This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          vDPqq1xbqvGR0j5DfAaXrxR9Iu9OL7LOihfCKWiH4IA=
Subject key identifier:   5D:CF:7B:D8:CA:EB:59:C6:1D:65:8A:40:3C:63:70:9C:40:11:00:1C
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       019BF68835D4FCCFE1EFACE3FC47072DD5AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          0F4D
Signing time:             Sun 25 Jan 2026 19:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:20 +0000
Files and hashes:         1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: OefrqMcnA7SKkBNP52T8JL4L/N9Wx2KgSB2zIb5sCWk=)
                          3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
                          4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:35:d4:fc:cf:e1:ef:ac:e3:fc:47:07:2d:d5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Jan 25 19:01:20 2026 GMT
            Not After : Jan 26 19:01:20 2026 GMT
        Subject: CN=5dcf7bd8caeb59c61d658a403c63709c4011001c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:17:96:a7:3e:b3:33:5d:d2:7a:b5:5b:6a:
                    61:07:7a:c2:e3:6c:b0:bf:02:e4:65:ef:73:a6:bc:
                    c5:1f:2f:7e:74:6f:41:a8:9b:75:db:d1:4e:7b:de:
                    1d:ae:5f:14:ae:fb:31:b5:f6:c3:d7:e1:49:42:e3:
                    d6:92:01:36:03:d0:58:d1:b2:18:58:c6:7c:f2:4c:
                    30:93:45:23:14:8f:b1:1f:95:5b:a5:ef:7e:c2:02:
                    3d:77:f5:b5:ff:94:60:22:65:02:a8:88:a1:f9:51:
                    d8:c1:c9:ef:3a:89:2d:79:1b:b8:56:65:f0:35:15:
                    2d:11:9b:1c:d8:9c:bc:64:c8:46:9a:ac:67:47:15:
                    cf:41:b3:10:12:55:e0:3a:b7:db:7e:d9:95:db:a7:
                    c4:81:e6:eb:52:cf:e1:66:fd:70:69:1d:b7:17:8b:
                    f3:4f:6b:83:48:ea:3a:ff:7b:1e:ef:42:9f:12:ac:
                    91:cb:2f:fe:21:c9:73:66:9c:b5:b1:c9:59:8e:f9:
                    24:dc:48:4f:ba:32:18:46:89:62:98:16:d8:db:eb:
                    3a:15:41:64:f1:f9:ca:cd:63:2a:02:8a:8b:a8:c0:
                    9e:3c:73:11:2e:0d:23:00:d9:fc:8d:58:01:d4:5c:
                    40:14:73:59:4b:f1:82:aa:90:8c:bb:d1:d2:6e:20:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:7B:D8:CA:EB:59:C6:1D:65:8A:40:3C:63:70:9C:40:11:00:1C
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:80:27:63:08:29:68:6b:d4:3f:53:84:d9:33:84:2c:48:
         23:a9:38:a8:9e:c0:df:35:03:f8:f8:c7:23:87:3a:10:47:2c:
         78:1c:4c:47:62:6d:fd:98:f7:dd:16:9e:35:74:e6:ee:33:ed:
         99:6b:97:8c:83:82:f5:fb:a6:47:01:56:16:e5:89:a5:0e:66:
         81:4b:88:af:37:72:db:0d:25:52:af:6d:ff:13:65:e8:16:16:
         c9:46:56:b7:8f:76:17:f3:bd:b3:8f:49:9b:fd:d4:54:a5:46:
         75:ef:24:f6:8c:0f:70:d2:42:51:6b:f2:bc:42:88:f5:e2:85:
         e9:54:e5:c8:53:30:60:07:5e:d6:84:1e:46:52:03:35:2e:55:
         a3:1b:67:be:bb:aa:75:3c:dc:c6:50:30:06:79:fb:e6:28:ff:
         41:5a:d8:2a:c4:26:bd:29:53:af:2f:a7:89:d1:9c:16:5c:2a:
         7e:c8:92:ed:4e:0b:7b:9b:29:d9:e1:4f:b5:b1:d8:c4:e0:40:
         4a:89:3a:42:c8:d0:7e:34:fd:14:be:67:a9:cd:2e:17:65:1a:
         a2:f8:5b:d6:6e:f6:05:56:c6:a8:74:ba:db:29:72:35:de:da:
         81:4c:49:bc:4c:a3:26:fe:01:8d:bc:18:31:fe:5a:21:e3:b8:
         06:7a:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:51:53 2026 by rpki-client