This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          WxuCA4ASND9mOlAerxJEXSj3irVOkknxD/4dQz4W9Ac=
Subject key identifier:   77:B4:CC:1C:8C:D0:BC:63:5F:5F:8D:ED:49:41:4F:5A:AC:B7:CC:0D
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019BF72CEC8C3175AEA9AE3324598BD161E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          10A8
Signing time:             Sun 25 Jan 2026 22:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:14 +0000
Files and hashes:         1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
                          2: Qb7PambfEf_g09Ayn1nPZWLdckg.roa (hash: D+yE2HfI7/79Gq9M55ucpa9RUw6VzqZoMJhKAGu/cdY=)
                          3: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: NaPaTOeUA7I/4fFgNKQuk7d7CirV9wjTMpWxmrx8FZU=)
                          4: k7SwSm-lR2tiZUN1enrqRZh95B0.roa (hash: F4SSqixujMFRC8AtyIaRgNjOXkxcmSPAezm1/5O7V+0=)
                          5: mr-z6LiGLk9vnc0l0RH_6o8bsBI.roa (hash: UZNObGvWLEcjZGMY4bRXGikOE8QWK4zT7JgfjIfGX9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:ec:8c:31:75:ae:a9:ae:33:24:59:8b:d1:61:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Jan 25 22:01:14 2026 GMT
            Not After : Jan 26 22:01:14 2026 GMT
        Subject: CN=77b4cc1c8cd0bc635f5f8ded49414f5aacb7cc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:64:a9:38:a2:ae:b4:8b:3f:2b:2d:80:d8:
                    f7:4d:21:e3:31:ba:08:bc:68:12:8c:cb:4f:3a:0b:
                    31:1c:8e:63:10:be:1d:d3:4b:64:16:a5:88:5b:e9:
                    f1:a8:4a:c8:99:c7:d5:27:f5:b6:39:31:18:2d:77:
                    72:e1:78:aa:c5:d7:fd:68:66:43:93:ca:c5:d9:66:
                    20:68:b1:b6:89:fa:c2:4d:95:bf:22:34:02:01:38:
                    eb:92:3d:08:2c:f1:9d:01:c4:49:1a:bd:ef:2e:a0:
                    54:97:3c:91:70:0d:03:36:98:38:ad:18:7f:8a:10:
                    3b:30:86:a7:fb:e4:47:89:9f:07:b3:83:72:ed:08:
                    1b:ed:43:e2:0e:30:2e:ff:cb:6c:f8:ff:bf:97:85:
                    92:70:77:22:e4:63:df:f4:99:c8:5b:49:dc:89:1c:
                    55:f8:37:fc:da:f5:64:72:93:28:95:8d:63:8d:f2:
                    6d:d3:39:40:cf:dc:02:ab:0c:74:53:5d:27:cf:e5:
                    03:1e:42:b2:8f:5a:db:1c:53:0e:37:b0:0b:0d:14:
                    7b:bb:e4:81:6f:7c:44:ae:c7:a6:5b:9c:bd:58:99:
                    5a:f3:16:d8:5a:1e:b5:fb:25:ed:7c:17:10:17:d5:
                    dc:2b:2f:e0:dd:f1:96:73:64:35:b2:19:a5:a2:1a:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:CC:1C:8C:D0:BC:63:5F:5F:8D:ED:49:41:4F:5A:AC:B7:CC:0D
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:56:76:95:41:c4:be:ae:bd:62:c7:44:21:be:09:66:50:5d:
         92:64:7d:24:82:7b:38:88:65:5d:28:72:5e:ec:19:50:8d:6e:
         f6:dc:bb:4d:1f:c5:90:ae:c8:ab:c9:f9:a6:b1:cf:7c:e5:00:
         49:2c:8c:57:35:0d:54:35:c5:a8:23:94:5d:db:f2:2d:e9:58:
         b6:66:18:6a:4b:82:92:ba:7a:7a:44:a1:47:55:fe:e4:02:f1:
         66:68:0c:d4:c3:c5:05:ec:bc:70:f1:f3:fd:62:d8:7b:89:bb:
         1c:05:b9:cd:66:f5:ee:d4:76:3f:c4:4c:15:f7:37:cf:aa:ea:
         8d:48:ee:37:ff:d5:4f:eb:dd:25:01:2b:df:a6:d8:80:b6:91:
         68:ac:4f:78:bf:b7:8e:4f:89:62:6d:2f:69:78:8d:6f:c8:ac:
         12:0a:19:38:e9:35:02:b2:87:35:53:c9:26:9d:8e:d6:ad:f1:
         c5:8f:f8:56:ff:98:0c:f4:19:1c:0b:52:1d:67:5c:21:93:a7:
         ed:37:4b:2f:c3:88:65:cd:37:81:02:2c:5e:05:18:5c:33:6b:
         16:a6:d4:50:17:58:79:9b:1f:c7:f7:31:f6:fc:ec:5e:8e:a7:
         72:04:71:0b:eb:ff:57:68:09:fd:06:d6:5b:0a:bb:87:3b:6b:
         e0:93:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:49 2026 by rpki-client