This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          tyV0LP3n5J3DQZ+jiTbkGwmqOXHj2pa6uAwli2btO9M=
Subject key identifier:   37:84:74:60:81:55:75:6D:F9:5A:B8:41:93:EF:16:62:BB:3C:55:3B
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       019BF8765D0CD136851FED7EE2D38EF9CF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          146F
Signing time:             Mon 26 Jan 2026 04:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:05 +0000
Files and hashes:         1: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: V3hnBISzTen+0yLskTps+5AyHK6wYfnDBV0XwcbvTn8=)
                          2: aXD0FFNchQkwK34CB80vuVCFnu8.roa (hash: 7EgFfEGEl824yez9iLAftyJ4zvdxuachpWpx1Yo48rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:5d:0c:d1:36:85:1f:ed:7e:e2:d3:8e:f9:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Jan 26 04:01:05 2026 GMT
            Not After : Jan 27 04:01:05 2026 GMT
        Subject: CN=378474608155756df95ab84193ef1662bb3c553b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:8b:15:8e:4b:8d:d7:45:74:11:15:4e:9c:
                    43:26:86:30:8d:ab:df:20:19:14:9b:d5:a0:7c:2e:
                    d9:b9:d9:16:f3:6f:bc:49:73:43:f9:63:59:6f:d2:
                    ef:a3:7f:70:e2:4e:e0:b1:10:7d:08:9f:83:f0:0c:
                    69:31:d8:22:8a:f5:dd:52:1a:e8:b5:16:3f:61:7e:
                    f5:09:5b:40:aa:31:0e:ba:34:ea:e8:97:4b:b4:5b:
                    14:a7:04:1f:e1:77:78:17:9b:cf:2c:a5:1e:dc:56:
                    a6:75:25:e2:9e:c4:f3:e3:ce:3f:49:a3:96:9d:5c:
                    39:79:51:fd:50:2f:5b:ae:6c:6e:80:03:20:f6:70:
                    04:e9:05:79:32:43:98:c0:fb:a5:b8:0d:55:e8:94:
                    a4:15:c6:ec:7b:3b:84:bf:0d:d2:11:f8:2d:23:86:
                    36:95:84:67:6e:47:1f:b1:1c:5d:de:a9:eb:05:4d:
                    68:52:2b:62:dc:5a:7e:1b:13:bd:8d:ec:bb:12:43:
                    db:0c:e1:b7:13:f0:ff:ae:09:f2:d3:06:e7:12:ba:
                    56:d0:fd:d7:f0:60:6f:11:7d:59:8a:79:a2:df:82:
                    3e:ee:f9:bd:6e:34:4a:04:41:ae:cc:9c:b2:e2:4b:
                    fb:48:ad:06:8f:bb:e5:04:b3:bd:85:f7:71:a4:7f:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:84:74:60:81:55:75:6D:F9:5A:B8:41:93:EF:16:62:BB:3C:55:3B
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:f8:eb:5c:fa:47:28:9f:b8:5b:e2:b6:c4:8d:ae:07:fe:
         5e:82:4a:87:da:57:83:de:4d:d6:39:78:66:6b:00:78:a3:65:
         99:00:98:0b:80:99:48:4e:8f:6b:14:b5:8a:3a:a6:18:a4:2b:
         72:84:bd:1a:1e:ff:78:1a:7c:d7:df:ce:28:e6:78:c7:db:c3:
         bd:36:19:98:89:30:3a:60:b2:fe:87:8f:7c:e0:cb:7e:68:f0:
         a0:72:a7:2b:ca:8a:34:f8:51:0c:c2:bf:f8:74:bf:8e:a2:68:
         1e:6a:b0:c3:ca:32:e0:69:7a:39:56:5f:0d:c2:08:08:bf:60:
         50:5f:a9:74:03:8a:cd:a4:0b:06:e6:88:d8:33:a8:4d:b4:38:
         dd:20:40:de:4a:c8:0e:ab:1b:ff:d0:c1:c7:0a:9d:08:05:39:
         3a:90:cb:a6:85:63:33:b9:09:fb:5f:2d:ae:c8:93:d0:0c:89:
         d7:4a:a3:f4:00:6f:93:5b:1a:38:f1:12:92:9b:ed:f8:8b:31:
         32:46:4f:04:db:e6:7b:b0:fd:8f:5f:5f:bf:02:df:29:60:00:
         0a:8a:51:17:82:68:de:a2:7c:5a:18:95:76:59:41:81:40:9b:
         58:5f:53:90:19:bf:fe:02:8c:8a:31:b7:28:72:80:15:ec:19:
         4e:41:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:43 2026 by rpki-client