6d:fd:
                    49:a3:40:78:7b:17:a7:46:82:9c:78:92:ad:38:c5:
                    cf:93:1a:cf:23:0f:6a:6e:91:a0:1b:95:b6:a2:df:
                    ea:e7:25:7f:ac:97:07:5e:02:af:c1:2d:bf:28:13:
                    0a:4b:c2:70:ab:51:33:d3:b5:7a:74:f4:4b:14:c9:
                    c8:06:4e:e6:8b:f6:2d:be:be:72:e6:0c:db:3d:a2:
                    88:2d:2e:d2:31:3a:60:84:f8:12:cf:56:96:3a:7a:
                    a9:1f:30:28:a9:f5:b5:22:6e:56:ed:27:c6:90:5f:
                    47:fa:15:a2:0c:94:73:93:c4:ff:f1:91:fe:08:a7:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:50:2C:B6:57:AB:BB:F3:14:45:18:2E:CC:BA:B9:46:7A:FC:68:78
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fd:45:16:0d:f2:4c:f6:b1:c4:c8:46:82:d4:eb:96:da:92:
         1b:5f:3f:50:a0:0d:19:60:b5:f8:1b:83:ea:98:0d:9e:af:ad:
         c8:63:2f:bd:8a:eb:89:4e:f2:86:03:01:91:08:e0:ad:e4:ad:
         56:64:28:3b:23:01:0d:90:d0:e8:97:e0:27:a9:86:29:e8:21:
         bd:4a:a8:ad:ab:90:a1:3f:e6:a9:13:75:5a:85:c8:5b:95:3e:
         3f:79:d2:e3:09:8b:9a:2c:30:3b:98:63:22:34:d8:ef:45:b3:
         8e:8e:a0:3b:ef:e0:0f:f7:ef:bd:48:e7:0c:cf:d2:79:2a:4a:
         d9:de:58:f8:a0:a7:83:52:99:dd:48:ae:a9:0d:a1:9f:e0:84:
         ef:05:53:25:21:b4:2d:be:21:ad:cb:b3:0f:52:10:69:a8:c1:
         aa:5d:ca:96:ac:a5:5a:53:2e:a0:8f:1c:ab:ce:09:2e:0c:09:
         5a:47:34:aa:b4:9e:38:ee:38:ee:7e:61:76:a3:78:d2:32:21:
         8a:ba:cc:27:24:37:0c:25:d6:02:88:5d:35:64:07:ad:5a:0f:
         7a:bb:2b:de:06:ad:b8:9c:73:66:8e:27:1b:9a:81:8d:a7:a8:
         4b:c5:8d:37:fb:88:20:e0:3c:b0:c5:71:54:49:88:cc:2b:fa:
         3e:7d:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:51:36 2026 by rpki-client