This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          xjlF23ELwM+8VwaDACVUeIBhEyUBgS5ATQZkzSqwUbA=
Subject key identifier:   95:6D:46:CC:8E:82:F4:96:E3:90:DE:46:CB:5E:05:F0:06:18:60:8A
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       019BF46351646C62C7EB05A7B07EE593F6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 09:01:48 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:48 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:48 +0000
Files and hashes:         1: 1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa (hash: m7KPmdw0ypm5cCsSjSVvSiDVgOTaFEIiCIFtIRscgBM=)
                          2: SknXE_BU2Q0ADbXiuxAkE9e0OLQ.roa (hash: /V6CwDt+vVqQ1NL+JaF4tODqLg44Ncl4VJNfvyDrnac=)
                          3: UeXYudS3zz6fGW0cpai4irNYnHA.roa (hash: wK4XLLpEyJu7nfTn9oE4RSt+zZmL5a3WpTKNSuWO690=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: ZJ93XD8f07FU0VlRpSD1v2eUprLTOzxZHqEqJwUauFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:51:64:6c:62:c7:eb:05:a7:b0:7e:e5:93:f6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: Jan 25 09:01:48 2026 GMT
            Not After : Jan 26 09:01:48 2026 GMT
        Subject: CN=956d46cc8e82f496e390de46cb5e05f00618608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:36:cf:fd:93:33:ec:89:dd:e1:41:0e:1e:
                    51:f1:02:75:cc:b6:d7:dc:52:d4:f2:a1:43:bc:b7:
                    5e:ac:aa:96:f7:b3:89:fe:53:7e:45:36:f9:fa:2c:
                    cf:f1:b0:b4:70:d6:36:63:cd:8c:15:4a:69:cc:a2:
                    d7:c3:1d:fd:c7:76:29:fd:4d:89:19:97:0b:13:9a:
                    6a:67:17:91:a3:3a:6e:19:b4:2c:b3:79:2c:f9:66:
                    84:44:90:22:f1:f9:4b:a8:6a:30:7a:88:2f:aa:bc:
                    96:d1:38:19:26:7c:74:5d:3d:ea:66:a5:ab:fd:4d:
                    fb:df:44:7f:98:08:e3:eb:33:75:0f:4e:bd:39:38:
                    0f:a3:f2:a5:09:b7:0a:64:1d:d9:ca:f1:32:0b:23:
                    27:e2:80:28:a8:c3:c6:13:cf:ee:8a:c6:cb:8b:d3:
                    ee:e4:3f:e0:7d:94:b7:f6:3a:6b:84:1a:dc:22:e0:
                    f4:f6:f7:5a:bb:68:59:de:4e:68:68:a2:12:07:7b:
                    7c:cd:8d:60:36:d5:31:9e:61:85:1f:e2:e0:68:7e:
                    5c:87:da:b1:97:d2:50:c4:6f:a9:c2:d3:02:8a:c4:
                    1a:79:d0:94:ed:ab:42:5e:c6:82:9f:20:dc:31:43:
                    a7:87:b8:c0:34:b0:92:1e:6f:a6:d5:b4:af:3d:06:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:46:CC:8E:82:F4:96:E3:90:DE:46:CB:5E:05:F0:06:18:60:8A
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:34:ce:c3:2b:40:4e:16:9b:43:fb:7b:31:85:14:43:ed:
         3d:34:40:38:25:c6:db:9a:d9:83:ef:3d:f6:e2:15:b1:a4:5c:
         2b:f6:46:e0:51:e7:5b:67:c5:13:04:05:12:48:22:32:68:53:
         d5:9c:43:9c:2b:55:4c:88:1f:62:33:1d:0e:49:8e:18:eb:fc:
         a7:25:5d:80:13:1e:89:d0:1f:74:45:b8:cf:7e:c7:cc:c6:3e:
         bc:fa:70:a2:4f:4f:2b:c6:11:a4:69:81:b9:ec:c3:6d:ca:0a:
         64:da:7f:99:8f:6b:7f:16:bd:90:d7:4e:ce:d7:11:4d:f0:a3:
         74:3f:94:92:d3:1e:bc:fd:5f:e8:62:d4:9f:d1:b7:b7:3a:d2:
         5e:0d:fe:08:f1:84:cb:37:c3:ac:16:42:83:09:95:6a:d5:25:
         eb:68:ae:94:41:28:b0:d7:7c:d0:25:6e:14:7c:41:de:69:db:
         3f:83:80:26:a4:58:59:3d:da:4a:8a:5c:6f:92:f6:ed:3b:9f:
         30:a6:58:a5:21:cd:2f:9f:29:d3:1b:e3:ac:7d:46:be:b7:8c:
         ce:10:56:4d:99:21:55:2a:20:0c:2e:d1:69:6c:bf:a5:6c:f2:
         83:89:9a:b5:50:24:fe:92:c1:fc:92:cc:af:17:75:e5:00:62:
         ed:5c:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:56:40 2026 by rpki-client