This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          FExUjw4lQ6/Nrd+3yGdxO50lUX7h1dsrSG1vHiEXVMY=
Subject key identifier:   E8:13:3F:3B:78:6B:08:86:81:29:AF:8E:0E:D6:D9:DB:AC:07:73:DF
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       019BF72CEC530B6E7AD793463BF198B8165F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 22:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:14 +0000
Files and hashes:         1: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: VrtzaU92a70qOnzYTKJXopbiucyjn4PJ63d1W5Q9KRE=)
                          2: sp__UWCgdxP7bzoqkk56wrdwFzY.roa (hash: x+RNqXskpD2D4AGv2+Sqx9lS+lyi0Cw+nu+2VioSmmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:ec:53:0b:6e:7a:d7:93:46:3b:f1:98:b8:16:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Jan 25 22:01:14 2026 GMT
            Not After : Jan 26 22:01:14 2026 GMT
        Subject: CN=e8133f3b786b08868129af8e0ed6d9dbac0773df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:d4:dc:3f:32:5d:4b:7c:14:98:eb:e5:a6:
                    8e:de:eb:4e:0a:e1:40:41:99:0f:13:98:99:a7:db:
                    fa:28:ed:19:62:b9:1f:4f:ad:ad:b7:2c:d4:6a:28:
                    ad:81:0c:19:bf:69:cc:20:df:dd:f9:90:f4:68:ac:
                    0f:1a:32:6a:02:c7:1c:8c:90:9a:08:7e:f8:ea:b3:
                    97:04:22:46:ef:a1:bd:60:6a:84:04:3d:30:8e:e1:
                    e8:41:08:7b:0b:bf:ae:53:a3:63:64:5a:d2:7f:f5:
                    87:41:81:40:74:ff:ad:e0:78:33:38:9c:a9:75:99:
                    72:bb:a4:53:d1:e8:6c:c5:96:24:26:a2:4d:27:cd:
                    a2:2c:ca:6b:1e:32:51:56:13:3d:58:f0:3c:c2:f3:
                    de:48:91:85:93:ea:e9:55:a4:82:ad:8f:e7:74:f2:
                    12:48:68:3b:64:ae:4b:9f:ab:d1:4b:23:52:77:d5:
                    21:01:3b:0a:9a:ce:b1:c6:18:0c:6b:dd:70:4f:35:
                    7b:c2:76:3a:94:a8:36:8c:cd:53:e9:8a:4a:60:ee:
                    c0:0e:64:d1:2f:b7:f5:99:f6:09:e8:39:7a:4e:3f:
                    e5:f7:04:c8:7b:c7:8d:8a:8f:ab:57:ff:1f:3e:4d:
                    02:1a:16:34:52:87:99:3c:7b:95:cd:ca:00:6e:95:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:13:3F:3B:78:6B:08:86:81:29:AF:8E:0E:D6:D9:DB:AC:07:73:DF
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:52:5a:44:bc:24:8f:2a:db:30:d7:f9:aa:fe:49:db:aa:
         fa:05:52:9f:26:f0:74:1e:fd:24:45:1e:4e:da:9c:b2:00:af:
         1c:a5:51:e6:69:56:f9:ee:56:36:6e:1e:66:05:9e:db:56:a4:
         9e:39:ac:fa:75:5e:60:8d:8a:fb:20:4b:1a:f2:e3:dc:37:ae:
         5b:9a:c7:93:73:ef:a1:5c:36:bb:1d:53:e7:72:07:ba:4e:6d:
         9e:b2:66:2e:da:cb:ed:3a:0e:3d:9a:26:fc:5e:82:f9:55:53:
         08:76:ae:d3:c0:18:f1:7b:5b:7e:0a:44:dd:16:0c:30:ba:61:
         3f:9d:8f:bb:c4:bb:22:ab:22:e6:d8:6f:f0:5c:26:bb:19:84:
         68:6b:83:59:f8:07:34:92:9b:09:ef:33:16:05:0e:06:be:e5:
         13:9a:32:85:a7:5a:2a:8b:51:ab:35:36:2b:e7:d1:9d:f7:63:
         69:2c:79:09:9f:98:12:fa:9d:47:69:6e:70:22:7a:c2:67:85:
         d5:ae:27:6e:c2:33:ff:d6:e0:f3:ef:c1:9b:ee:12:98:a9:d9:
         14:0e:63:a1:b2:6f:db:75:ba:1d:95:43:7e:56:66:03:db:b8:
         50:f9:f4:09:81:0e:fa:26:93:37:a0:41:56:26:6b:9e:19:e1:
         fe:d3:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:15:21 2026 by rpki-client