This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File:                     JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier:          yJKnJr0L8QX99xa/VOjD7ZJRFqLBmUXuQICY7u12E88=
Subject key identifier:   31:CE:26:9D:01:FC:D5:EC:07:A3:7D:EB:F3:A1:D1:DF:0C:EE:C4:9E
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       019BF42B9F8773284DF0D8D413DD7E66320C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number:          184B
Signing time:             Sun 25 Jan 2026 08:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:58 +0000
Files and hashes:         1: 9o5D51GSwsOnvjKeEAXWW6ZPIsg.roa (hash: wL6/hG46pvL2iY9h35SEgEA1v/RvvMtiaj3l+JXL3X4=)
                          2: FnwKQW5UnLQMReNyfTHKRcvd6kk.roa (hash: UCeEtQwba/ftT20tzo08vD+65NQ/1VW7etax1BQEDTI=)
                          3: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: 30tqy/jByR6RpqCtn9c/kN3lKvYISpmsDddcEoMoeTA=)
                          4: YMqk5erxqcBl_rQ1UMg8ywZDz0M.roa (hash: n9uoqKCqG6Ob4UlpegclYiabrSTMSzoqIVhaQf1T96Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:9f:87:73:28:4d:f0:d8:d4:13:dd:7e:66:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: Jan 25 08:00:58 2026 GMT
            Not After : Jan 26 08:00:58 2026 GMT
        Subject: CN=31ce269d01fcd5ec07a37debf3a1d1df0ceec49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:db:cb:c3:13:ec:cf:ff:31:ae:fe:3d:ff:
                    76:2b:e4:51:78:f3:a4:a5:1c:9e:97:53:75:c4:cc:
                    37:40:20:07:87:54:0b:f0:4a:75:35:2a:e4:54:a1:
                    d3:f9:26:9e:5f:ee:6c:a4:a2:1a:8d:cc:4e:31:4e:
                    48:f1:f9:05:45:12:99:e2:72:98:b0:71:c4:f6:4f:
                    94:d4:34:f5:f6:42:36:e8:68:9f:26:3f:f0:50:0f:
                    94:49:e1:0a:9a:26:f6:ef:76:bc:6b:fc:aa:e9:75:
                    a8:19:4c:7b:36:b7:ad:f0:5f:b7:98:4a:1f:da:c8:
                    2b:3c:c4:28:ed:6e:5e:0a:60:e6:93:ef:0b:5b:9b:
                    d4:1a:e5:e0:84:ac:cb:1d:cf:a0:bf:4f:49:69:88:
                    15:3e:df:6f:d5:21:46:ac:f9:b1:e4:c2:5d:db:23:
                    c6:df:97:a2:29:c2:c8:0a:15:00:8b:56:70:c7:43:
                    b7:1c:61:38:bf:91:b3:a1:e8:e4:87:9b:a3:05:62:
                    dc:c5:c4:1f:6f:16:14:50:b8:12:07:c9:29:d6:9c:
                    76:5d:0e:11:e0:d5:e6:0b:69:3e:a1:98:ba:37:78:
                    db:88:d7:ca:6c:b5:a1:f6:cf:e0:64:51:a3:9e:fd:
                    44:c6:2f:3e:48:68:23:14:73:a3:64:68:7a:5f:70:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CE:26:9D:01:FC:D5:EC:07:A3:7D:EB:F3:A1:D1:DF:0C:EE:C4:9E
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:65:a6:ff:02:4b:db:bb:c1:e8:02:9b:29:b4:78:c7:29:6f:
         69:c8:d5:ff:98:31:bf:01:94:26:6c:ba:d6:7c:2b:51:58:eb:
         f1:13:e4:b7:df:6b:f3:21:bf:5d:59:cb:5b:e3:24:8f:43:a9:
         66:17:11:96:81:ea:cd:15:c7:53:a3:aa:3d:74:39:68:1e:b4:
         b5:86:8c:69:a4:fa:86:b9:02:2b:4e:41:cc:f8:1b:f5:56:dd:
         e8:31:4a:5e:35:73:22:ed:3c:d7:2d:41:e0:7c:1e:6f:49:9a:
         0b:ec:cd:f3:b9:02:2d:3d:3a:a8:b7:7a:36:80:7f:80:07:34:
         0a:b5:3a:a3:f9:0c:0b:24:e9:76:96:ad:56:2b:69:db:da:da:
         c9:2c:96:8a:e9:21:fa:53:17:02:45:a5:5a:12:36:a4:f5:b4:
         db:46:61:3e:65:57:e2:0f:d9:06:e8:b5:11:28:ce:a2:b1:e0:
         56:c0:a4:ce:7d:bb:06:ce:61:06:97:e6:35:f9:e3:13:c4:35:
         7e:8a:c2:c1:65:8e:56:d7:cc:14:52:fd:5f:37:0d:e8:c9:42:
         c8:fe:03:b2:9a:12:6d:48:46:03:29:de:d6:c4:be:4b:6b:0e:
         53:5f:0b:73:da:2f:f7:41:50:5c:49:dd:6f:2f:ec:3b:5d:e8:
         a7:7e:8e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K5+HcyhN8NjUE91+ZjIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjYwMTI1MDgwMDU4WhcNMjYwMTI2MDgwMDU4WjAzMTEwLwYDVQQD
EygzMWNlMjY5ZDAxZmNkNWVjMDdhMzdkZWJmM2ExZDFkZjBjZWVjNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntLby8MT7M//Ma7+Pf92K+RRePOk
pRyel1N1xMw3QCAHh1QL8Ep1NSrkVKHT+SaeX+5spKIajcxOMU5I8fkFRRKZ4nKY
sHHE9k+U1DT19kI26GifJj/wUA+USeEKmib273a8a/yq6XWoGUx7Nret8F+3mEof
2sgrPMQo7W5eCmDmk+8LW5vUGuXghKzLHc+gv09JaYgVPt9v1SFGrPmx5MJd2yPG
35eiKcLIChUAi1Zwx0O3HGE4v5Gzoejkh5ujBWLcxcQfbxYUULgSB8kp1px2XQ4R
4NXmC2k+oZi6N3jbiNfKbLWh9s/gZFGjnv1Exi8+SGgjFHOjZGh6X3AskwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHOJp0B/NXsB6N96/Oh0d8M7sSeMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGWm/wJL
27vB6AKbKbR4xylvacjV/5gxvwGUJmy61nwrUVjr8RPkt99r8yG/XVnLW+Mkj0Op
ZhcRloHqzRXHU6OqPXQ5aB60tYaMaaT6hrkCK05BzPgb9Vbd6DFKXjVzIu081y1B
4Hweb0maC+zN87kCLT06qLd6NoB/gAc0CrU6o/kMCyTpdpatVitp29raySyWiukh
+lMXAkWlWhI2pPW020ZhPmVX4g/ZBui1ESjOorHgVsCkzn27Bs5hBpfmNfnjE8Q1
forCwWWOVtfMFFL9XzcN6MlCyP4DspoSbUhGAyne1sS+S2sOU18Lc9ov90FQXEnd
by/sO13op36OIQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:54 2026 by rpki-client