This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
File:                     JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft (raw, json)
Hash identifier:          DYrJonTEc/s9iteNJT0Yt8SvAQAxsXc5m4bikcz7Z34=
Subject key identifier:   70:B9:35:17:B1:06:4E:A7:71:46:3C:D3:B2:E2:5B:67:F9:52:CB:AF
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Certificate issuer:       /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial:       019BF318CD7D86C7CF163C5D48C182B17A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
Manifest number:          0435
Signing time:             Sun 25 Jan 2026 03:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:47 +0000
Files and hashes:         1: 4WCS7UgZrFg0xB7Sz_SWzaKXxmg.roa (hash: Dtp0+olrT/g4B/c9sgq/6C+rxWLMhH/r+Ia7+UoUCmg=)
                          2: D-QuEP4IligLmiH1Vpj8cATe378.roa (hash: 9Hc6YaNH5CoT1hAHiAk1w4no/D39VZT0Fifmyjk6Q2k=)
                          3: JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl (hash: WpHjOoTBoP+fUK1b6ZztB8wPGwgukaJWFt3CWnZnbDs=)
                          4: cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa (hash: IZdQT+U93+RrywPuq81fYi7D3L8Bi21y4Bobjb9uAxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:cd:7d:86:c7:cf:16:3c:5d:48:c1:82:b1:7a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c672da72a34cc282adc40f282676de75117654
        Validity
            Not Before: Jan 25 03:00:47 2026 GMT
            Not After : Jan 26 03:00:47 2026 GMT
        Subject: CN=70b93517b1064ea771463cd3b2e25b67f952cbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:d6:16:2c:a8:2a:79:8f:89:18:a2:00:09:
                    fd:6e:99:50:3c:01:ae:cd:fd:de:7e:8c:be:9d:17:
                    4f:44:05:5c:ba:58:c0:42:58:f4:00:4e:5b:45:ab:
                    b3:85:c8:01:cd:cd:d5:3d:dd:5e:39:24:9a:7f:c5:
                    11:df:cf:ef:f2:3e:af:72:fa:d9:f2:66:a7:e9:c8:
                    2a:a5:3d:bf:32:bd:47:2c:cf:55:df:81:47:96:9f:
                    15:2c:57:bb:b1:ea:f1:e9:6d:f0:a8:ae:8c:97:80:
                    48:18:07:5c:ec:1d:fa:ad:68:52:21:ff:49:07:96:
                    58:7f:26:0a:fd:c1:66:8d:91:0a:af:89:79:93:8b:
                    db:92:3a:61:40:ed:0f:ec:9c:d6:2c:4a:0b:9c:40:
                    be:37:79:c6:94:85:e7:45:5e:ed:26:e5:01:da:1e:
                    1c:e6:45:03:de:ff:6d:aa:44:41:4e:8e:89:19:b0:
                    a7:9a:a8:0e:da:61:d8:db:9e:68:60:12:52:15:65:
                    1b:24:11:e7:22:64:26:1b:bc:13:95:8c:00:9b:68:
                    50:76:9c:e1:a4:37:98:fc:5b:b4:3f:19:b1:d0:cb:
                    ba:ac:5e:0f:fa:12:25:88:46:8a:2b:4d:89:cf:23:
                    b0:77:bc:31:56:d7:1f:2f:0d:cb:58:9f:b3:c3:36:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B9:35:17:B1:06:4E:A7:71:46:3C:D3:B2:E2:5B:67:F9:52:CB:AF
            X509v3 Authority Key Identifier:
                keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:2c:57:36:4e:fd:4c:44:68:04:26:e9:e0:61:d3:91:59:
         a2:57:84:41:d3:03:56:44:8f:bf:d6:31:92:8c:6e:50:81:d1:
         d3:72:64:99:18:6c:fb:14:af:97:30:49:82:1a:6e:92:e4:42:
         ba:24:5e:e3:b5:b2:c1:a3:ab:0a:fd:eb:db:85:2e:d6:43:6e:
         63:05:a8:35:1f:90:af:37:dc:57:b4:62:39:be:90:19:4a:2d:
         f4:1c:71:3d:8e:98:22:9b:aa:67:ca:1a:43:b1:4a:cc:6c:71:
         40:0f:99:6a:0a:cb:5e:40:e2:56:6d:e7:e5:34:79:cc:da:69:
         41:dc:d2:1f:a8:27:20:8a:c4:7b:e8:7a:12:f9:c8:3d:a0:bc:
         ea:a4:e2:0c:2e:f4:10:09:bb:fa:64:2f:4b:3b:8b:56:e5:96:
         e6:52:dc:ec:10:9f:26:a5:d7:30:cf:61:74:d4:b1:d7:4f:0d:
         45:38:3b:f2:23:3b:3c:93:5e:79:09:56:8e:a3:b7:6a:5b:37:
         a5:7f:07:c6:58:8a:92:c0:6e:da:a4:49:dc:41:46:0c:3a:b3:
         3a:38:c6:05:25:b6:89:a8:1f:5a:a6:1d:9a:e6:be:a0:53:01:
         6f:2d:4f:1a:80:4f:9a:62:c5:f7:1e:1b:02:90:5f:a3:b3:84:
         0a:bd:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:07 2026 by rpki-client