This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          9BrRR8KPNoy7f8PnI2CXi/73mERhWete7rOYOSkJS6I=
Subject key identifier:   24:BE:20:FE:3B:FD:76:48:5B:5A:BA:A4:E5:46:41:AD:84:DA:1C:D8
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       019BF350A7608EEF05136EEB0D7161EE1956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          1374
Signing time:             Sun 25 Jan 2026 04:01:47 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:47 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:47 +0000
Files and hashes:         1: 0wV5g4EVRhgoKZWB0l4u4NCoebc.roa (hash: x9f29Pup33svef1VwpyK5xHxGxbt4thAXHF+Oyzm5bM=)
                          2: 4CZjW2K05gjTWVSm5HCC1YhuGFM.roa (hash: YUklznotWSasG+NPzST/0VXBFbDg9f0JqUM1FXRqVpI=)
                          3: 5HEcYsdzu9L22_TLT5sanVvYLp0.roa (hash: dTQSwuTPiy5DGWkByMPPdOz401xLD1RpcVBzZX612eQ=)
                          4: 5h6kFRQXVVJn7vc_7-eg5_4Zx1M.roa (hash: 7n1WW6ereLymBeWVUlfPXwnYkLa0bK40qeD55u+vgDQ=)
                          5: 7Y-dcG1ts9XBr6M2neYbzLiBIE0.roa (hash: fa0hkAmckPv2az2FBEeIwpMqvvWjXXDG2d/nbEmckOA=)
                          6: BJYvFi2jF6wN9FzESAAQVEpbnSA.roa (hash: bDcokEG2wGSv8dVp3mittXliN4C/4kWOek0H+NmqbTg=)
                          7: Bax6o4-NzxkAhAjfR_GFHkHw9iQ.roa (hash: xFxb60gYq3cu/yo+1/lRCOmkwuUCUfsdJZ/VYwmhC4c=)
                          8: CRGHJQj4lZiRn9TWiVjqPSQiI_s.roa (hash: LhY2OVqSV8kBseD85misaxGvwCTS5KLte3vYc1JA8OE=)
                          9: Dja78ruX4o7MO5yCfGzKSVMuXBo.roa (hash: 2yO1oHN3Azbfysz52/wvWwgKaNjr723EJVJe38YhZHk=)
                          10: JKAnK2en3odHT3-Pq6Exoze1jvQ.roa (hash: qU0dNd/ElxDWuoJrBPmPXPS+v87iZmcyX83uBVkJOdg=)
                          11: MPO8HbcFWMOeE2iBKVv-IWpWPxk.roa (hash: CZOBmBd1hbGjq3AqK4WkUgTLjxnhfpm1Rc52Dylmg/w=)
                          12: OY4yu33kRTHXIDvS06hD5g3ZU1I.roa (hash: MO3P51CXchSgKn4Y84H+Th8p16bdsxGFK2fbYdmXi5Y=)
                          13: QsaJUx8IySwAVJKdDaCVAV_WeG8.roa (hash: vu/oFsB63dNb0RilkgFUkxuOJfKjYLkKFMHoBUDzCU4=)
                          14: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (hash: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI=)
                          15: W_DUPmMWXfw6_1KwWt3waPIqT-s.roa (hash: cneq7hYbqTf+UiD+t4E82O4maYI9qUbQh2f/R56QLF8=)
                          16: icHwAOAPFvBW3tEyXkM7dAj1nUw.roa (hash: wAy69Gl2/BQXoNw645eHfl58kZf8F87b6sgT8XxpAZ8=)
                          17: imB7m_SSkD-EKaGcH3WYOVA3UFA.roa (hash: QaG4X81jQlLRNJJxryf942TxAMPUaQpIxGX6diK8mSM=)
                          18: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: 9438j1PIVRDUR6Zpcii7I96eNeWCJpp31U17/oWHCMs=)
                          19: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (hash: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM=)
                          20: s1BOsr_SL1rErib0eleQtkSspyY.roa (hash: YIrdM89Nie4pypUTkAA2EhoG4aHCBtnPq36XIULi8J4=)
                          21: yxBWMEqUTuUpppX4kQbNWZMUag8.roa (hash: GfoDixWxoGP9Yf1RA/HAN8eaFxjgurmqtoh7fzztQM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:a7:60:8e:ef:05:13:6e:eb:0d:71:61:ee:19:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: Jan 25 04:01:47 2026 GMT
            Not After : Jan 26 04:01:47 2026 GMT
        Subject: CN=24be20fe3bfd76485b5abaa4e54641ad84da1cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:71:85:d9:69:e4:16:8a:04:32:42:28:74:
                    95:b3:20:9f:42:d7:7b:26:5a:56:da:9d:cc:37:1c:
                    91:ef:11:f6:f3:fc:f2:bd:a7:e1:b5:d0:64:4f:7e:
                    60:7b:4f:fe:11:25:c1:fc:83:c4:db:13:9c:f0:7a:
                    06:f7:b6:3b:85:67:df:ad:8c:8e:b5:83:0d:a6:d5:
                    1a:af:d5:70:82:10:4c:6f:af:e4:e9:dd:ce:be:24:
                    89:20:72:c9:45:11:f1:aa:5a:1d:6a:b4:73:a9:2e:
                    c4:15:f2:4c:09:67:6d:12:4a:3d:fc:c3:01:04:e8:
                    63:1b:34:3e:6e:e0:eb:b5:01:a1:0b:65:6d:f5:7f:
                    d7:d9:cc:05:df:b2:ef:4a:31:ad:bd:d0:35:30:af:
                    fe:73:65:af:7e:55:0f:d9:38:f3:49:4b:00:1f:a5:
                    2c:de:a1:c5:a2:fc:6f:ee:82:6e:b8:53:0a:5e:48:
                    88:2b:0e:5e:e5:65:af:8d:83:5a:e3:d1:35:d6:44:
                    12:be:fb:da:36:1b:05:63:a3:ca:23:f7:82:fd:58:
                    12:45:3e:ae:bc:85:10:cb:88:90:91:30:8f:55:73:
                    94:fd:62:e0:65:26:bd:91:db:87:82:2a:31:88:25:
                    48:8c:44:fb:c0:d2:eb:c5:65:e6:98:7b:f6:97:d6:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BE:20:FE:3B:FD:76:48:5B:5A:BA:A4:E5:46:41:AD:84:DA:1C:D8
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:49:33:46:4b:ab:99:e0:39:3c:46:3a:26:ed:63:08:a0:
         7d:a4:03:d0:b6:1d:38:24:dd:ef:0d:2b:3c:6d:7c:6f:14:50:
         a3:cc:96:bf:5e:76:9c:0d:de:e5:1f:d0:09:20:84:0b:dd:9f:
         d3:16:b2:bd:2d:79:43:db:1b:b6:d5:f5:53:ad:35:fb:be:46:
         87:c3:c6:c5:43:b3:6d:16:e2:95:a0:f3:8f:fa:ad:98:ca:d1:
         b9:00:3d:a1:4b:88:4b:2f:3a:ce:50:83:92:bd:52:3c:48:36:
         e3:18:38:de:fc:eb:67:c4:a0:16:9d:f9:72:2a:1b:8d:5f:e9:
         da:1d:46:4b:ef:fe:d8:68:f1:9f:a2:fe:74:d7:f8:5d:f1:9c:
         b8:3c:da:4d:81:4a:a6:f7:30:c7:19:99:8f:76:ca:d5:60:2d:
         5a:c7:33:6b:9e:96:08:be:d4:bb:07:a3:ca:60:f1:3b:da:25:
         21:1f:7f:35:43:dc:3b:ee:23:a7:92:18:1a:a4:8f:90:b5:da:
         36:77:dd:10:60:be:86:ae:7c:ad:55:cb:21:ac:31:04:f2:b5:
         f3:50:2e:0b:d1:eb:24:9a:8d:ff:06:7e:0a:76:d7:23:fa:a8:
         58:f6:a6:e2:a3:18:8d:03:6f:b5:c3:9e:a6:a5:dd:06:06:ad:
         31:b0:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:04 2026 by rpki-client