This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          fB4Ac0xKhzEYR+1mZQ6uirk4S4vBqFhsYf4Hc94ljG0=
Subject key identifier:   FB:1C:17:AB:6C:64:C2:48:02:0D:8F:1F:58:AB:96:FC:06:01:41:0C
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019BFCC1073C83F76B6E150C4200A78696B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          1846
Signing time:             Tue 27 Jan 2026 00:01:07 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:07 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:07 +0000
Files and hashes:         1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
                          2: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: G57rGsrBipQ6cXTSCNdplNsLVjTCDcUtS21Hz8MK2iU=)
                          3: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
                          4: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
                          5: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
                          6: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:07:3c:83:f7:6b:6e:15:0c:42:00:a7:86:96:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Jan 27 00:01:07 2026 GMT
            Not After : Jan 28 00:01:07 2026 GMT
        Subject: CN=fb1c17ab6c64c248020d8f1f58ab96fc0601410c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:ba:48:8b:78:fa:ad:5c:3f:33:84:df:85:
                    93:3b:da:9c:72:a9:96:6d:b0:41:30:a7:60:b8:b8:
                    d8:1e:06:ac:72:3b:ea:ee:57:27:8e:dc:6d:d5:dd:
                    18:84:5b:8d:bd:d2:ef:ef:26:57:e2:58:92:28:29:
                    c8:68:ea:bd:33:99:69:3f:fe:d1:53:49:a8:ff:47:
                    da:a0:8a:9e:cf:11:03:48:59:a1:c0:7e:23:05:09:
                    cf:ae:d1:a7:0c:0e:a1:e5:78:81:c0:4c:25:1b:a2:
                    9b:68:6b:07:b3:ea:8c:31:cf:2c:55:e4:97:77:86:
                    fd:f0:99:01:a2:cf:d3:b6:b1:56:9c:c6:24:ba:13:
                    dd:a0:c8:5f:f4:3a:42:4e:ca:e1:31:a2:fc:57:13:
                    c7:34:ec:75:81:de:4f:eb:e6:e1:d3:ae:0c:44:96:
                    28:d2:e3:e0:eb:5d:4a:ae:29:f8:a5:3f:1e:00:5f:
                    c7:fb:98:8f:66:3a:4c:b7:ec:42:1f:ed:f5:e7:f4:
                    c7:1f:dc:40:5a:68:17:d4:2b:66:b4:b0:7f:94:55:
                    7f:ea:ab:71:5e:46:f0:76:76:79:2a:b7:96:17:2c:
                    aa:aa:b1:d2:30:09:ac:08:66:c8:c5:40:9b:e1:8e:
                    97:c4:c4:9b:96:9d:b7:fd:61:13:46:a4:e7:6c:00:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:17:AB:6C:64:C2:48:02:0D:8F:1F:58:AB:96:FC:06:01:41:0C
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:51:b3:7f:b2:46:48:4b:28:fb:e4:15:38:f4:8c:ea:49:d4:
         5a:6f:32:21:b9:62:70:98:e4:82:58:bb:77:a6:b7:e9:01:f2:
         f4:5d:e9:a1:b8:2c:c4:2d:f0:11:cd:f0:d7:b7:82:36:bb:bd:
         4a:87:94:2f:1b:19:7c:6e:8a:f9:57:ae:38:88:9f:62:7f:a8:
         d9:0b:81:70:91:13:cb:cb:3f:94:eb:23:57:88:6a:9a:99:77:
         fb:c1:c3:65:36:95:2c:3a:34:bd:2c:70:c9:c8:16:65:41:8b:
         15:53:74:a1:70:82:f8:c9:ff:02:4d:e6:a8:cf:b0:3d:9b:be:
         d9:c6:f5:35:38:1c:9d:1f:bf:fa:26:e3:35:b5:1a:b4:f8:54:
         9a:30:af:d5:3a:fd:33:4b:c2:f1:1c:9c:bb:a0:57:26:73:a5:
         8d:9b:f6:7f:54:6f:9f:0e:1f:7e:d0:d2:12:48:5a:3e:b9:b8:
         e9:3d:1e:81:2a:1d:03:c1:37:e7:e6:64:b6:41:c2:44:62:91:
         d7:62:6d:82:4f:ea:6d:11:ef:a3:ce:06:2c:4b:16:bf:88:bc:
         59:a0:6e:d2:5e:d5:52:d1:0e:2f:ea:1e:41:c4:54:89:05:42:
         6e:79:49:ff:d5:4b:67:1b:9e:e0:1f:c1:d6:b9:1c:6b:89:74:
         ad:4a:d7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:29 2026 by rpki-client