This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File:                     jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier:          cGPT/icNsDInQ+H1uG9UCIpNiBdS+U1CihmO+gqyoSk=
Subject key identifier:   15:45:AC:01:0E:4F:B7:60:AC:7A:98:6D:69:4D:A4:CA:F2:C3:0E:26
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer:       /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial:       019BF619AE994C8A9819DE2C883927C02782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number:          03FF
Signing time:             Sun 25 Jan 2026 17:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:36 +0000
Files and hashes:         1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
                          2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
                          3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: v7/x8jD7dmh5C9N6GAfNnm8GeO0hwtSIdqBwmxSSq3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:ae:99:4c:8a:98:19:de:2c:88:39:27:c0:27:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
        Validity
            Not Before: Jan 25 17:00:36 2026 GMT
            Not After : Jan 26 17:00:36 2026 GMT
        Subject: CN=1545ac010e4fb760ac7a986d694da4caf2c30e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:bc:1a:ae:24:5b:ce:48:c6:c3:7b:54:5c:
                    c5:c1:82:24:d4:45:76:66:23:1b:fe:1b:d1:52:1d:
                    99:39:11:8d:77:90:fb:df:49:96:f1:49:f1:60:73:
                    44:b3:6d:77:3f:97:19:67:82:f9:28:ed:ba:3f:48:
                    68:9d:1f:64:b5:72:02:0a:88:2f:97:e0:22:58:0d:
                    e1:1a:2d:f2:15:0b:42:ab:c4:96:39:12:ff:e8:d5:
                    7e:e3:10:ee:fa:16:f5:de:56:4e:8b:a3:72:94:fd:
                    70:6c:eb:5c:15:90:86:4d:25:9a:14:34:6d:34:dd:
                    b6:1f:9c:db:60:39:34:ff:bb:b8:c7:20:36:73:f8:
                    bb:2b:a9:29:c8:f2:34:11:36:6f:2d:ad:90:d2:64:
                    f2:88:a9:f2:4e:d5:e4:b1:e1:02:f0:56:a7:83:a7:
                    71:1d:d6:50:e6:72:da:a5:6e:44:8e:74:24:e9:e9:
                    81:90:6d:68:20:8c:16:13:d3:15:90:c5:38:96:3d:
                    f4:f9:13:30:c3:3f:41:8d:b4:96:07:d8:59:2e:ab:
                    c9:80:1a:6a:0a:19:a3:41:73:91:bd:88:88:6a:4f:
                    1e:7e:25:a6:2e:40:1e:73:36:cc:63:75:8f:7f:fa:
                    8b:de:09:55:26:a3:b9:55:e4:e4:3c:78:94:46:7c:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:AC:01:0E:4F:B7:60:AC:7A:98:6D:69:4D:A4:CA:F2:C3:0E:26
            X509v3 Authority Key Identifier:
                keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:ed:58:62:03:e7:4a:4f:8a:23:d5:df:48:1b:15:c0:6d:
         64:4d:42:89:d3:f4:2a:a3:8d:a5:71:6b:5d:c0:7b:cd:e3:93:
         f9:50:0b:4e:03:59:f8:01:da:79:3d:f5:ea:7b:02:4f:72:01:
         a5:cf:23:16:40:f8:9b:0f:42:ca:5b:6f:42:24:45:ff:42:7e:
         d9:8f:08:a6:ce:55:10:85:26:3b:e7:b6:37:cf:15:3e:3f:c2:
         af:34:fd:cc:9a:e0:7b:6f:46:65:54:68:78:a8:3c:d0:b4:f8:
         48:53:d5:4d:d5:b9:0b:4a:67:33:41:d9:94:8c:e3:c0:22:c5:
         3c:8e:49:99:3b:d7:8f:bc:ef:b9:84:48:08:23:db:61:64:91:
         e4:c4:40:42:e5:fb:d2:7a:1d:94:28:72:52:81:df:94:16:9b:
         8f:0b:ca:2a:e0:fa:8a:3c:d1:4e:af:27:dd:37:cb:a9:cf:08:
         72:8a:0e:d3:34:1c:4d:9c:70:20:48:0e:f1:a7:a7:7d:6b:48:
         88:e8:97:97:cc:72:c1:a5:47:6c:32:00:b6:29:94:e6:a8:03:
         1e:3c:ce:04:a1:8f:b2:b0:bb:09:79:5a:c7:53:b4:a0:3e:ea:
         84:ff:29:71:16:6a:e4:4f:55:39:06:8c:12:94:7f:59:1a:3b:
         e8:44:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:36 2026 by rpki-client