This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File:                     J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier:          HCgorGW4i+Bco3XNdDv7OjDiL5hbZK9CK7mZcPmUCHk=
Subject key identifier:   A4:E1:4B:11:06:C1:DB:4E:EA:50:B4:F4:B6:3A:27:5D:5E:B0:74:BA
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer:       /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial:       019BF79A62F08EBFB9F46660C4DCDA3998B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number:          10C3
Signing time:             Mon 26 Jan 2026 00:00:48 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:48 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:48 +0000
Files and hashes:         1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
                          2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: ADi1WLXS6FGgVfpm5dxCR0/nk1yuuAPWWDVolSA5WFc=)
                          3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:62:f0:8e:bf:b9:f4:66:60:c4:dc:da:39:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
        Validity
            Not Before: Jan 26 00:00:48 2026 GMT
            Not After : Jan 27 00:00:48 2026 GMT
        Subject: CN=a4e14b1106c1db4eea50b4f4b63a275d5eb074ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:85:ab:1d:18:a1:b2:05:58:4a:4b:04:10:
                    d9:56:6a:8c:71:7a:cc:01:f5:e5:a6:98:cd:c4:c6:
                    02:81:c2:3e:7a:2d:52:16:6e:7b:1c:0b:a6:a4:48:
                    a6:6f:e3:e3:88:ae:bc:af:53:88:7c:e7:0b:98:8e:
                    69:c3:e2:0b:ab:41:49:a3:f9:20:32:54:a3:4c:40:
                    32:8e:12:a8:ff:bf:d8:06:cb:89:00:df:80:be:94:
                    1e:e7:43:87:1b:c7:8e:7e:d4:30:f0:a6:07:08:f7:
                    1d:34:54:56:85:65:1a:d2:7f:8e:06:49:87:61:03:
                    39:c1:8a:6d:2a:8e:ba:3e:73:07:6b:ee:b2:38:24:
                    0a:e1:6d:dd:6a:4a:86:71:26:97:48:0a:24:fc:26:
                    1a:82:65:73:61:5e:ed:10:42:87:83:70:0f:da:af:
                    4d:b2:43:d0:88:c3:d3:6d:58:e6:72:0d:d9:58:ac:
                    5c:eb:ff:ca:12:b2:20:92:91:b7:b1:9e:e6:03:c1:
                    ef:5d:cf:81:3d:db:39:84:24:9a:d5:9f:ba:64:3b:
                    86:63:38:52:71:e4:44:aa:d2:4f:80:95:2e:2c:ee:
                    64:b0:67:87:b2:6a:ad:ae:89:0f:e0:69:0c:98:54:
                    dc:32:bd:68:80:cd:78:f7:31:b8:73:b1:b7:8d:f6:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:4B:11:06:C1:DB:4E:EA:50:B4:F4:B6:3A:27:5D:5E:B0:74:BA
            X509v3 Authority Key Identifier:
                keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:bc:08:61:1e:65:5c:2d:d2:ef:dc:8c:10:c1:ee:f2:13:
         0f:97:2c:f7:85:f5:ee:3c:c4:13:69:c9:6b:f9:26:17:65:3b:
         7e:ca:27:8e:f2:ba:fd:f1:3b:c8:95:51:57:1d:af:9f:e9:14:
         f7:e3:06:f2:48:c8:bb:66:f2:6f:17:e3:12:29:1e:87:25:88:
         73:19:ff:dc:01:63:4c:50:4c:17:d1:2b:84:aa:3e:82:a6:9c:
         d1:6a:4e:e9:3b:5c:49:9d:2d:4e:33:66:3d:58:4b:aa:82:47:
         28:2a:b9:b1:ef:9e:c4:1f:70:ee:ec:59:b7:37:b8:53:96:75:
         30:4a:00:22:1a:15:e8:72:ad:d6:ff:5f:5a:47:bf:1a:6c:8a:
         c0:e6:e7:4d:16:9d:58:44:31:6d:22:fc:f7:b0:c9:7f:83:69:
         29:7e:9c:1f:1a:5a:b2:6c:ee:8d:84:50:d6:f4:c7:9f:89:01:
         d5:f5:54:ab:c2:59:3e:c5:4f:1a:f1:e5:43:7a:db:7c:49:e5:
         cc:63:9b:6f:87:4a:28:a5:7c:63:08:18:6d:f2:ad:2c:60:c2:
         59:a5:32:69:08:e4:69:ee:a6:ec:13:b5:d4:f0:c7:9a:78:72:
         1e:59:ba:9b:94:86:46:4a:34:cc:e7:61:31:68:13:b3:67:c8:
         67:d1:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:12 2026 by rpki-client