This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File:                     JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier:          aLZHmR/mDMxcXjoXnRHq9uKUHqNOub0CxCKSu5HRbCU=
Subject key identifier:   48:74:97:26:A2:20:FD:12:3F:36:7D:BB:E7:38:AD:F0:9D:D6:B9:CD
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer:       /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial:       019BF386CB8F6E3C750BA293F8919ABF2D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number:          0DD5
Signing time:             Sun 25 Jan 2026 05:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:55 +0000
Files and hashes:         1: CBT9EvNLviREuaFnuwBtsjNjvqQ.roa (hash: L5VKNlWuWtfLWO7jL8F9Y4m0nbimopTGF6Y2mOItvHc=)
                          2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: N910b0M7s8NJFQ/ZBfpg7MrHQAMWpZFGseEsqBkbOM4=)
                          3: T2MyCYDe8ZVj6MHLOpPsRFQaLyc.roa (hash: 2HMXQDaERD47LVw7adtPSZsCeqM+FdyN2voYgfm3nq4=)
                          4: TrZbLVY0iXqlw78jA1uMduH-vUQ.roa (hash: KRDdhAasvGi+XoVP5w8RcZgsqXheZXBgHtl6x/DPy1c=)
                          5: WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa (hash: OR5UXYV6xuApBIfkbkR4RJywXInN6wryK+o2woE8n2A=)
                          6: fKuK4GhJoW5W0MgtH6V8djfpAh4.roa (hash: oBGCf3nVEKmFy2gQfXUwhx5LHxw9ggGPk7GHfDrKscM=)
                          7: zxx_FfKkmmxvyeDvkRu2znFf5T8.roa (hash: MOimrkmJ3AqYEjrbALlR+YXtLYVrKH4fVxKgTuqxIeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:cb:8f:6e:3c:75:0b:a2:93:f8:91:9a:bf:2d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
        Validity
            Not Before: Jan 25 05:00:55 2026 GMT
            Not After : Jan 26 05:00:55 2026 GMT
        Subject: CN=48749726a220fd123f367dbbe738adf09dd6b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:14:f7:46:68:d6:f2:76:20:f6:e1:a9:c6:
                    94:fc:28:1f:96:94:ff:2c:9d:81:51:52:dc:0b:80:
                    96:d1:f4:d8:40:8d:e2:bc:5f:10:38:8e:2c:c0:dd:
                    4d:83:ca:53:b2:7e:66:97:c9:21:73:3a:6f:b4:39:
                    d2:7d:6f:bf:de:e4:84:db:7d:58:f6:11:02:5c:e4:
                    76:8a:d1:59:f2:2d:b9:f4:60:ab:92:92:89:9c:fc:
                    ec:e4:8a:c1:e8:06:a9:dd:7d:60:f5:31:0e:c9:66:
                    bf:f0:7f:38:02:11:65:93:b0:9e:6e:a1:2d:28:80:
                    27:da:28:aa:ea:f3:0c:d4:07:99:57:d9:4e:b4:0f:
                    b4:77:83:71:2a:96:8c:2c:c9:c9:3a:39:b7:e1:a9:
                    13:25:48:52:01:dd:08:d6:ab:2b:03:cf:f3:05:be:
                    6b:58:c3:f5:75:ce:da:e6:85:a1:88:b9:ae:58:60:
                    b5:c8:81:89:13:04:01:48:37:51:a8:90:c2:db:e6:
                    db:df:37:e6:30:af:5e:f6:7b:be:70:20:65:e3:a1:
                    41:41:d9:e8:f6:08:ce:b7:16:00:04:f5:f3:6c:48:
                    33:ae:83:11:c1:98:90:76:21:64:89:f9:f7:7a:f1:
                    3a:14:e7:5a:ab:a2:44:3b:a7:58:7e:5e:eb:54:77:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:97:26:A2:20:FD:12:3F:36:7D:BB:E7:38:AD:F0:9D:D6:B9:CD
            X509v3 Authority Key Identifier:
                keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:f3:0d:08:3a:56:f9:6b:f2:e6:69:fd:8e:be:11:7b:19:
         c1:78:e9:ec:71:05:10:6e:78:90:ef:32:a6:22:a4:cf:8f:cf:
         44:38:4f:93:cf:61:e2:68:4d:a2:25:c3:ec:b6:35:c0:e7:a3:
         8d:78:0d:29:bd:b9:60:24:d5:c7:e1:fb:46:be:16:f8:43:fd:
         d9:18:c1:06:7f:f4:23:1c:2b:c8:9d:c7:20:f2:2e:e5:02:1e:
         ac:86:75:b8:e7:d1:12:ca:bb:2a:94:3f:ec:79:07:d1:3e:13:
         2d:98:dc:49:dc:2c:b4:f3:41:fd:ce:82:1a:18:dc:f7:67:d6:
         5a:9e:a4:9d:77:5a:27:30:27:c3:0f:3c:81:55:99:56:4e:a3:
         48:4d:60:e6:d5:1a:88:3c:8a:4e:cb:c3:3d:a0:68:aa:ed:83:
         a4:ad:37:36:79:31:46:9a:47:b6:33:c0:cc:bb:d2:2f:e0:f3:
         26:5c:62:f1:c9:d5:e0:94:f2:17:c6:d5:ea:55:5a:b6:f0:b0:
         c3:df:69:1b:e1:ab:f7:82:25:d4:5c:93:dd:5d:3a:c4:6b:5c:
         c9:a9:1a:07:7a:76:2d:d9:5f:0b:4f:ac:b5:f0:27:b5:a1:61:
         4d:bb:12:91:fb:bc:d3:14:bb:1d:bb:c5:ee:a0:24:a0:24:94:
         8a:b3:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:39 2026 by rpki-client