This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          +EynlL5qzIB1meJ0Jlxzs1Du54qqRkbanPC9G0CsBmw=
Subject key identifier:   8D:36:8E:E9:D8:19:A6:1E:97:67:AD:AB:D7:4E:02:34:FD:F7:01:30
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019BF6BEB66C630C9626CE2D38A64C943383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          17EF
Signing time:             Sun 25 Jan 2026 20:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:52 +0000
Files and hashes:         1: 15RDhqpZZkgsTOPSNsBqQRpBKw0.roa (hash: y1ueTNG9EINspskOLQGA36UFgKcaoRxo8MZbGAJPhNA=)
                          2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: Xu2CPtoi410oYNaY0JIpVkjVt5yHd6OlnG+bmj6OHg8=)
                          3: eTMwYXEU18649L8hIZfY5-esqZ4.roa (hash: k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=)
                          4: hF8yqCHkZwt2QupwISMQn51KxH0.roa (hash: g4ZFxLc8VwmCSXJMAIu9zpO4JxsHcdS8GLLEWM06EHE=)
                          5: vxmucN7MwfwY4O7KULCcco-LMOo.roa (hash: LM+EAvwg71ia09ADFWQH++Rcqy8ftQKjbv/gLajVj5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:b6:6c:63:0c:96:26:ce:2d:38:a6:4c:94:33:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Jan 25 20:00:52 2026 GMT
            Not After : Jan 26 20:00:52 2026 GMT
        Subject: CN=8d368ee9d819a61e9767adabd74e0234fdf70130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:b4:99:0b:ec:ed:df:27:b2:f6:76:15:4f:
                    ae:2f:95:81:66:9f:ec:76:45:70:b5:46:ce:a0:f0:
                    9f:3b:b5:0f:85:3d:4d:73:4e:48:28:67:fe:bb:61:
                    6d:75:5a:dd:e4:fa:ad:62:00:4d:b8:5c:1c:b1:e6:
                    c4:b2:3b:3a:be:12:96:9e:be:47:a7:00:53:8a:9c:
                    36:32:94:5c:b7:56:df:98:f7:f8:78:1e:5e:5d:b6:
                    08:3e:4b:84:82:99:4b:8e:ad:3d:55:d4:76:44:02:
                    30:e8:4e:6a:23:cc:88:34:b5:59:f0:0f:f6:b2:5f:
                    dd:01:e9:70:6d:db:84:2a:6d:89:5a:3f:de:89:ec:
                    fe:36:48:0b:15:4e:cc:f4:59:00:93:77:17:f7:e9:
                    db:9a:52:c9:18:d9:af:1d:18:0c:0d:81:16:d3:66:
                    a0:a4:a9:21:ed:50:c3:90:fe:ea:21:bc:93:bd:6c:
                    fe:71:f2:15:3f:cb:a2:7e:2f:18:0f:05:14:10:4b:
                    a0:4c:54:39:75:09:48:67:07:5e:e2:a4:3c:c4:2a:
                    a2:80:6f:1a:cc:31:b6:59:7d:d0:ec:72:ba:51:d8:
                    1d:bf:ae:f1:67:74:e9:3a:78:13:67:ce:d6:97:5b:
                    c4:1d:a4:7b:0f:01:b9:ab:2e:b2:9e:6e:2e:4e:17:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:36:8E:E9:D8:19:A6:1E:97:67:AD:AB:D7:4E:02:34:FD:F7:01:30
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:bc:6e:0a:b2:87:4d:ff:cf:f8:c9:40:df:34:2a:d6:df:
         d2:63:f4:a3:21:90:89:c7:34:f1:c1:81:3e:f3:f5:22:e7:5b:
         75:ce:8b:8d:88:57:be:1d:7f:64:55:28:ac:6c:e1:39:ea:be:
         ec:7a:ff:7d:e5:ef:78:bd:c7:f6:45:b3:13:df:b1:bd:65:6d:
         ef:b5:fd:6b:78:f7:3c:9e:e9:e3:46:e2:d8:61:41:01:32:45:
         14:f0:50:79:4d:43:81:bd:7a:c2:ce:7d:9a:38:2f:5c:6f:c2:
         ca:b5:74:14:92:49:ae:a1:2e:65:5b:23:29:99:f0:c4:b1:22:
         d9:6b:34:5c:b9:d0:e4:ea:86:45:59:24:3c:c0:04:7d:5b:fd:
         b2:06:57:f0:53:6e:49:81:af:1d:f0:46:cf:04:43:80:ec:b1:
         c2:ce:1b:5a:4d:5e:3e:4f:6c:ca:5e:5c:8a:eb:6b:8f:46:40:
         10:b2:3f:1c:2e:10:16:ae:fa:d3:e5:0a:d9:92:a0:a5:8e:14:
         b5:c8:ed:3c:04:2b:90:eb:21:0a:3d:22:6d:61:4d:42:3e:73:
         72:14:47:04:0a:2a:dd:a2:f7:5d:a7:b9:6a:58:80:f9:e0:29:
         0f:7e:6c:17:ba:aa:88:94:29:bd:75:61:ab:56:c9:25:16:f7:
         f0:10:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:26 2026 by rpki-client