This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File:                     Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier:          HGJ37uTiFg0bc+mL287H9uft+xO4gC+VsUBQ1IOGevo=
Subject key identifier:   37:83:8F:27:B6:93:8A:63:BE:96:38:74:11:68:3F:15:38:D1:8D:C2
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       019BF83FABD2B0D90093934C8AAC7957F1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 03:01:20 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:20 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:20 +0000
Files and hashes:         1: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: SYfNgr3i6IprFDkZBXFomZnuK+yhhAqjFJALkvw4Jks=)
                          2: LSc0zZT14Jo7EI4R2womLi4BWXw.roa (hash: /t+Y52iuLvhD9G1Nt7yXlLrqwqdhR3k7UUDI+0b7Jck=)
                          3: RJf7_BZh630LGIaBvGR48OfaOYM.roa (hash: vStLRSl6R9d4MF0nfflCotGK33XI7Q9JgJmQ0UQ6+co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:ab:d2:b0:d9:00:93:93:4c:8a:ac:79:57:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Jan 26 03:01:20 2026 GMT
            Not After : Jan 27 03:01:20 2026 GMT
        Subject: CN=37838f27b6938a63be96387411683f1538d18dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:b4:ad:18:3d:12:91:d6:12:22:a9:39:29:
                    60:d4:cd:f6:a1:78:8d:ad:54:3a:15:6e:cf:1a:0b:
                    80:45:34:3b:e4:93:e2:45:1f:ce:9b:4a:f7:44:f6:
                    65:31:23:73:01:0d:b9:c6:fc:1d:23:29:96:71:f3:
                    9a:39:e7:e2:9a:fc:d4:f5:c0:01:0c:84:e4:e9:08:
                    90:80:1c:70:12:28:06:57:8d:b4:4e:77:d0:0d:04:
                    55:9d:13:95:17:de:e0:8f:6a:a8:14:b5:93:9b:e4:
                    84:a0:00:eb:ba:1a:d5:a5:ca:34:f1:7d:95:07:4d:
                    03:13:db:b1:2c:ff:68:ed:da:08:42:d7:fc:1c:45:
                    db:b7:b3:5e:10:5e:3f:38:60:a0:8b:4f:81:33:d6:
                    1b:33:b0:0d:e3:8c:e2:ff:1b:9b:42:1f:eb:07:2d:
                    f7:e9:71:f2:e4:0b:2a:ce:d0:7b:02:ab:09:67:3c:
                    ed:8b:07:7e:bf:dc:48:04:e9:25:5b:6e:63:ea:4e:
                    d8:6f:c4:d9:9d:a1:31:77:ff:e2:b9:90:d2:82:5c:
                    70:48:2b:f1:52:05:37:55:31:cd:68:68:9e:a5:47:
                    87:9f:e6:0b:57:d2:7b:5c:03:a0:bf:b2:5a:79:1a:
                    0a:c3:fe:6a:33:69:72:27:a8:17:b1:61:d9:fa:cf:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:8F:27:B6:93:8A:63:BE:96:38:74:11:68:3F:15:38:D1:8D:C2
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:03:dc:77:4f:ce:45:b1:a9:e7:24:80:b1:33:19:b7:69:4c:
         88:02:9c:cb:da:a7:4b:93:42:ea:15:0f:f8:ee:97:c3:da:95:
         97:30:c4:f7:a7:5d:de:66:b7:24:c0:0b:6c:4e:8a:e3:12:a6:
         7d:ad:8d:c0:25:10:11:c8:6e:fd:83:7e:a7:ed:c4:15:17:5f:
         5e:ce:6b:48:19:a6:16:f1:5d:ec:a8:88:9e:a3:bc:e9:4a:ef:
         75:9e:d3:04:f8:b1:f0:d6:cf:59:2e:0a:74:06:69:36:56:fe:
         71:e6:70:17:ae:1b:4a:9e:49:38:da:ee:33:58:43:66:e4:9b:
         9a:38:a1:16:6b:39:02:8b:33:76:c6:2b:c1:88:ad:40:b3:89:
         4b:b6:57:c5:04:35:a2:36:a1:3d:dd:6e:df:7b:b0:ef:53:9b:
         57:76:6f:3f:1a:85:d0:12:2d:c9:ca:2e:93:73:cb:2a:bc:2c:
         fc:d9:81:e4:33:14:30:59:c9:29:a1:6d:df:e6:a2:90:be:02:
         37:c8:e7:7f:2c:99:70:fb:dc:c4:37:a8:bd:47:3f:01:3e:42:
         50:9f:e2:03:02:e9:c0:c4:84:ad:6e:99:19:fb:74:64:25:50:
         72:52:d7:0d:fa:59:1a:f0:8a:e4:37:10:9f:56:f8:e9:a7:cb:
         48:f8:1c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P6vSsNkAk5NMiqx5V/GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRkYWUwNGRiY2IxZjgyZjU1YjA3ODMwN2JhNGIwODRi
OTk0YmIwHhcNMjYwMTI2MDMwMTIwWhcNMjYwMTI3MDMwMTIwWjAzMTEwLwYDVQQD
EygzNzgzOGYyN2I2OTM4YTYzYmU5NjM4NzQxMTY4M2YxNTM4ZDE4ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd20rRg9EpHWEiKpOSlg1M32oXiN
rVQ6FW7PGguARTQ75JPiRR/Om0r3RPZlMSNzAQ25xvwdIymWcfOaOefimvzU9cAB
DITk6QiQgBxwEigGV420TnfQDQRVnROVF97gj2qoFLWTm+SEoADruhrVpco08X2V
B00DE9uxLP9o7doIQtf8HEXbt7NeEF4/OGCgi0+BM9YbM7AN44zi/xubQh/rBy33
6XHy5AsqztB7AqsJZzztiwd+v9xIBOklW25j6k7Yb8TZnaExd//iuZDSglxwSCvx
UgU3VTHNaGiepUeHn+YLV9J7XAOgv7JaeRoKw/5qM2lyJ6gXsWHZ+s/jKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeDjye2k4pjvpY4dBFoPxU40Y3CMB8GA1UdIwQY
MBaAFCa92uBNvLH4L1WweDB7pLCEuZS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAt
ZjYxNzlhOTEwYjE1LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mZWIzYmEtZWU5MC00ZjAzLTllMDAtZjYxNzlhOTEwYjE1
LzEvSnIzYTRFMjhzZmd2VmJCNE1IdWtzSVM1bExzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQPcd0/O
RbGp5ySAsTMZt2lMiAKcy9qnS5NC6hUP+O6Xw9qVlzDE96dd3ma3JMALbE6K4xKm
fa2NwCUQEchu/YN+p+3EFRdfXs5rSBmmFvFd7KiInqO86UrvdZ7TBPix8NbPWS4K
dAZpNlb+ceZwF64bSp5JONruM1hDZuSbmjihFms5AoszdsYrwYitQLOJS7ZXxQQ1
ojahPd1u33uw71ObV3ZvPxqF0BItycouk3PLKrws/NmB5DMUMFnJKaFt3+aikL4C
N8jnfyyZcPvcxDeovUc/AT5CUJ/iAwLpwMSErW6ZGft0ZCVQclLXDfpZGvCK5DcQ
n1b46afLSPgcwA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:01:58 2026 by rpki-client