This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          P3dJV77/Zrebbo1MP673k/tVdqUVPHiQtDSkn5vpyRY=
Subject key identifier:   68:11:3E:F8:18:B3:8F:70:78:FE:17:EC:CD:83:9F:C9:1B:C7:4E:92
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       019BF5E31C9411BE304ECC99406FD8BB9611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 16:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:00 +0000
Files and hashes:         1: 12Bkajqn8hY_Tq-T8WCRlP0nznI.roa (hash: jWtonX7g3GC6/5xeR6p1a9rNHCNPlB4P0Uas2A2bjUs=)
                          2: 2HtmQ8xlAJvm0moSCesBLrlqcg0.roa (hash: KEh1A4R7uR3CothDrO5KpNTer5MO9ATqtUH8iwiVnsE=)
                          3: AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa (hash: EfPwurI2AoPqZUYbh42RmCLOoiMjh57uB5KvuqjCpDI=)
                          4: AkkpcfvYgRN9-dBm_sDrZIzwpQg.roa (hash: tVvTVlzi68bWXLrCBZVOAwWEBV5LPqcuZ68tBSNWDQE=)
                          5: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: cts6Y7dQJbtaiWY19XnoW78Y8agy3aA78it7X7r5pEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:1c:94:11:be:30:4e:cc:99:40:6f:d8:bb:96:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Jan 25 16:01:00 2026 GMT
            Not After : Jan 26 16:01:00 2026 GMT
        Subject: CN=68113ef818b38f7078fe17eccd839fc91bc74e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:03:fc:6e:ab:92:ba:33:d8:9d:02:44:0a:
                    ed:b2:5f:d3:20:ad:9d:e0:4f:a2:b9:fc:7c:27:e6:
                    98:fe:23:52:dc:79:6f:93:4c:b2:25:ed:9e:fa:2d:
                    bf:5f:ef:20:46:64:24:45:7d:5f:2c:f6:f3:ac:01:
                    f5:56:ca:c1:56:4b:28:ec:fb:53:66:f5:55:8b:77:
                    1a:4f:9e:9d:65:62:94:9c:af:f0:2b:a0:5a:ea:ce:
                    f6:9c:86:de:4b:e0:58:f0:35:e6:02:0d:6d:9f:ed:
                    7c:49:f8:ae:73:f7:d9:1d:67:d6:e9:3f:b6:5c:cf:
                    bc:78:d4:6a:8d:a9:08:6c:e1:f7:71:11:84:f5:bc:
                    b3:2e:d9:b4:de:23:d8:38:4a:65:be:cc:2b:94:b5:
                    6a:cf:0c:3b:c0:50:24:da:d7:3b:8a:84:21:ce:82:
                    8e:ca:4c:6a:f7:b2:35:a2:63:cd:d9:d9:11:0b:e0:
                    17:a8:9a:dc:51:fb:24:d8:b8:e8:37:d4:37:2f:53:
                    3e:40:55:db:08:6b:a4:b7:62:a4:ee:eb:63:16:e1:
                    aa:7f:02:2a:e4:71:d7:ad:34:8e:5f:7e:2b:e3:fc:
                    59:29:ac:d8:fa:d7:1e:4d:bf:8d:d8:37:bd:f8:e7:
                    45:ac:b9:79:f7:eb:2e:7d:94:cc:33:9b:7d:a3:9e:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:11:3E:F8:18:B3:8F:70:78:FE:17:EC:CD:83:9F:C9:1B:C7:4E:92
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:dc:e3:c3:1c:84:48:d7:45:9d:1b:37:52:ef:51:bc:af:
         6a:4a:72:a8:f4:c0:cb:ca:03:00:a8:24:8a:7a:3e:8e:b5:a9:
         a6:ab:60:bd:20:c9:17:f7:37:5e:3c:a3:ee:74:21:a7:69:98:
         ed:4d:83:63:30:2f:f0:70:12:9d:7e:61:b8:b7:75:2b:22:15:
         03:b9:91:57:6c:b0:bf:19:04:1a:a1:ae:e3:ac:09:49:73:97:
         65:9c:93:92:35:a6:82:8a:3d:a0:8e:e5:3d:3a:d5:04:5b:22:
         2f:5a:b4:82:ee:b9:50:2e:d4:57:8d:39:46:b8:d2:85:64:25:
         2a:27:c2:5e:5b:c5:99:0e:95:91:d9:c4:b9:a6:6b:60:8c:28:
         6b:ac:81:8a:94:73:53:78:6c:c2:a0:2e:07:4d:d8:66:1e:08:
         65:c5:c8:74:c0:f7:25:87:e0:15:2f:a6:c8:0d:1d:2f:8e:f6:
         2e:57:fa:7e:ab:10:00:54:5f:07:3d:6f:3d:81:a7:39:74:23:
         43:b1:e9:c0:be:0a:fe:a6:c6:35:58:eb:8f:6e:b8:42:39:12:
         de:80:ac:26:91:2a:32:bb:e6:58:4f:0c:c6:d6:8e:a5:40:87:
         72:67:0a:9d:ad:38:0a:a7:59:0b:40:39:fd:fe:c5:2a:aa:f7:
         75:c2:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:12:43 2026 by rpki-client