This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          TgjKchOMVUyc02VLm9uFJYvDIgmVGcKvg/6C1y/uCjk=
Subject key identifier:   C6:71:3B:E9:3B:13:69:8A:49:31:C3:84:33:F0:C0:F9:29:6F:2E:4E
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       019C1D27E8A481AFF2F85E99FE53F2747E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 07:01:20 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:20 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:20 +0000
Files and hashes:         1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
                          2: 8MhUGiidi2m0HnQqAR9gajVbxRM.roa (hash: H33xML5R5o+4GB2XWvGYGH7H4gss4OnrQcVOqELCXeI=)
                          3: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
                          4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: lQ7c2xMeVrE2JPPbMRgZgFv4F6VJ26ZwFsWtmsIZE44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:e8:a4:81:af:f2:f8:5e:99:fe:53:f2:74:7e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Feb  2 07:01:20 2026 GMT
            Not After : Feb  3 07:01:20 2026 GMT
        Subject: CN=c6713be93b13698a4931c38433f0c0f9296f2e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:9f:4a:5b:b9:32:ef:28:95:5d:28:af:d7:
                    8c:b4:d3:11:8b:fc:78:f5:ea:32:2d:04:a7:15:7c:
                    ea:f8:fa:ab:03:cc:16:e5:1a:2e:22:2d:48:66:b5:
                    ce:40:3b:df:f2:a3:77:20:7a:2e:27:2f:29:78:f0:
                    7a:fa:e8:cd:e9:15:a4:8a:8a:86:d7:71:4d:21:99:
                    50:50:b5:ab:c4:1e:76:04:15:91:e9:a7:01:33:53:
                    f9:9a:d3:99:89:4b:2f:8f:0d:04:7b:41:95:54:3d:
                    79:b1:8e:ae:14:6a:f4:2e:7c:16:7d:37:3f:b7:80:
                    d3:62:75:51:3f:7f:ab:7d:bf:73:53:b0:18:6b:41:
                    8b:e1:85:15:28:60:0d:5b:ea:cf:8f:eb:9d:32:d8:
                    b7:66:52:e5:79:8c:97:91:c0:a4:ea:5e:82:88:f9:
                    42:b2:fc:a3:f5:d7:55:7f:06:b4:1a:48:3b:13:3a:
                    d3:0a:8e:64:32:8a:d9:bc:a4:c2:9f:3b:15:21:68:
                    e3:57:45:72:35:00:ca:22:c5:4a:e2:dc:1e:20:f3:
                    c1:f5:00:4a:9b:3a:04:83:6a:a1:df:16:e4:5c:3d:
                    c0:f9:33:ce:c8:72:fc:bf:2a:3c:76:e8:74:df:6a:
                    7d:5a:48:2c:c9:8b:15:b5:4a:d6:3d:26:5d:46:43:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:3B:E9:3B:13:69:8A:49:31:C3:84:33:F0:C0:F9:29:6F:2E:4E
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:bf:13:d8:e2:1d:13:f9:27:b6:a0:03:aa:1c:42:8a:ca:24:
         c4:4a:de:9a:15:dc:7a:29:28:ea:f0:eb:bf:11:fa:0e:76:57:
         ed:0c:56:33:18:4f:22:ee:e3:96:00:80:6b:2f:ed:87:c7:13:
         3b:20:7b:1c:21:6d:3a:17:9b:90:4c:34:c0:6e:44:fa:d8:c7:
         d2:21:88:8e:d0:70:f2:a9:db:c4:cd:e0:50:1b:64:44:a9:dc:
         8f:81:56:8b:f0:e9:1c:c1:c9:7a:17:4a:cc:c4:d9:b6:8f:8f:
         84:54:ac:6a:ed:3d:b5:02:1e:1b:8e:6d:fb:62:f4:22:e0:15:
         a3:3c:08:01:29:f6:bc:01:58:09:63:2f:43:fa:ee:40:26:b7:
         3d:02:be:69:7f:72:c5:b9:a6:2f:60:32:4a:da:ac:d0:c4:15:
         2a:7d:b3:7f:bc:97:78:4a:fa:51:c2:18:cd:be:ef:68:de:2f:
         5e:34:4b:04:b9:53:a7:ee:61:c7:47:00:06:a9:63:d0:9b:d0:
         80:62:49:19:26:bb:66:6c:6a:31:b9:eb:fd:52:2a:b4:5c:bd:
         f7:4c:c4:da:84:8c:6d:64:af:93:bb:f2:2c:d6:00:09:17:e4:
         bd:d8:41:c7:5a:48:5f:45:4d:d5:2b:40:ee:d3:62:fa:2d:de:
         ce:e1:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:57:53 2026 by rpki-client