This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          3XCnDl23WvkgY6k8t+7sZFM8V22yYcShH/COM807Zo0=
Subject key identifier:   A8:92:94:CF:8C:1B:1D:8D:08:1D:6A:8D:AB:C9:1D:88:6F:AC:4C:49
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019BF50728F9004C6F34DE226BBD90824977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0E3C
Signing time:             Sun 25 Jan 2026 12:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:45 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: EYEi3UyV4PPxbsXZPvHf3qct6b0.roa (hash: J8PkbU826kQSW013HrTZ3nJm8J4WQxOLN5tFHZuHLNw=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: lRdeGE+//nbly5LErO+dj0NIZp8bucZwCenpcKeevxY=)
                          4: abClcaJF9Pz5P-aPFdTiX1324wo.roa (hash: y9xq/HgVZ9OrpJC9mppsc8uPLkL4WQBTwePMbo3kLgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:28:f9:00:4c:6f:34:de:22:6b:bd:90:82:49:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Jan 25 12:00:45 2026 GMT
            Not After : Jan 26 12:00:45 2026 GMT
        Subject: CN=a89294cf8c1b1d8d081d6a8dabc91d886fac4c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:06:c6:15:d7:d5:d7:9b:ee:f8:a7:6a:4f:
                    8c:ee:a8:d7:8f:1c:4f:bc:2a:3e:cf:c2:cd:77:86:
                    c4:4e:bf:e3:c8:4e:3e:a8:e4:c3:61:f6:8a:b4:9c:
                    16:35:24:0f:4c:4a:59:79:c2:47:b7:fd:5f:c4:60:
                    84:38:87:bb:64:c3:a5:62:04:4c:cb:0c:16:1c:9e:
                    74:b5:3a:d5:71:11:c8:d5:a7:d9:ea:7c:74:75:e9:
                    76:4a:25:b4:a0:75:3c:99:65:56:d1:d0:fb:27:5c:
                    32:5f:ac:ee:20:ee:24:05:69:8d:24:f7:d1:4d:0f:
                    bc:66:08:31:34:d4:a6:3e:c1:b2:c8:77:b3:bb:6e:
                    b3:b0:20:8f:eb:91:6d:62:16:63:96:8d:17:e9:53:
                    69:92:15:61:09:25:3f:71:95:7e:58:7c:a3:2b:ed:
                    df:bf:97:fe:1b:e9:2a:67:df:20:3d:7b:57:6a:05:
                    ae:7f:6e:56:fc:e8:ae:be:a5:17:d9:6f:1a:41:b4:
                    fd:c1:72:e6:37:11:09:32:dc:23:2c:1e:96:2a:e2:
                    6d:f9:99:c3:b8:3a:30:ae:03:69:b2:c1:f5:5a:9a:
                    bd:f4:17:5e:55:85:54:34:62:0c:0e:87:55:d1:a5:
                    1b:f8:d2:8f:cf:a3:e3:26:15:69:c8:9a:19:fc:ff:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:92:94:CF:8C:1B:1D:8D:08:1D:6A:8D:AB:C9:1D:88:6F:AC:4C:49
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:78:46:21:d7:47:25:86:b4:c1:c3:ad:b6:65:13:c6:6f:eb:
         36:bd:33:ce:32:98:58:c6:99:52:15:7c:ef:c2:c9:7a:17:26:
         4b:40:1f:dd:ea:9b:7f:f0:d2:35:35:dc:da:d2:1f:52:d1:1a:
         4a:38:b0:0f:d2:40:9c:b3:d4:9e:6c:f2:93:1d:b0:bc:25:7a:
         dd:46:df:be:33:6a:bf:73:4a:84:27:bb:95:d8:c0:42:87:c4:
         4f:28:eb:7b:79:d9:aa:9b:99:29:8f:67:a3:ee:03:f8:3f:c7:
         65:73:f5:43:7a:88:b4:95:6e:ab:10:0d:45:06:7f:b8:5f:f6:
         a3:54:47:2e:d2:62:a1:83:14:b9:1d:a3:11:dd:e0:46:81:11:
         f8:cf:39:f5:bf:ce:06:78:3b:7d:1d:af:0a:7f:ab:48:d0:c6:
         31:fe:8f:4e:bc:69:f8:02:37:57:de:09:4b:b6:88:02:8c:dd:
         64:0a:91:16:9d:45:26:0c:8e:49:68:9d:80:a6:93:b7:ab:94:
         39:f7:11:c9:73:f0:57:85:6b:13:5d:18:0a:e4:25:c6:b9:97:
         47:7c:77:5b:83:4e:0f:6c:e9:e6:3c:ee:f0:4e:97:14:05:6a:
         8f:92:1d:7f:80:2f:30:91:d0:c6:31:50:c1:38:9a:98:77:0b:
         f4:4d:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:38 2026 by rpki-client