This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File:                     josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier:          aYwvu8zUphbiIXYbasR0EasnsmsdN0YEyd4OfJTuquc=
Subject key identifier:   AF:38:93:BA:3E:B5:18:7E:CD:F2:65:F5:57:16:1C:F8:28:43:23:B1
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer:       /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial:       019BF575614CB074E8052CECC0C39951DE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number:          155F
Signing time:             Sun 25 Jan 2026 14:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:09 +0000
Files and hashes:         1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
                          2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
                          3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: PwFxdfuQbNuhJqncveVuLAvw/s9TFEMwlP4qEpyuYiI=)
                          4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:61:4c:b0:74:e8:05:2c:ec:c0:c3:99:51:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
        Validity
            Not Before: Jan 25 14:01:09 2026 GMT
            Not After : Jan 26 14:01:09 2026 GMT
        Subject: CN=af3893ba3eb5187ecdf265f557161cf8284323b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:e8:3d:2c:90:4d:66:f9:79:94:8e:35:f5:
                    bd:f7:5f:9f:fb:2e:9f:4a:65:76:19:63:86:54:82:
                    82:22:55:80:11:fe:d8:cf:5d:f3:81:d3:39:97:98:
                    df:6b:a9:3e:32:0f:56:55:a8:77:dc:3a:a8:e6:39:
                    61:7f:7c:a9:e1:e7:83:37:71:ff:8e:4e:28:4d:d5:
                    fd:02:ff:bf:7d:d3:59:8a:0a:a8:c1:43:8c:fa:bb:
                    7c:16:99:c6:7b:bf:ac:6d:e0:4a:73:4e:4b:d5:fc:
                    e3:38:43:d7:6e:46:2d:48:b9:09:75:e7:e0:88:12:
                    d0:45:f0:42:27:2f:ce:7a:3c:d6:e2:0d:69:15:c7:
                    10:56:b8:1c:4e:c3:95:7d:6c:18:7b:e8:d7:8a:84:
                    6c:f4:ca:99:50:1d:ea:b3:81:47:f5:79:20:d8:be:
                    42:39:63:dd:ce:5f:29:ba:1d:c7:55:60:a1:78:23:
                    51:f5:f7:af:06:fa:76:83:7a:f1:9e:05:39:c6:02:
                    30:28:4b:3a:7b:e8:47:11:d9:25:79:93:a4:c9:6e:
                    07:c2:94:f1:f0:0d:e2:06:5a:a4:11:a3:28:31:2a:
                    7b:b4:97:22:d0:e5:29:bd:27:22:93:56:bb:32:93:
                    7b:5e:22:30:f2:83:e1:20:a9:4d:b8:42:07:98:c7:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:93:BA:3E:B5:18:7E:CD:F2:65:F5:57:16:1C:F8:28:43:23:B1
            X509v3 Authority Key Identifier:
                keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:cb:c1:d9:6d:32:02:77:6d:67:77:e8:6c:5c:31:93:e6:
         f6:a1:c6:c7:7a:a0:d4:f7:3a:24:72:58:88:d0:2c:89:62:90:
         71:48:f6:35:fa:f9:9f:7d:0e:97:98:de:43:a9:27:4c:bc:d8:
         81:d9:71:04:20:a0:d6:8e:2c:f6:79:c5:69:87:6e:36:c2:6b:
         b7:96:c9:a1:59:40:5a:5a:38:0b:78:51:bc:04:e8:8d:81:63:
         36:de:1e:20:31:a9:ae:40:e1:a8:a6:a2:7f:bf:fb:ee:ce:b1:
         23:e6:bc:bb:e6:1a:30:bc:0d:26:a6:3d:c7:a2:27:a3:b1:50:
         d4:a0:83:9d:cb:fb:68:63:7a:51:b8:28:57:8e:34:f9:fa:be:
         10:01:e2:1b:07:1a:90:13:07:3e:93:e8:b8:24:ce:bb:f5:aa:
         fb:e7:17:0b:8f:26:b6:ef:40:fe:6d:50:ab:b2:4c:38:ef:61:
         a3:4b:54:68:f3:e4:c5:c9:b1:d5:db:65:88:5c:65:d0:d6:68:
         3f:6c:aa:b4:65:3e:cc:c1:ef:33:93:d5:df:e2:fa:e6:55:2c:
         b9:ff:a2:b1:1b:25:54:f2:d3:6f:f8:6e:a5:4d:57:97:be:8e:
         7d:ba:a4:41:45:ac:a4:28:5e:43:8c:34:29:b8:a2:23:96:91:
         de:82:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:22 2026 by rpki-client