This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File:                     JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier:          I46uDAwczm7STuFfAFwuWPNMVH0TFKXKSUg89avy3rc=
Subject key identifier:   AE:48:26:67:17:82:2C:8A:7D:1E:21:B1:D2:57:67:14:37:1F:A2:DD
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       019BF49995F0273B48574CAB7246D1D186B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number:          16BB
Signing time:             Sun 25 Jan 2026 10:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:04 +0000
Files and hashes:         1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
                          2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
                          3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
                          4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 3JnsImX5rJSddpTiDwoqC4nxwAymfAD8j8ZZ03mT8wk=)
                          5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
                          6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
                          7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
                          8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
                          9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:95:f0:27:3b:48:57:4c:ab:72:46:d1:d1:86:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Jan 25 10:01:04 2026 GMT
            Not After : Jan 26 10:01:04 2026 GMT
        Subject: CN=ae48266717822c8a7d1e21b1d2576714371fa2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:b9:fb:b5:57:7e:fe:ed:67:86:05:b6:94:
                    44:28:30:4e:c8:10:67:d3:dd:76:35:78:a0:15:d3:
                    41:1b:bf:8f:4a:d6:fc:7b:46:63:72:44:3d:dd:45:
                    84:b8:bf:ae:01:49:ca:4a:06:39:d8:92:91:3d:b5:
                    1e:49:49:61:01:0b:27:2f:e3:70:f5:c2:6a:b9:d6:
                    62:c6:09:67:ad:71:d9:b8:38:5e:f1:13:fc:50:e7:
                    39:8a:e6:03:98:ce:d9:eb:58:79:b6:8f:8b:62:70:
                    04:47:6a:42:7f:5f:4c:83:24:8a:b8:f8:ce:37:77:
                    0e:56:f8:3e:ec:a8:b4:29:84:61:05:d8:ea:b9:36:
                    1f:f4:f4:03:a8:42:f0:1a:2f:9b:c0:3b:a9:d7:f0:
                    2e:98:a8:81:6c:26:3b:26:48:27:cf:23:66:5f:53:
                    6c:fd:d8:59:13:84:4a:be:d3:7f:ae:fa:42:34:24:
                    aa:c3:8f:42:f5:a5:4f:4e:f1:e9:5f:c2:dd:ff:5b:
                    68:19:9f:9f:60:6a:fd:cd:a6:1b:0b:bf:e8:7e:9e:
                    16:67:d9:ff:6f:a7:84:d4:4d:21:3b:3e:f2:26:f8:
                    8f:a3:c6:71:87:a6:33:60:84:81:cd:80:95:a9:09:
                    88:a7:f1:a0:ec:dc:dc:a0:99:46:6f:a8:d6:19:cb:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:48:26:67:17:82:2C:8A:7D:1E:21:B1:D2:57:67:14:37:1F:A2:DD
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:3f:69:7c:93:5e:35:c5:3d:87:59:68:9b:57:60:3f:3f:4c:
         75:b2:c5:9f:18:6f:f6:4c:a2:f0:68:dd:6f:93:11:40:2a:3f:
         cb:17:47:ef:e2:73:60:3d:d4:90:b0:7b:84:33:f5:5f:f4:f6:
         ba:7b:c4:b6:49:05:b6:a5:98:72:d0:be:81:87:c0:01:ba:ff:
         f3:1c:a9:a1:00:4e:62:56:63:1e:d1:76:fc:d1:92:3e:23:60:
         d3:5e:77:b2:c7:83:ad:1b:c7:11:ef:35:e8:eb:74:cb:7f:23:
         03:5a:4e:e8:87:34:90:fd:e8:e8:42:ab:44:95:bc:b2:49:49:
         b0:f7:d0:f0:7f:1b:27:f9:40:10:2f:1c:50:20:df:34:57:70:
         7d:04:bf:ed:09:fe:45:99:9f:4d:b3:80:f6:dd:63:66:b4:04:
         9a:fe:f8:d6:d4:2e:29:92:f7:5c:e9:3f:22:8a:58:9e:58:3b:
         18:32:16:e0:d2:6d:79:8d:43:12:4a:1c:e5:c7:ac:e8:1a:b0:
         4e:75:da:4f:e9:61:58:6e:d8:96:8d:c0:49:22:21:3e:5f:f2:
         08:4d:56:1c:82:fd:b1:4a:b3:8d:84:16:68:99:b5:c0:71:69:
         dd:de:dd:8a:08:78:c6:ab:5a:fd:71:fb:3c:7f:b3:69:3c:cf:
         94:5e:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:54 2026 by rpki-client