This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File:                     JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier:          VmiDRDkaTSHSviNU8A6d8/ffPs4FtSMXAV+lekRtzuA=
Subject key identifier:   1C:00:07:CC:69:DB:59:98:2B:7F:47:2B:63:43:30:71:2C:EA:5B:E0
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer:       /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial:       019BF2E19EBA3795A777EFA8807CD064F734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number:          08C5
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:31 +0000
Files and hashes:         1: A5wtuBfY6dxUh5eS44FlMqwcmog.roa (hash: tZbTVJ0vSZUIP4JV/ZEsCDLjrfqC4a0hum2qjGz/VQE=)
                          2: C6kXQbmf9ed-Rd3RlEcWQXFNlRk.roa (hash: DW0PJcH29KhjZVwZo0qWO+ll1hc593uNe8QjdzH0uYc=)
                          3: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: 0uBlPuyTpb/rDOfAc6rmAh5plg3VHHxCVA9WhNsnw84=)
                          4: Prtm22vbQehmnlO5aEmPr0BFZa4.roa (hash: 2TJTM+cDnTV/eFEpw6CMVHfCzUzdPWSSepuSHNmY9Qo=)
                          5: ROVyIAsBNfwBer4Npp8bVnXZW2U.roa (hash: Z2rohR1T9JeCw9lXsHTXnEJbzYMGmnxfv3f6fLAZwjY=)
                          6: SN7iUL1ZTDZriT9WldHFs3bgME4.roa (hash: KkH9Un51EAXewil4Qmtkkj2B60LR6wL89EVPG96bBUw=)
                          7: vYV80pMOfJdsEu4niWAcrkBUgNc.roa (hash: gHF1ZhItzUzKri2+egaA2O0GGW8DIyzH1CkBWVld6xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:9e:ba:37:95:a7:77:ef:a8:80:7c:d0:64:f7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=1c0007cc69db59982b7f472b634330712cea5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:1e:3a:97:bd:28:84:05:52:4d:7c:cf:9f:
                    53:78:4a:28:8f:a2:0f:18:eb:fa:b9:1d:09:24:cf:
                    e4:f2:3a:c2:66:7f:e3:60:fc:26:3a:eb:33:e2:b1:
                    86:60:dc:90:37:f1:5b:db:5e:e9:62:30:c9:cc:22:
                    ab:71:5e:7c:43:48:b0:b2:9f:7d:cb:74:48:f3:9f:
                    13:66:57:55:25:da:44:99:01:be:76:4e:8f:e5:64:
                    2c:c0:72:b1:36:af:f9:6d:53:ae:8e:1e:46:af:e5:
                    41:2f:19:19:64:0d:74:45:7d:18:15:4b:17:64:3c:
                    7f:84:84:fe:74:78:ca:9a:37:61:75:9f:33:b4:75:
                    22:66:40:a9:4d:f4:46:8f:21:a9:d6:b4:2c:14:7f:
                    e1:c9:c4:26:22:34:82:d6:f6:9c:49:02:dd:98:da:
                    b9:40:8d:04:58:e5:b2:ce:03:e4:ff:3a:d2:70:46:
                    25:87:a4:d9:97:12:82:11:7d:ce:35:c3:a8:81:5f:
                    be:79:13:48:b5:df:66:d8:dc:63:b7:86:8d:f1:ea:
                    e2:76:e5:2d:0a:77:fa:75:e0:65:ed:bd:10:ff:ac:
                    9e:72:67:c7:b1:dc:3a:ff:c5:9f:4e:48:22:3c:a3:
                    07:aa:f1:1d:86:b6:75:c9:3f:19:5f:e9:6a:ec:69:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:07:CC:69:DB:59:98:2B:7F:47:2B:63:43:30:71:2C:EA:5B:E0
            X509v3 Authority Key Identifier:
                keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:4b:82:21:60:ac:d1:52:93:f5:0e:e9:ae:f8:54:da:f0:
         49:39:ec:fb:15:e1:55:eb:40:9b:ee:35:40:69:25:23:2a:5c:
         6a:db:17:8c:0a:c1:fe:22:ba:d1:ee:72:55:b8:69:3b:6c:c1:
         83:c5:b9:a7:c7:ce:65:35:9b:f1:2d:b9:4a:0e:b7:db:a4:d0:
         b8:48:5c:4c:bd:bb:67:e4:25:ba:e6:41:59:03:58:03:96:55:
         d2:85:ef:08:77:04:8f:ff:87:39:55:f1:ec:dc:7b:c8:a8:87:
         4c:43:a2:1a:e3:b8:e4:c7:b8:b9:ab:b8:72:60:c3:97:59:14:
         66:ba:a5:4e:10:f7:96:a9:88:8e:e5:6d:21:9d:d7:72:d5:1e:
         19:d7:6d:85:12:2e:ce:22:34:68:1c:68:4c:96:17:8e:87:16:
         e5:79:9c:fa:71:6d:79:f4:17:d0:d6:1e:95:ed:27:fe:6c:24:
         1e:f3:39:bd:40:18:48:60:c1:9e:c0:e8:0d:81:04:f5:c8:5e:
         5f:50:24:b0:bf:8b:18:5a:07:86:e0:65:8b:ab:31:28:d5:54:
         18:e4:f7:56:da:a9:7a:ca:14:ed:22:2f:2a:05:00:5a:1d:b9:
         1c:e9:f5:0e:75:57:68:28:3a:a9:52:a9:88:9d:fd:b9:6d:80:
         aa:ff:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:10 2026 by rpki-client