This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          d5mdBpedMhnFimv3GDWvep+zz3VzyKc0zeaC/fXfKcw=
Subject key identifier:   8B:EF:35:EF:5F:0C:38:F2:A1:5E:55:10:1C:A4:C6:00:F9:DA:66:7A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       019BE06E4F137A03D17EB23B316A4D094AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          151A
Signing time:             Wed 21 Jan 2026 12:01:24 +0000
Manifest this update:     Wed 21 Jan 2026 12:01:24 +0000
Manifest next update:     Thu 22 Jan 2026 12:01:24 +0000
Files and hashes:         1: CkpruVXBRC35FNzBxsHtHzElTcQ.roa (hash: M8G0Fw/AyLb57D4pQj+p7wHrZ6ZAg2uq5cvqL/37hsU=)
                          2: DASfpt6NusBMafxKXMbsXkknaLs.roa (hash: 7Q1f4G/K2mV4OPswZej+EeWKFQMe4TLAgeu5GM1kraI=)
                          3: ESMuZH3p8eZcfxjSdFlU49_G9BY.roa (hash: eU/RIl1p7nycsadiq5D1MCtC0gJOFnvD+JDmCJY+OA8=)
                          4: H4PmoPs09fxsoMyeNbvcLTDl7tg.roa (hash: g6se6YwWnPf1EHgnkVuLefIVI+viGWgQPBM+Zec15uI=)
                          5: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: OuzHEpIrNE+TNcFTPDb9ZNcu70+Havq9hvQen6y8+Ns=)
                          6: U72xLPnHsdGJOmuVVmuKqxwOiqc.roa (hash: HrW5kq0s7p81uxu2mVlLNVnO/Fe0Do0Wx4X1Qb8BCfU=)
                          7: VHgUN5juRzMz3CUHZPoEHnzr2z0.roa (hash: VXSqzrkX+ABn4jZnd4wHdBjnPgDeVeSEP9mmDyjcGMQ=)
                          8: WuM6D54bD9ZW12al4cadO05OlhA.roa (hash: KSoGE/L4hSg6At0Y5RkAFE3o/b5P/zSmERN2VFp1fMQ=)
                          9: Y-rwo6ja1_SXsDsjjZenySjEjo8.roa (hash: ZsKC9kHfKh+n+8/Xir5wlK+HjS6IcJLLArYCrxMRmAk=)
                          10: fODX5jmXTV4iIbb_Bnk1PD9cC00.roa (hash: otxs3ld6HvCJXC8NMl0b71m++PMmLbnvu80f6jkho1M=)
                          11: fRUNIQ1_jYWQdZrSZ4luryAQJDQ.roa (hash: ty6oOnSu+ZODj+9+2x+cpkE7v0JL9rnydZY11LzAwgQ=)
                          12: lNSsiMsgFC3PSDwg_wipOCI36Sc.roa (hash: T+M2rwciKN++pJU4zsuNLc+4agGsiYLXoX3H/Bds62g=)
                          13: nMpaMbGEzj2Jpg2_GxE2xYc0pUI.roa (hash: Fv1RC7bFvxKYKp89cN52GIHsD0MHml/fLyyWKSWO5/k=)
                          14: rjPbS80wLPhwF4ETCKbrHWAdxvw.roa (hash: 0e9ndNtpFQMzhAU9T854jFmEVmFNvWMXh2KdMpHi8jk=)
                          15: sIpLAsGB9mg0zFG4d5238KgCd4k.roa (hash: eXcSiBlROOdcbS6oOwKQciaqtXn9irVYQuDWrvrFA6s=)
                          16: spxPuR8xyj72SKO00nWmxiu9tv8.roa (hash: j68QBUE3gzuvtf320646B+hARt3MiGgu/5WZ8oVBSpA=)
                          17: ufjaDLPum5mRkBKXDuMb146baHg.roa (hash: oNF4RqIC9pQOPmU+xyL4C1SBlQau5hDsBq8wufytphI=)
                          18: wODjBNmkuS9h0waCc42Dkgzmz4M.roa (hash: 4MWQOIzSUusnmKdgWHTkomedrAevqHzw4zAsd3AmPuo=)
                          19: x_iIIPRoEQWVn07wS7ZG981uK1k.roa (hash: /teDPYyBl2osK5WNnBuFAT+t6CPwExKIVpb7g75ufAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:6e:4f:13:7a:03:d1:7e:b2:3b:31:6a:4d:09:4a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Jan 21 12:01:24 2026 GMT
            Not After : Jan 22 12:01:24 2026 GMT
        Subject: CN=8bef35ef5f0c38f2a15e55101ca4c600f9da667a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:e7:1c:03:1f:44:51:46:53:4b:aa:39:ee:
                    cf:1b:7c:33:94:d2:35:a2:67:42:17:9f:cb:cb:c2:
                    ae:58:95:7b:12:9a:68:f2:c3:52:20:d0:a6:bb:27:
                    db:ab:1d:94:6d:ab:3c:db:58:42:ad:ff:67:17:68:
                    71:64:8a:2f:b4:f4:b2:7a:d3:c1:e2:30:5b:e8:e4:
                    55:65:0f:1e:d9:38:f0:bb:f0:a2:13:fb:29:1f:16:
                    ef:8f:fd:7c:45:c1:3c:29:23:a3:3f:98:27:df:78:
                    ae:38:8c:f1:4c:3e:bd:46:00:1f:0a:c6:1e:5d:46:
                    a2:be:d8:b4:95:02:50:48:f6:22:c1:da:92:7a:5a:
                    b1:85:1b:87:78:12:a4:00:86:c2:36:0e:f7:9f:22:
                    14:fe:94:b4:43:00:f3:a2:70:c0:66:f5:60:6c:99:
                    06:a0:8e:b7:e7:d3:57:c1:84:13:76:3b:f7:17:67:
                    b2:08:00:61:73:2f:08:43:42:ca:43:9b:07:13:28:
                    72:69:f6:e2:9e:0f:d6:14:d3:8e:e3:3a:91:81:4b:
                    ca:c6:6d:6a:55:5f:02:f0:24:65:de:5e:86:af:bb:
                    02:74:5b:60:ef:98:c5:c5:89:46:20:97:cc:a0:f0:
                    f3:24:d3:17:3f:e8:a1:d5:4c:99:a9:79:65:10:63:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:35:EF:5F:0C:38:F2:A1:5E:55:10:1C:A4:C6:00:F9:DA:66:7A
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:6b:db:84:a7:ed:61:a8:f8:35:79:27:d2:34:fd:3d:13:
         61:91:30:68:c7:a8:0a:66:63:62:c9:03:d5:9c:7c:d1:1f:c1:
         52:c6:13:f1:00:9a:ff:07:12:22:3d:b6:d4:3b:36:af:57:27:
         dd:f1:44:b1:8f:aa:7c:ca:dd:bf:ca:77:78:1f:4f:e7:e1:6e:
         a5:f2:72:cd:7c:d3:a5:df:1d:92:01:f6:14:2c:32:94:c7:e4:
         64:b8:5c:ef:23:ae:8b:63:7e:4c:58:ca:d5:c6:0e:4e:96:2c:
         e8:cc:bd:d6:20:f4:34:a9:0d:32:52:00:bb:6d:d4:82:76:f7:
         09:ac:95:3c:28:ba:28:1b:fe:5a:fb:e9:05:21:8e:32:1c:96:
         27:c6:01:11:8f:77:24:1e:aa:44:f0:36:ac:7a:76:92:2a:3f:
         b4:fd:3e:12:3d:a3:30:c8:a4:d1:bd:0c:4a:3f:d3:9e:d3:47:
         ca:a9:63:eb:9b:ab:f4:30:b0:2d:05:32:dd:69:c4:42:d4:d8:
         c2:51:c6:dc:32:f9:68:5a:f0:68:b1:5f:db:85:e0:9b:03:52:
         5a:a0:ef:87:38:b6:13:1f:1d:21:47:61:68:73:5b:9f:3b:0c:
         70:29:9e:ad:e6:5d:a7:f7:bc:b1:45:ab:62:18:d1:e3:f5:2c:
         90:4d:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:32 2026 by rpki-client