This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          VcNJxao5tXWUzz8IKBVMpaT2ON9rTyYRM1YmgahE4uA=
Subject key identifier:   DF:2A:BD:76:23:F2:D5:38:26:6A:9C:AA:64:A4:0D:7F:E9:28:36:8A
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019BCE9E6D37DAE9E3EB8B3A4E95D7CE9542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          17E8
Signing time:             Sun 18 Jan 2026 01:00:47 +0000
Manifest this update:     Sun 18 Jan 2026 01:00:47 +0000
Manifest next update:     Mon 19 Jan 2026 01:00:47 +0000
Files and hashes:         1: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          2: IclPz-fZli7cIc7b8M4tFr6tV3Q.roa (hash: vEiHTipYewbkeIs3YXH2Y8E/vYyuwCaIUL976UsKXH8=)
                          3: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          4: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          5: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: wWbse4OT4fH5htzMv4nrB6bYGCU8zHggNsX8k6AKidI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ce:9e:6d:37:da:e9:e3:eb:8b:3a:4e:95:d7:ce:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jan 18 01:00:47 2026 GMT
            Not After : Jan 19 01:00:47 2026 GMT
        Subject: CN=df2abd7623f2d538266a9caa64a40d7fe928368a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:41:6d:ce:b2:d2:3c:15:0d:15:c3:f1:4c:
                    ed:01:15:fa:8a:c3:45:f2:e5:16:d3:73:dd:7b:93:
                    99:71:82:87:cb:03:f9:43:98:05:2a:b2:a4:c4:1e:
                    17:fc:94:5a:82:52:97:7e:9e:83:4c:a8:fe:77:08:
                    c5:a2:f3:bd:30:27:0c:31:55:ea:c1:34:5c:cd:54:
                    02:53:09:c3:6d:a3:45:74:4b:5b:e4:dd:1e:02:c0:
                    a8:89:6f:19:1b:c6:39:81:0e:d2:46:f2:fe:45:66:
                    0a:2a:44:a4:fb:2f:1a:b9:69:68:b3:93:37:5b:17:
                    63:98:87:07:da:ec:12:1b:f7:a2:66:d8:bc:88:31:
                    5d:80:2f:43:28:56:2b:a1:bb:b2:4f:7b:55:5a:ed:
                    72:b7:c9:b7:05:0f:66:bc:30:a3:ae:c8:c9:20:ae:
                    a4:de:ea:64:c3:e8:f1:f6:99:83:d4:bb:94:c0:04:
                    d2:9c:f0:7f:5b:6d:8d:23:15:f0:64:95:33:8f:48:
                    6a:ad:e3:5c:6b:8d:19:09:03:8e:fb:b8:c0:60:35:
                    a3:90:43:28:a6:cd:52:ac:b1:80:37:65:64:97:4c:
                    24:e4:53:a7:b4:51:06:70:72:a2:ce:a8:f3:65:c9:
                    e7:fa:ad:02:8b:ff:80:be:6b:74:52:8f:1d:03:11:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:BD:76:23:F2:D5:38:26:6A:9C:AA:64:A4:0D:7F:E9:28:36:8A
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:80:f7:26:04:2a:63:88:5d:2e:27:b3:80:7f:a6:05:cc:ba:
         39:05:72:68:ab:dc:3b:99:99:08:d9:16:8a:fd:d5:a6:3f:e5:
         1d:f9:52:8d:02:b8:72:be:a6:3d:a5:17:6f:3e:83:b4:92:a5:
         51:8b:31:11:ff:df:8f:b9:2f:a3:2e:27:7d:6c:97:b5:5d:b0:
         60:41:1d:2f:be:b5:94:25:07:89:a1:15:a1:19:37:d3:47:e7:
         9d:c3:c4:6f:5e:a8:9c:81:fa:18:c1:b1:9b:be:b6:c5:07:8a:
         cd:99:9a:30:68:4c:96:14:cf:a8:d0:ee:06:d7:00:5a:9a:cf:
         d8:fb:80:de:e0:f0:36:bf:20:47:48:a3:fd:10:b5:d9:56:72:
         35:f9:1e:07:5e:b2:1c:ed:c5:c2:78:d3:a3:d8:cd:a8:e2:4f:
         b6:59:74:37:73:f9:2c:34:5e:ab:b7:67:20:39:df:53:e0:bf:
         dc:01:1e:1e:1f:b8:34:dc:d1:8e:74:2e:c2:68:0b:8f:59:37:
         cc:2c:65:e2:d8:38:e2:f9:d7:40:2c:40:49:2a:3a:54:f4:53:
         34:c5:09:a2:25:23:dc:f7:70:05:40:6b:b0:5d:f1:ab:3a:38:
         bc:68:f7:e2:e7:2e:e4:03:83:3d:66:11:d1:74:32:29:6d:ea:
         b3:fb:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:26 2026 by rpki-client