This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
File:                     raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json)
Hash identifier:          cCAeNM+U6FKgL7yepUdaRqR6p2gRt75H5W8ypOoqVNU=
Subject key identifier:   45:58:6F:D0:A8:F3:40:FE:35:FD:7E:8A:9D:50:13:1C:1A:7A:84:17
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       019BF4D0D9292C5A42D5028A11427CE99BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
Manifest number:          1823
Signing time:             Sun 25 Jan 2026 11:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:26 +0000
Files and hashes:         1: 6g2jAj3wPlnIocB3gv_q01JRNMI.roa (hash: BoIPgQYmO7xfoT6Wc1Gklqbq8ldWVr0gxcD6FGVAfrw=)
                          2: J78VM0qajB7rh9yu3sFqYPoFQ5E.roa (hash: +P584eQDqt5VMIbzVnH+2JMF7g7sBvRvoJsnsuzsctc=)
                          3: LCiiiyNl3fmiTu2hqQ6fBJ-TTbU.roa (hash: sFqRolKm0Znj/M6WIHuOprIWndPgzew2UV2ZOuaE3Bo=)
                          4: Mg5spav-Aj8VvIh1-2RHRBIttEU.roa (hash: SH1KuCQgQ4RFoHS3pbRrLNbrSAXCyG9eS+C3l6//Hf8=)
                          5: Oz2typdgzDQc0ctUseKKMFhx06Q.roa (hash: syifUOQ+Jq/Hybnjzbf9hzjzGqX0Taf7r/ZLA0VrpP0=)
                          6: fMF9qnlP4WB5LHh5V8LwNwc9f4Q.roa (hash: fmzVayjcNIPJoq0/A+Ybi5cj066xRm3fDk6Fawjmxcg=)
                          7: hMCrIUKHXGHOtkHZ8Y6eI3UIeCw.roa (hash: rMGJFYfVplpRpoCAdt4v/1BCKdLOOcSLzsmFWHhqGnQ=)
                          8: lPiHeORLKEKfujHMYKmMKgjplak.roa (hash: jBAhlOJ7x1dzG58s1VItmsDLFO+pFQTxwtJmgsn2S2o=)
                          9: q0e2mOxIUzAfYPRIbushYUqYPEk.roa (hash: mjQc3SMPF6rvuC90lgX5o3Yun+cCb8geikGE6fcJ2cw=)
                          10: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: hcvsrdy+2mG3s6hRUV0WC7E6uYIPUsUtl2fTXa6+z/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:d9:29:2c:5a:42:d5:02:8a:11:42:7c:e9:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Jan 25 11:01:26 2026 GMT
            Not After : Jan 26 11:01:26 2026 GMT
        Subject: CN=45586fd0a8f340fe35fd7e8a9d50131c1a7a8417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:63:6f:6d:71:a8:44:cf:27:ca:48:a6:76:
                    ac:c2:6d:60:4e:07:f7:47:2c:8c:27:1e:13:12:63:
                    9e:e2:43:fc:20:62:36:5d:20:e1:9f:b1:5d:67:9a:
                    d8:8a:3d:12:66:16:31:f4:60:1d:bd:27:b2:55:bf:
                    be:7a:13:b2:51:db:1c:d1:2a:7a:b7:c4:63:ff:38:
                    48:cf:74:37:f8:68:a2:d0:05:0a:9f:fd:ed:f1:d8:
                    76:0b:f7:79:c9:2f:f3:1c:16:97:af:2f:01:b4:9d:
                    dc:0a:54:b9:9e:cb:0d:7a:fe:7a:12:96:67:45:3d:
                    1d:9a:a2:fa:8f:af:bb:39:44:0f:fc:99:c6:de:58:
                    ef:b5:66:31:ac:de:0a:07:62:e0:9b:68:e7:9e:ea:
                    59:09:84:15:cc:c4:62:cf:2d:44:db:89:f0:79:dd:
                    64:12:51:d2:ed:da:66:0f:cd:3b:17:89:3e:c6:19:
                    5f:f5:00:94:f1:4a:0d:b0:20:ad:33:13:c7:79:0e:
                    af:93:dc:b5:0f:cc:87:9b:16:2b:00:10:1d:0d:e0:
                    47:2e:60:e8:81:ed:f2:7b:db:bb:94:fc:a4:2a:3e:
                    b4:c3:3f:fc:0b:fc:5c:a1:c9:8f:48:08:48:e3:c2:
                    89:f5:4d:86:95:01:f0:e2:58:f9:2c:c7:ff:d7:59:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:6F:D0:A8:F3:40:FE:35:FD:7E:8A:9D:50:13:1C:1A:7A:84:17
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:ee:ba:af:5c:c1:d0:55:b6:9b:d9:d8:f1:ff:a2:ea:36:
         df:a0:95:c8:b1:31:4c:78:ae:8d:fe:ee:fa:20:00:2c:29:3f:
         af:9f:30:8b:eb:cd:e6:97:29:52:e2:b3:3a:94:7a:21:ae:6f:
         0b:d0:d2:86:aa:65:b4:fa:7d:c8:d5:92:d8:98:de:16:db:36:
         e9:2f:1c:62:c7:a1:35:bd:57:3d:b0:11:68:b9:ed:12:ca:f2:
         9b:09:05:e2:72:6c:ad:7f:fa:ab:d9:32:81:25:05:bf:59:ce:
         71:0e:5c:d6:1e:ea:a6:bb:dc:27:0f:c5:d4:9e:2c:31:bd:a6:
         e3:d2:33:78:27:29:cc:03:20:d9:79:23:f0:fa:93:c5:ba:86:
         a1:71:d8:6f:92:6b:94:94:fe:76:3f:1a:66:5c:c1:5c:03:98:
         85:e0:94:cf:f9:ef:f7:5e:fe:b1:42:cc:94:56:83:30:b2:ce:
         5d:a3:d7:c9:f6:d6:88:30:da:c8:96:30:aa:42:98:db:81:8f:
         75:7c:bf:87:bb:62:6c:43:24:31:c7:9c:38:13:ca:f4:c1:97:
         68:84:8a:2c:6d:1e:73:a7:b3:21:d9:c3:2c:14:e9:81:ad:b6:
         ba:d5:11:76:a4:08:a2:0f:fa:cf:8c:56:8b:68:95:74:3d:d7:
         d7:15:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:25:36 2026 by rpki-client