This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File:                     JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier:          03YSHLrg8loJnoT0CtiyP+GececRyBHBfRKH7CK4YrI=
Subject key identifier:   EE:79:E8:FE:79:9C:C4:BB:8F:10:04:34:24:FC:28:AF:0A:E0:D7:73
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer:       /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial:       019BF35081090127CBCE45B156677E80D9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 04:01:37 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:37 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:37 +0000
Files and hashes:         1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
                          2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: 15VtykC6jf06Q2jwUAcfF26Vvd9/wqRXLa0kIwiHq6Q=)
                          3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:81:09:01:27:cb:ce:45:b1:56:67:7e:80:d9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
        Validity
            Not Before: Jan 25 04:01:37 2026 GMT
            Not After : Jan 26 04:01:37 2026 GMT
        Subject: CN=ee79e8fe799cc4bb8f10043424fc28af0ae0d773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:8e:7a:bb:61:50:73:e2:d5:0d:2d:67:2d:
                    aa:91:89:c1:46:1b:cb:e1:70:8f:ac:22:c6:1b:c1:
                    22:23:49:ec:f9:68:fb:fd:aa:41:84:95:95:b6:2b:
                    c9:f9:d9:fc:72:76:55:44:7d:79:9d:dd:19:4c:83:
                    80:a0:94:9c:62:a5:56:02:8b:4b:79:eb:ff:b2:e2:
                    f2:1a:89:b4:87:a3:91:c9:0e:62:58:52:6b:ca:aa:
                    87:18:e8:4d:8a:3c:49:14:1b:2f:26:60:ce:05:fe:
                    b9:3b:33:a9:6f:5c:41:c3:9d:f3:77:4d:af:51:85:
                    a4:2e:ce:ad:17:44:54:b1:d6:86:61:05:35:52:6e:
                    1f:86:ce:fa:41:33:3f:b3:71:93:6c:d0:87:a5:aa:
                    31:a5:6f:98:5f:be:a6:6c:67:4f:b3:1f:96:84:95:
                    44:75:2f:fa:e8:75:f5:92:d1:90:7e:08:1e:4a:66:
                    a9:2f:0a:fd:58:c6:30:38:f9:5e:64:d3:4a:c5:d6:
                    35:d6:ee:77:a0:a1:98:13:1d:5c:15:29:c2:cf:0a:
                    aa:6b:30:af:65:54:22:fb:11:19:fb:37:1d:df:ee:
                    af:78:14:4e:18:2b:9f:9e:ee:fc:7c:09:bf:86:b2:
                    c4:af:1c:55:7b:2e:e0:bb:50:0e:f9:8d:1d:95:77:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:E8:FE:79:9C:C4:BB:8F:10:04:34:24:FC:28:AF:0A:E0:D7:73
            X509v3 Authority Key Identifier:
                keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:db:88:97:f6:bf:ab:41:d3:38:4e:49:aa:8b:a5:a3:ae:
         03:a6:5f:cb:d0:66:c4:80:6c:bf:5c:cc:5f:08:db:6f:13:a1:
         b8:15:13:4b:fc:81:66:56:f2:c1:f6:ea:d2:f9:3d:d5:28:17:
         17:b1:4c:55:0d:55:57:9b:dd:d5:ec:8f:dd:ea:52:87:79:05:
         c9:f4:56:46:75:e9:db:72:4b:c4:35:3a:00:5f:66:f4:02:73:
         d1:30:3f:d9:60:66:56:5c:cb:ef:df:c2:e9:67:27:6c:b6:a4:
         c6:7f:55:e1:13:08:d2:50:c1:e9:25:d4:ab:c9:b9:c6:57:0f:
         78:f4:36:81:12:ff:f1:e0:31:7f:1b:6a:a7:13:ac:ef:5d:fd:
         d3:e8:b5:83:13:44:20:ad:9f:6e:3e:59:99:45:15:33:88:ee:
         f3:cd:c7:9e:63:c4:8a:e5:9e:de:bb:69:f0:dc:b1:90:96:6e:
         4a:be:3c:bd:30:bd:1e:3b:40:91:96:a8:27:5e:53:ee:92:b5:
         12:d3:60:07:28:c1:99:3f:c1:37:cd:69:f5:70:a9:20:5a:29:
         0d:ac:60:ed:b5:ad:c9:d7:8f:8f:a2:a6:bd:56:bd:0d:e4:58:
         f4:c0:0d:fa:85:74:9d:14:ff:fa:8a:15:bd:e3:f0:e5:c4:c9:
         e8:8d:4b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUIEJASfLzkWxVmd+gNnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl
YjA2YmYwHhcNMjYwMTI1MDQwMTM3WhcNMjYwMTI2MDQwMTM3WjAzMTEwLwYDVQQD
EyhlZTc5ZThmZTc5OWNjNGJiOGYxMDA0MzQyNGZjMjhhZjBhZTBkNzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qCOerthUHPi1Q0tZy2qkYnBRhvL
4XCPrCLGG8EiI0ns+Wj7/apBhJWVtivJ+dn8cnZVRH15nd0ZTIOAoJScYqVWAotL
eev/suLyGom0h6ORyQ5iWFJryqqHGOhNijxJFBsvJmDOBf65OzOpb1xBw53zd02v
UYWkLs6tF0RUsdaGYQU1Um4fhs76QTM/s3GTbNCHpaoxpW+YX76mbGdPsx+WhJVE
dS/66HX1ktGQfggeSmapLwr9WMYwOPleZNNKxdY11u53oKGYEx1cFSnCzwqqazCv
ZVQi+xEZ+zcd3+6veBROGCufnu78fAm/hrLErxxVey7gu1AO+Y0dlXegoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO556P55nMS7jxAENCT8KK8K4NdzMB8GA1UdIwQY
MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt
MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3
LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmjbiJf2
v6tB0zhOSaqLpaOuA6Zfy9BmxIBsv1zMXwjbbxOhuBUTS/yBZlbywfbq0vk91SgX
F7FMVQ1VV5vd1eyP3epSh3kFyfRWRnXp23JLxDU6AF9m9AJz0TA/2WBmVlzL79/C
6WcnbLakxn9V4RMI0lDB6SXUq8m5xlcPePQ2gRL/8eAxfxtqpxOs71390+i1gxNE
IK2fbj5ZmUUVM4ju883HnmPEiuWe3rtp8NyxkJZuSr48vTC9HjtAkZaoJ15T7pK1
EtNgByjBmT/BN81p9XCpIFopDaxg7bWtydePj6KmvVa9DeRY9MAN+oV0nRT/+ooV
vePw5cTJ6I1LcA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:39 2026 by rpki-client