This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File:                     sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier:          3k2FI/1lXjOdMR/jTWdcbjF9NOcAWueoFumYxrI9oPw=
Subject key identifier:   B3:02:14:98:79:77:CB:76:E6:0F:3B:6B:3A:34:9A:BE:05:C7:D7:6F
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer:       /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial:       019BF72CD041C6B29B2741A0CAFAD6F038FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number:          0B54
Signing time:             Sun 25 Jan 2026 22:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:07 +0000
Files and hashes:         1: 2zzlpKPODdf8hF4555DoYKgQ_0Q.roa (hash: sdARz4Jh+abp/1GTc1LjA7oFLnqDLJUlfwULONlwmOM=)
                          2: Uz9TM-baJ3XQHq98E4_sczvBhQU.roa (hash: rSZ//pyykhfyoXS+8XiZOdmRQameb6KqxCKCpnB3YUw=)
                          3: aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa (hash: 59/7mJvpFngGfl1MeWjTYVHHdedKaNfpchig8vCqutM=)
                          4: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: ZNFJmoh7kj9vGbIDJqQ0i4jM3904oU3+MKYymF7fK0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:d0:41:c6:b2:9b:27:41:a0:ca:fa:d6:f0:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
        Validity
            Not Before: Jan 25 22:01:07 2026 GMT
            Not After : Jan 26 22:01:07 2026 GMT
        Subject: CN=b30214987977cb76e60f3b6b3a349abe05c7d76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:92:ba:31:e0:4d:52:a7:b0:24:b8:a5:cb:
                    31:5a:1e:8f:1e:c3:90:74:df:2e:9d:ca:06:0b:26:
                    ef:58:83:53:d7:6a:a3:22:7f:b2:d9:52:f4:52:c9:
                    94:df:57:d7:91:3d:cb:d9:ac:9d:25:56:24:c0:cf:
                    65:43:ab:e3:12:6c:ed:7b:0a:b9:4f:b1:1c:1b:fe:
                    61:b9:ee:01:f2:21:de:a0:27:53:c7:bd:fc:09:05:
                    8b:c8:48:c7:7c:5e:40:ed:53:59:14:bf:57:21:a4:
                    7b:5e:e5:36:21:6d:a1:2c:45:60:5d:9a:a8:03:37:
                    7c:ab:08:60:70:c6:6e:f2:0e:66:eb:57:34:34:ae:
                    1d:52:23:ba:07:fc:a8:8d:70:02:96:5d:a4:8e:7d:
                    09:c8:51:dd:60:16:9b:ab:7c:39:97:fa:7a:4d:7f:
                    c3:b9:e4:56:83:86:55:27:eb:60:e0:0f:a5:93:b1:
                    21:e8:eb:fe:ea:45:bd:2b:33:21:9a:2c:00:d6:32:
                    d0:ea:de:a6:18:15:42:f2:bd:a4:08:f6:f0:a6:43:
                    86:08:7a:bc:b3:1b:2e:93:81:ef:1d:1c:4c:c1:6c:
                    57:1c:eb:a9:70:39:39:5e:e7:21:56:38:53:c4:ea:
                    3f:b0:2a:f3:4e:cf:60:b1:0f:c7:c4:5f:e3:2a:e1:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:14:98:79:77:CB:76:E6:0F:3B:6B:3A:34:9A:BE:05:C7:D7:6F
            X509v3 Authority Key Identifier:
                keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9a:46:98:04:49:52:d0:34:21:c3:d6:b8:39:35:ff:5c:60:
         05:85:90:f2:39:1d:75:4d:ac:cf:5e:a5:83:7a:f7:c7:4c:b8:
         7e:cf:0d:73:af:b1:4b:ca:db:7c:a6:dc:46:ea:9d:28:3f:dd:
         a9:ce:8e:dd:be:31:32:60:12:d5:92:55:6a:ba:61:52:69:a2:
         0c:f0:a7:02:9d:36:cb:7c:53:45:a2:db:e0:9e:b0:54:be:95:
         18:4e:6c:5b:02:3f:81:79:e4:e3:2b:33:31:45:f1:39:c9:89:
         da:c4:94:bd:ea:73:31:81:74:61:9e:91:4b:34:2b:25:f0:93:
         ce:a7:35:f1:b9:c1:31:ee:5b:bd:b6:a6:8c:46:97:1f:f0:4e:
         ff:a2:57:5f:56:f2:c6:0d:bf:57:c9:2c:06:55:89:1a:71:10:
         3d:98:90:74:ee:5a:ce:96:34:de:17:5c:5e:66:72:83:31:b1:
         cb:40:2e:e8:b6:62:97:5e:38:40:ad:fc:18:a2:39:ba:20:ec:
         70:3d:38:b3:96:59:7e:a0:be:c1:5b:4d:2c:51:90:63:cd:c7:
         83:30:09:68:0c:0d:01:a7:dc:49:ea:3c:bf:6e:80:2b:f0:80:
         a7:55:7e:55:ea:43:81:0f:ee:9e:82:14:fc:5a:41:42:45:9d:
         04:08:47:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LNBBxrKbJ0GgyvrW8Dj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyM2ViODQ5ZTBiNjk0MGU0ZmY1NDdkZTBiNDFiMDAzZjll
MTEwNWMwHhcNMjYwMTI1MjIwMTA3WhcNMjYwMTI2MjIwMTA3WjAzMTEwLwYDVQQD
EyhiMzAyMTQ5ODc5NzdjYjc2ZTYwZjNiNmIzYTM0OWFiZTA1YzdkNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxmSujHgTVKnsCS4pcsxWh6PHsOQ
dN8uncoGCybvWINT12qjIn+y2VL0UsmU31fXkT3L2aydJVYkwM9lQ6vjEmztewq5
T7EcG/5hue4B8iHeoCdTx738CQWLyEjHfF5A7VNZFL9XIaR7XuU2IW2hLEVgXZqo
Azd8qwhgcMZu8g5m61c0NK4dUiO6B/yojXACll2kjn0JyFHdYBabq3w5l/p6TX/D
ueRWg4ZVJ+tg4A+lk7Eh6Ov+6kW9KzMhmiwA1jLQ6t6mGBVC8r2kCPbwpkOGCHq8
sxsuk4HvHRxMwWxXHOupcDk5XuchVjhTxOo/sCrzTs9gsQ/HxF/jKuFADQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMCFJh5d8t25g87azo0mr4Fx9dvMB8GA1UdIwQY
MBaAFLI+uEngtpQOT/VH3gtBsAP54RBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAt
MTU1ZjQyZGNhYTczLzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMWJmMmUtYjU4YS00YTMxLTg5YzAtMTU1ZjQyZGNhYTcz
LzEvc2o2NFNlQzJsQTVQOVVmZUMwR3dBX25oRUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJpGmARJ
UtA0IcPWuDk1/1xgBYWQ8jkddU2sz16lg3r3x0y4fs8Nc6+xS8rbfKbcRuqdKD/d
qc6O3b4xMmAS1ZJVarphUmmiDPCnAp02y3xTRaLb4J6wVL6VGE5sWwI/gXnk4ysz
MUXxOcmJ2sSUvepzMYF0YZ6RSzQrJfCTzqc18bnBMe5bvbamjEaXH/BO/6JXX1by
xg2/V8ksBlWJGnEQPZiQdO5azpY03hdcXmZygzGxy0Au6LZil144QK38GKI5uiDs
cD04s5ZZfqC+wVtNLFGQY83HgzAJaAwNAafcSeo8v26AK/CAp1V+VepDgQ/unoIU
/FpBQkWdBAhHMQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:28 2026 by rpki-client