This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File:                     jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier:          /7jcw1xuE3TtYtTIr18GH086j/nzPm5ppODQG0UyvpM=
Subject key identifier:   C3:75:45:9F:B4:44:F9:DB:37:48:C9:4D:BB:70:9E:58:D3:D4:8B:3B
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       019BF3BE05AB3DACCA4F3CF584B7987BFDC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number:          13CC
Signing time:             Sun 25 Jan 2026 06:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:15 +0000
Files and hashes:         1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
                          2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: aLwm/8IXz1tMTdt/OO6fnb2AiY6GnGe6KeNSWAa9+pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:be:05:ab:3d:ac:ca:4f:3c:f5:84:b7:98:7b:fd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Jan 25 06:01:15 2026 GMT
            Not After : Jan 26 06:01:15 2026 GMT
        Subject: CN=c375459fb444f9db3748c94dbb709e58d3d48b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:02:d7:38:41:74:30:76:9c:2b:c3:a5:65:37:
                    6b:a4:e9:65:80:c1:73:91:49:c7:14:9e:35:47:ed:
                    ee:40:45:cd:9e:a1:c8:08:e7:2a:f3:b8:30:8f:e6:
                    37:9d:a5:5d:ff:92:85:5d:9f:fe:2a:f2:f6:82:e5:
                    4f:07:45:25:09:60:97:1e:e0:c7:96:30:11:ee:72:
                    ce:27:d1:07:ab:60:a3:29:e1:0e:cf:8a:c1:c2:04:
                    d7:1a:f7:d5:af:db:5e:75:c4:8c:ba:92:fa:2a:1f:
                    92:b0:b6:ed:7b:7f:20:1d:8b:c1:b0:06:c0:4a:ab:
                    40:1e:8a:0b:3d:14:4d:c7:06:b6:d3:4a:29:10:a2:
                    fe:ef:9e:ea:5e:62:0e:9f:d6:8b:d5:ca:0f:42:79:
                    9e:ff:8c:64:c3:30:24:cf:7e:3f:16:36:44:f7:c7:
                    69:3d:19:43:a4:22:fd:1d:b8:fd:ef:05:18:b7:f1:
                    ec:3a:cb:ae:fb:51:87:22:48:4a:38:d4:ac:d4:01:
                    94:a0:37:b5:12:cd:f3:ed:cd:34:a8:09:be:77:11:
                    5a:30:bd:e7:bb:19:f5:3d:be:77:d3:d6:d2:0f:07:
                    4a:00:93:a4:3e:ba:bf:c6:02:54:fb:21:94:8d:3d:
                    63:32:e6:90:8b:dc:85:e2:21:67:9d:5c:af:48:fe:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:75:45:9F:B4:44:F9:DB:37:48:C9:4D:BB:70:9E:58:D3:D4:8B:3B
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:f4:01:99:02:cf:47:39:5b:a9:b0:10:e3:71:50:bf:b9:
         61:9e:18:88:b5:f5:d5:08:31:57:4f:b0:7e:8a:d6:4f:5d:67:
         72:dd:89:0a:04:61:f8:43:e9:a4:65:84:3f:9b:5e:1b:4b:8e:
         ce:d6:c3:1d:56:3c:4d:72:76:85:78:15:25:57:95:a5:f5:43:
         d6:f3:28:d8:3d:a7:89:b1:d2:b3:55:6d:08:4a:a1:84:e8:28:
         bc:e8:5b:48:af:60:0e:06:d7:09:35:16:b0:3c:7e:35:f4:04:
         2b:a5:27:b1:42:e9:25:16:20:8b:73:79:66:f1:cd:e3:d7:d2:
         ce:a6:06:2d:76:f8:e4:d8:72:38:07:0b:9f:ff:8b:2a:6c:5b:
         d0:19:e6:c4:f3:63:f8:2c:85:b9:0c:dc:d6:b6:2b:df:27:b9:
         de:f2:b1:3f:e7:4f:b5:81:3c:8f:36:0f:d0:95:f6:92:e0:f5:
         ab:b0:50:af:6f:70:6c:e2:db:0f:31:1b:49:e2:60:c2:1f:49:
         d3:b5:87:ee:7f:35:09:ae:26:68:a6:70:46:ce:93:60:da:b0:
         f2:18:ec:9f:08:de:cb:1b:da:d9:92:c4:f3:74:a8:98:b9:ad:
         ca:15:39:7d:3f:57:de:4f:76:cd:7d:ed:13:96:1f:95:25:2d:
         3e:71:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:32 2026 by rpki-client