This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File:                     JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier:          e3NxT0SibbT2GqaEkFFSSwVzqpntSrvBgv+oPasFiAg=
Subject key identifier:   A8:C7:0A:EF:2B:4E:EE:69:A2:4A:2D:70:E8:DA:16:46:64:4A:32:3A
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer:       /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial:       019BF91B3AADC3A9CAE63063661B7BB6D31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 07:01:09 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:09 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:09 +0000
Files and hashes:         1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: s0yxlalkhSk2vfnTDe/wMSrCTQzZgOzBe/SKIZZykmE=)
                          2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:3a:ad:c3:a9:ca:e6:30:63:66:1b:7b:b6:d3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
        Validity
            Not Before: Jan 26 07:01:09 2026 GMT
            Not After : Jan 27 07:01:09 2026 GMT
        Subject: CN=a8c70aef2b4eee69a24a2d70e8da1646644a323a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:3a:56:c2:ce:2a:03:3e:0a:3c:74:0e:b4:
                    b9:8c:b3:fd:1b:29:95:e6:a2:bf:4c:62:80:f7:24:
                    88:d6:7f:24:4e:63:d1:8d:bc:e7:01:00:5d:f0:c4:
                    cc:49:19:c5:77:8a:53:2c:61:48:23:ac:b7:14:0c:
                    02:47:bd:52:ae:06:fd:7c:95:85:af:96:17:69:3c:
                    78:a9:41:ba:1f:6b:ed:ec:45:00:75:8a:38:eb:4f:
                    5a:96:8c:f7:d2:ec:ce:ae:8c:df:fe:48:c1:d8:42:
                    8d:68:3d:15:a1:f1:09:37:e2:9a:94:4e:ac:4a:56:
                    fd:f6:03:0f:03:17:8b:d9:68:ee:ec:f7:42:60:4f:
                    56:71:24:97:6b:18:9c:15:4f:ab:29:7c:65:d4:fa:
                    73:10:cc:0f:e6:55:d1:ad:53:c1:63:66:02:63:21:
                    d6:7f:f4:11:b1:e9:14:18:00:1b:ae:21:2f:26:aa:
                    ab:d4:33:64:fe:60:c1:9a:7f:84:8b:6d:23:f4:5f:
                    5d:28:ad:14:c1:72:56:18:b0:cf:ee:49:d4:5c:bf:
                    fc:26:c5:ee:f4:0e:2d:ff:e1:40:4b:01:d5:55:d4:
                    b3:3c:39:03:be:92:27:f4:83:03:f7:ee:0b:c5:ac:
                    66:31:f4:70:bc:da:b2:28:de:fc:c9:84:fd:9a:8b:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:0A:EF:2B:4E:EE:69:A2:4A:2D:70:E8:DA:16:46:64:4A:32:3A
            X509v3 Authority Key Identifier:
                keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:24:f6:c0:d1:48:63:15:d7:9c:fb:76:6c:ab:9b:32:00:
         ad:7a:2a:4e:ef:b2:c9:f4:6c:97:7d:96:75:0b:48:2b:9d:69:
         0f:44:7c:4a:5f:f5:42:9a:18:f0:af:4d:6e:bf:6b:2f:ad:b4:
         1c:f1:55:9c:90:3c:3c:db:05:5a:00:36:95:de:24:d6:d6:28:
         b8:30:7f:38:c2:1c:db:ab:fc:ef:c0:a2:a4:1a:fe:a3:fd:36:
         1d:ec:a3:89:76:5f:a1:2e:32:61:20:ce:31:32:f3:22:a9:7d:
         cb:8b:a4:6a:22:40:c0:54:a7:b3:fb:e9:22:7e:d7:95:2c:69:
         31:de:36:39:d4:00:f3:69:46:68:cc:54:29:96:0b:c3:10:a4:
         94:ed:55:6b:eb:2a:46:44:f7:15:3d:20:83:0f:f9:05:17:fc:
         ad:06:23:86:bd:6f:40:cc:da:3a:67:b8:37:47:80:4e:46:81:
         4e:9e:8f:3e:54:a2:64:28:ef:84:2e:85:50:94:18:11:a2:f4:
         7c:f1:50:25:b3:49:6b:24:bd:92:40:c5:28:7b:b6:7b:51:02:
         b1:dc:b7:76:cf:c8:07:23:0d:4a:9b:70:4d:80:4b:78:cd:8c:
         af:93:69:5e:15:c9:75:29:d4:73:86:fa:34:3e:8a:c6:72:2a:
         38:27:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:04:22 2026 by rpki-client