This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          H5HvCDoRNori7q/jtf74Sd6Mh9kjNlxF4pI8Fro7U30=
Subject key identifier:   F9:2A:42:08:F6:8A:2F:8E:D9:AB:A2:9F:E8:57:12:05:FB:6F:39:E7
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       019BF7D1869E9CE7FE17765DCF94B19270DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          1289
Signing time:             Mon 26 Jan 2026 01:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:02 +0000
Files and hashes:         1: 1IIEvGygvpoLAGhzsQa0AFiSc6c.roa (hash: IlEP7k2pN5p03aEIwdfyX+8YwJkY7uWP4+Wsd4o4ZfU=)
                          2: 7dyvMJC9soHwC2C-qKBNN8Swy1E.roa (hash: ThU9QlnbHrk5sj3VeLKsVi1YledN8CGPHeD+PwkC7Pk=)
                          3: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: M7JeVctwqSwtCjD2FwN/R/NentyBK+m1K1F8xr7ZdOk=)
                          4: iAMQWeS9GMw3TAa5hDTAT6s825g.roa (hash: 2q1sFbCAgulgub3q2AGPYNHWFrfFNMkKFSc13dmp7t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:86:9e:9c:e7:fe:17:76:5d:cf:94:b1:92:70:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: Jan 26 01:01:02 2026 GMT
            Not After : Jan 27 01:01:02 2026 GMT
        Subject: CN=f92a4208f68a2f8ed9aba29fe8571205fb6f39e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:ed:37:66:c8:ce:3d:21:a5:f4:e6:92:54:
                    db:ec:04:c0:36:17:9b:87:0c:e0:e0:78:af:7b:40:
                    da:96:6b:e3:3e:d2:f6:df:ea:c0:60:6b:fa:5f:98:
                    c6:5e:9f:07:bc:66:ef:f9:54:3f:2c:a3:79:a7:1f:
                    c6:10:5f:40:b3:4b:96:53:45:23:50:93:6f:27:d6:
                    a6:7e:5b:9e:4c:e7:bf:68:a7:83:d7:c3:32:e0:56:
                    49:77:e0:33:86:75:70:14:07:8f:ac:66:19:a2:85:
                    57:7a:48:b4:58:96:33:4d:69:1e:20:3a:5e:92:6a:
                    55:b8:03:f8:2b:93:07:77:97:86:52:93:9b:9d:47:
                    2f:97:bf:b2:6b:39:1a:04:88:bc:df:43:51:0e:b7:
                    7c:99:4e:ed:c1:67:e4:fe:1d:15:4f:30:26:ff:a9:
                    08:df:09:af:ab:78:43:4f:0d:5e:10:39:61:02:81:
                    78:6c:c6:c0:5a:18:c8:b1:d8:1f:96:49:f6:a1:33:
                    ec:a0:a8:76:c0:5c:bf:db:4f:52:8b:12:94:80:69:
                    65:03:f0:10:f7:75:d2:66:f1:39:65:e9:8b:77:3b:
                    74:0c:d8:69:15:14:40:f8:ac:92:df:ca:3c:d8:b7:
                    83:5e:36:13:28:b6:5d:7a:dc:8f:0d:19:96:fd:a3:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:42:08:F6:8A:2F:8E:D9:AB:A2:9F:E8:57:12:05:FB:6F:39:E7
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:b4:5c:fe:a5:fa:53:a8:a6:64:1e:7f:55:33:b8:a0:78:
         e3:24:43:0a:de:a9:2f:17:04:e9:23:83:48:04:97:4b:14:1b:
         68:35:63:b6:3d:65:7f:31:b2:29:bf:0b:bc:30:3f:79:f6:cd:
         99:ad:e9:cc:3f:55:13:02:14:90:2b:a7:78:f9:a1:cb:2c:ed:
         44:ba:e6:ec:30:44:e6:8e:e5:8d:42:17:95:0a:9e:f7:9b:15:
         e9:b1:2c:a7:41:30:c0:4c:eb:d4:20:9c:93:62:82:81:5c:10:
         58:05:05:cf:3d:50:eb:97:ca:0f:ec:28:02:9a:59:ea:b4:e9:
         f2:f9:dd:25:90:67:9e:04:91:56:69:98:d9:33:ad:5f:41:92:
         19:b6:cb:b0:4d:dd:cc:1c:61:cd:b6:96:77:60:1f:1e:e1:cb:
         ea:10:35:9c:58:2d:bd:2b:e4:ce:63:b4:71:17:a9:51:67:c2:
         3a:c0:e4:cf:dc:c4:ed:35:e2:91:51:19:9d:83:9f:47:1c:7e:
         02:e7:31:26:ad:b5:2b:88:cc:45:ae:04:79:6b:10:b8:cd:c1:
         1b:f5:d6:90:f5:d0:71:fd:1c:3b:8a:a8:26:2b:59:43:d2:b6:
         7b:b0:9b:35:fe:d2:5f:43:cf:65:73:7e:00:f2:78:3a:56:b2:
         70:4b:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:47:20 2026 by rpki-client