This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File:                     JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier:          TKH9OO5sU+FlubkRiYvQNxSxIfHgUn010IH2snS2r+4=
Subject key identifier:   B5:5C:88:14:F6:99:C4:31:3A:80:EA:A7:3B:2C:47:15:76:32:87:FF
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       019BF2E265CE731E1EFF2905A492614CB4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number:          0FCC
Signing time:             Sun 25 Jan 2026 02:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:22 +0000
Files and hashes:         1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: IZ9/z7n8YPAzHcS6fX36JFZ2A27nmfj1pGm/yi8bj3o=)
                          2: egsIufM9DiHj_9SSdU6nff71R8Y.roa (hash: e9a1PO48oO66qDrGOo9Li3VvtXwHdcVqPnuihXWNVoQ=)
                          3: wSDNzntcWhNUBixkb6aX20BeB6s.roa (hash: jjJjLDXdJiAxkXQhCjVcOuaYUcxyHYmIDSfSBzcXqDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:65:ce:73:1e:1e:ff:29:05:a4:92:61:4c:b4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Jan 25 02:01:22 2026 GMT
            Not After : Jan 26 02:01:22 2026 GMT
        Subject: CN=b55c8814f699c4313a80eaa73b2c4715763287ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:f4:4c:1c:5b:b8:bb:f3:fe:41:d5:15:55:
                    38:c3:c8:52:82:f9:4a:9e:b8:dd:37:d6:ad:12:19:
                    3e:52:8c:5d:06:bc:4a:04:a4:92:a5:22:2a:a5:9e:
                    55:e0:df:ca:75:50:82:f0:01:0c:97:b6:87:bc:7e:
                    c7:fe:dd:0f:2d:d5:49:14:2f:f4:06:7b:c3:c6:02:
                    ea:ef:2b:85:7a:a2:11:03:ee:f3:04:15:a9:1c:70:
                    6b:25:d5:b7:c6:27:1f:05:32:a1:d9:1b:a3:5d:3e:
                    61:ad:80:ca:22:95:76:1b:55:9b:86:1d:66:d2:ff:
                    c0:5d:12:b2:43:23:fe:73:d5:33:3e:a4:97:42:2b:
                    82:73:4d:43:42:ef:e6:19:27:fe:e3:a1:6b:f3:d0:
                    c4:c7:81:5b:d9:b0:44:db:69:58:c1:ac:49:13:b5:
                    e6:c7:48:de:2c:ff:00:29:0c:e3:47:0d:91:bc:a0:
                    93:6c:e4:41:4a:e7:41:cb:f4:80:90:17:37:cc:d7:
                    fe:9c:94:1f:02:bf:04:8e:19:3e:00:16:4e:85:e4:
                    c1:55:12:ca:9f:93:16:67:30:1a:d8:34:87:97:88:
                    54:f0:cf:ec:25:8b:b6:6b:98:44:d7:ae:46:8e:7c:
                    0b:af:5e:ca:ad:68:2b:3f:64:3b:3f:15:a4:ab:c7:
                    ea:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5C:88:14:F6:99:C4:31:3A:80:EA:A7:3B:2C:47:15:76:32:87:FF
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:90:e2:3b:1e:6e:00:50:c4:b5:b1:ca:94:db:7d:d6:aa:cd:
         79:fd:74:c2:ce:57:a0:45:d3:09:49:e1:53:30:b8:bb:0f:03:
         20:c7:d0:62:aa:6c:98:87:19:6a:d4:31:c6:0c:c5:63:38:63:
         6e:ac:96:6e:5c:c5:e4:1e:70:83:14:0f:03:0e:f8:e6:cf:71:
         3b:45:61:4a:8d:de:be:8a:6e:e5:7b:5f:16:4d:58:d0:25:83:
         d9:35:55:9d:2f:dc:73:ec:f4:7d:ff:78:c4:03:2c:51:85:da:
         2c:84:9a:a5:88:4b:12:2f:8c:52:56:36:6f:64:de:84:5f:9d:
         76:ba:4b:59:e9:84:25:06:67:36:c7:d3:a5:3d:c8:98:4c:12:
         2c:80:78:55:e1:5d:e5:fc:d6:b8:3e:e5:36:b2:71:78:34:66:
         86:be:a5:c4:e0:f5:c0:3f:df:6d:b7:01:51:d5:b1:67:78:69:
         82:c7:4c:f2:86:13:07:8d:6d:d7:ce:02:3a:64:b0:96:3a:8a:
         39:6a:d4:e2:5e:a4:8f:d2:fc:19:54:5d:84:8e:00:fb:f8:b2:
         da:34:be:d9:a7:61:f2:33:ab:ca:d6:8b:58:29:7d:95:d1:b6:
         36:f5:86:bf:72:f9:eb:be:df:c9:8b:1a:5a:5d:28:c6:fa:b1:
         26:58:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:12 2026 by rpki-client