This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          IQTlMo6/K/+4mTZlH16IMt5svLFbxdkOJdPh6QrZFG4=
Subject key identifier:   72:EB:E5:9E:51:4D:84:40:EA:09:02:4B:A6:05:27:90:06:A1:D3:10
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019BF4632F53C630D368523F820D17D25D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          13ED
Signing time:             Sun 25 Jan 2026 09:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:39 +0000
Files and hashes:         1: IGGsOWInx7GDiTu-4uOnz6TKF_4.roa (hash: hCa0gQemcviWEbgPvunZmS38fuAZ96Xy3vU8q4L13BQ=)
                          2: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: xP5IKA0Eh7EI9yzLatoWWvn0jt31zpTE/W7fLRjUzh8=)
                          3: i1XEOqcKBZSos8XulivRUlJPsiQ.roa (hash: +AnbBQ6xlhmmq8oeU75OadeT8SHBJxGCIHBGP6tLW5s=)
                          4: jxIzweNGbwp67oAJPrxn65prYVA.roa (hash: qci5dm1heyJtkWX1qezUrzv1Lx1lqWj4xvftYho9n2c=)
                          5: oRmOzlxkjaKvIFitB3DoJI9OFPY.roa (hash: YHu28evWYm6LA/MihdvRJT4qUDYpq3RC/bhLC2lzCms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:2f:53:c6:30:d3:68:52:3f:82:0d:17:d2:5d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Jan 25 09:01:39 2026 GMT
            Not After : Jan 26 09:01:39 2026 GMT
        Subject: CN=72ebe59e514d8440ea09024ba605279006a1d310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:a4:5f:8f:5d:af:0f:01:61:95:7c:f0:2f:
                    9b:74:e8:b3:10:19:21:22:26:9d:77:b5:f9:c5:5a:
                    3f:d2:42:ac:e3:dd:dd:ea:9c:f8:96:4f:c3:c2:e6:
                    f9:1c:1b:02:59:45:7d:d2:2b:7e:0e:67:14:fc:e6:
                    8c:93:f0:56:f6:b9:1e:01:2c:84:dc:00:d5:dc:05:
                    34:75:bc:c9:cc:e1:7f:3c:6a:ba:86:74:f7:e3:3d:
                    c4:96:51:ae:63:aa:5b:8b:1b:a8:c1:01:62:2b:8b:
                    2b:25:f3:b7:ba:3f:b7:83:87:d2:cf:24:21:5f:75:
                    8c:50:14:51:5a:2a:1c:b9:97:2b:df:df:35:89:d8:
                    c2:f3:c9:20:a0:5d:d1:f7:ac:1d:eb:10:f3:e4:c8:
                    60:25:bf:85:a4:3a:b4:7a:04:4b:25:00:eb:88:91:
                    c6:85:60:0b:b0:b6:77:b7:7b:95:73:b5:52:f9:d6:
                    15:bf:23:ed:4d:a2:e4:a2:59:cf:22:da:84:ce:04:
                    9c:43:fb:61:ac:73:49:43:9b:83:72:dd:23:bc:a6:
                    95:d3:4c:b0:ad:cf:b2:1f:d8:a0:8a:37:8d:39:65:
                    6a:c3:2b:cc:97:00:bb:90:66:97:7b:b0:61:8f:70:
                    01:d8:63:ef:df:85:ed:5c:b7:fb:f0:17:35:82:fe:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EB:E5:9E:51:4D:84:40:EA:09:02:4B:A6:05:27:90:06:A1:D3:10
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:21:e4:83:d5:aa:ef:56:bb:5f:f4:0b:e5:41:76:55:e8:43:
         60:bc:6c:6a:4f:8c:2d:3c:d9:c3:2b:32:f5:15:fd:37:82:f6:
         63:eb:94:99:91:6a:05:65:3b:58:f7:c5:b9:30:97:fb:f2:5a:
         d4:82:df:f9:7a:06:50:07:01:f8:c6:e1:ed:7b:ca:9c:e3:29:
         1f:cf:e2:ef:23:0b:57:61:6e:da:68:f5:2a:a2:19:fb:69:8f:
         e5:7f:13:f3:cc:26:56:df:e1:96:73:b0:de:07:82:cf:70:e6:
         f6:25:a8:d2:32:d7:f4:08:0f:83:7d:c7:5a:c9:8c:8c:32:91:
         c3:55:4e:a7:5a:d5:8f:1c:74:98:e6:5a:92:30:be:9a:e3:b3:
         7e:20:04:b4:78:46:df:8f:b9:12:4d:cb:15:fd:23:4f:79:69:
         a8:2d:97:70:42:40:e5:05:2d:dc:3a:4f:f2:7a:7e:65:2f:29:
         93:b8:4b:33:f6:f0:bb:99:ee:ff:66:73:b2:41:de:8d:f1:0e:
         d6:1d:80:1b:01:19:f2:aa:c7:8a:bc:16:f9:cc:f8:f3:a6:50:
         8c:5a:90:a5:f6:21:9c:dc:28:6e:1f:95:f3:1b:c4:f5:52:72:
         7d:2f:e9:41:1c:55:27:88:08:33:e8:71:73:52:4a:11:d1:d7:
         fb:23:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:44:49 2026 by rpki-client