This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          XLAfCx3vMeYr/kAdIsE/5ncn2lvnXLuXx8kdLPHASn4=
Subject key identifier:   76:A3:EB:6A:89:58:4F:A4:93:36:73:1B:58:30:9C:78:80:63:12:B3
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       019BF6F595913F6C00F0A809CDAB1A638E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 21:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:48 +0000
Files and hashes:         1: FAvWr-t5qLAm6NFSiSaeHXBJNkk.roa (hash: oCnAzbJIAxh+ZmVGXJVHG080J5H06zSvYh/DS9c83V0=)
                          2: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: UICkgpEomw/Q51X6A6sXgjGZJRdasmIfg/GajgNzhus=)
                          3: bNA2kutP2fcn6EKqxM5e-6bce04.roa (hash: FT27XBA0Rid5SDCvkNKz8jqlEy+d/zyDgdNMOV+EHDg=)
                          4: bhGF4U1uOTR_d637z55lpBNamlM.roa (hash: IKmQahA4tp55y4ynk0Z+qjyDHvn9Skrfi+yfx+Eq1uw=)
                          5: dqIMVQtES41sQVRwnUTr8rX4pPk.roa (hash: 0lWlGGH3qwTUbHSx/AhpVPNTmibHBfbhdn/QehKZoOw=)
                          6: g0I0kU5MJHKsYF8n6XBnqA0rorw.roa (hash: 0uUsQ8/3tfk0T+PJCNuxoHMkCUWUET0shiGdo7yowwA=)
                          7: sWc0x8xdprid2J0LIhsIpRR0BBk.roa (hash: MM549Xitzolq2k3RRgaWuIzqMTH1U55wOE7cKGGNAZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:95:91:3f:6c:00:f0:a8:09:cd:ab:1a:63:8e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Jan 25 21:00:48 2026 GMT
            Not After : Jan 26 21:00:48 2026 GMT
        Subject: CN=76a3eb6a89584fa49336731b58309c78806312b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:ab:a6:72:7b:80:05:15:21:7f:3a:79:a5:
                    50:5e:f0:00:7a:49:1f:e1:03:0a:18:04:e4:18:5a:
                    24:f1:19:96:01:18:a9:44:a8:c8:29:e2:48:40:51:
                    e8:5b:4f:ff:5a:81:ba:d0:4f:39:0f:19:71:33:bf:
                    27:bd:0b:f4:90:29:53:96:80:1f:ef:13:b7:4e:03:
                    e1:b7:67:de:e0:8d:df:23:46:f5:3c:f9:85:e0:0c:
                    55:55:f6:fa:c7:7d:53:e3:02:a0:d5:16:3d:cd:c3:
                    df:9d:b6:dc:25:30:27:d5:fa:dc:5d:72:8e:a3:54:
                    76:45:82:62:a3:26:1a:90:67:21:0e:a8:69:4c:6b:
                    e8:24:22:a5:49:65:8a:6d:17:52:69:72:fe:d4:01:
                    79:d2:41:a3:bc:d2:39:27:a6:2b:3b:5e:a6:03:d5:
                    a5:2b:ad:96:2e:42:ae:71:04:0c:4b:d7:89:4f:cf:
                    06:a1:6d:1f:a9:0e:1f:6a:04:bd:32:cb:5e:c2:eb:
                    f8:ae:c6:34:7c:ee:00:21:61:bf:08:2d:d3:68:2b:
                    60:a4:de:ed:ad:13:e9:4f:c3:68:be:99:bf:84:17:
                    aa:80:56:31:da:63:ca:23:2f:55:17:1a:22:a7:31:
                    ab:2d:8d:36:30:e3:ca:3a:e1:fd:09:3d:f7:ce:a4:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:EB:6A:89:58:4F:A4:93:36:73:1B:58:30:9C:78:80:63:12:B3
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:31:ff:a6:83:81:4c:94:d5:2f:96:1f:ff:b0:23:4e:0a:5d:
         12:32:a2:61:59:c0:a2:79:e0:08:1d:cb:13:a6:47:ba:39:8d:
         29:02:a6:df:b7:5d:e5:4e:28:0e:d7:4f:fa:c0:84:93:b1:f2:
         4f:6d:8e:6c:b4:9b:b3:83:ca:7a:d6:c6:9c:94:ea:c0:20:e9:
         d7:83:50:91:88:ee:d7:aa:35:e8:b4:0a:1b:df:ee:1e:b0:bc:
         33:2e:ef:a1:0f:bb:e9:ac:90:9e:49:5e:9c:d9:c0:58:9a:27:
         08:e3:ce:1b:12:61:45:b9:5e:64:ba:98:8b:39:ee:e6:4a:12:
         7e:9e:bf:92:e8:3e:f7:ed:fc:54:f9:79:9d:bd:b3:af:de:00:
         be:d5:87:0b:36:d9:f2:0a:93:d7:5c:f2:b7:0d:90:ee:d1:75:
         c5:7d:16:15:e9:63:ed:2a:d1:5d:e7:2f:c6:da:ca:1c:25:4e:
         0e:06:a8:d0:15:c8:ba:2c:c5:ff:46:8d:0e:19:59:4e:39:9f:
         35:da:00:f7:85:70:07:cb:41:37:d2:4f:df:22:b0:9e:23:70:
         be:55:e1:84:03:88:48:cb:41:7c:ce:ac:ce:b3:c6:ae:72:53:
         21:ad:ba:66:e5:3d:9b:7c:73:5e:c8:ec:e8:8a:cb:32:e3:38:
         b0:24:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:03:24 2026 by rpki-client