This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
File:                     jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json)
Hash identifier:          tdcDkP8sr/J8UD6gxln7re4J+a+hmIbo+GHDN2upcqU=
Subject key identifier:   14:7E:5D:62:FF:9C:69:4F:4F:4F:A8:EB:F3:0A:FD:EE:79:E0:55:F5
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Certificate issuer:       /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial:       019BD87D6C976FE6F660CAB34E0BEE33006D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
Manifest number:          1779
Signing time:             Mon 19 Jan 2026 23:00:56 +0000
Manifest this update:     Mon 19 Jan 2026 23:00:56 +0000
Manifest next update:     Tue 20 Jan 2026 23:00:56 +0000
Files and hashes:         1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=)
                          2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=)
                          3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=)
                          4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=)
                          5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=)
                          6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=)
                          7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=)
                          8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=)
                          9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=)
                          10: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=)
                          11: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=)
                          12: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: oUoJsCQIJDICBdNFdS80fv2/1zmEL0H1NY/V+N7sjBQ=)
                          13: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=)
                          14: oNUyO24qjfd5xtSDIWPcDNoijxo.roa (hash: WoMYVT2feU1FlqCnW1Iw0oCuWmwfAa3ijaSrKK3RFe8=)
                          15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=)
                          16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=)
                          17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:7d:6c:97:6f:e6:f6:60:ca:b3:4e:0b:ee:33:00:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
        Validity
            Not Before: Jan 19 23:00:56 2026 GMT
            Not After : Jan 20 23:00:56 2026 GMT
        Subject: CN=147e5d62ff9c694f4f4fa8ebf30afdee79e055f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:73:66:e8:ac:a2:6a:da:9a:90:3d:27:65:
                    12:c1:b0:a1:00:3d:68:50:f5:2c:1f:00:bb:ea:83:
                    73:9a:b4:5d:96:15:0e:5d:bb:a0:3a:e4:02:ce:fb:
                    f0:d4:b9:2c:90:03:88:26:9c:8e:25:8b:4e:e2:55:
                    56:e2:67:67:a6:31:33:b3:d2:bb:32:cd:d9:d4:4e:
                    f3:24:24:1f:6e:f8:1f:39:86:e4:cf:cd:54:a8:93:
                    27:66:a8:9d:50:40:e2:8c:fb:21:6e:97:d2:c8:e1:
                    39:68:82:08:3c:dd:bc:c2:7d:78:7f:12:42:50:fd:
                    24:73:4f:93:04:a4:e0:f0:c6:ae:e9:e7:78:eb:14:
                    a9:3e:fd:c4:cf:e2:70:5e:a8:80:bf:c6:90:8a:75:
                    03:2c:db:77:5b:4e:5b:99:ae:51:70:c1:85:ad:ae:
                    86:7c:25:9b:1b:69:67:ef:94:00:99:ce:de:15:b2:
                    39:df:15:41:ab:a1:f8:be:e5:a1:b6:38:13:6f:c8:
                    39:4d:51:6b:7c:26:c6:d6:86:af:cb:54:be:c1:e5:
                    87:f8:e1:fe:b8:ca:27:3d:b4:dd:a1:6f:fd:01:e1:
                    62:42:5b:5a:1a:2b:0e:48:27:83:ec:b5:fa:5e:c3:
                    53:e9:81:9b:59:f5:5e:f3:c0:c8:cc:b8:af:89:2e:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7E:5D:62:FF:9C:69:4F:4F:4F:A8:EB:F3:0A:FD:EE:79:E0:55:F5
            X509v3 Authority Key Identifier:
                keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:ba:7c:8a:74:30:3d:7a:17:b7:3a:c9:55:9c:c6:5a:ba:
         69:0a:70:0b:9b:0c:52:2e:ff:16:26:af:b8:d7:d7:b8:c5:ee:
         8a:ce:79:0e:9d:db:b6:8b:1c:c9:3f:e9:fe:d4:94:cf:8c:45:
         49:c3:92:55:50:f9:9c:1c:9b:91:42:40:7c:df:17:38:05:a3:
         83:de:dc:83:e7:2d:04:84:65:09:70:7b:28:91:b4:74:25:fd:
         06:04:2b:65:89:e9:68:36:b2:26:16:cc:be:2b:f4:c8:17:0c:
         48:46:84:13:bc:14:fe:6c:4f:a7:41:7e:89:88:00:ad:9d:8b:
         60:23:0c:4d:09:7d:4e:b8:be:8f:19:d4:ab:ae:d5:a2:de:ba:
         d0:81:7c:5a:40:11:6a:5f:10:c4:5f:7b:a0:49:49:09:7b:64:
         f9:b0:c1:13:3f:2e:cc:2c:89:b0:0b:ab:0d:55:6d:50:20:31:
         f5:d2:e4:1c:e8:85:cd:ca:d4:a7:0d:26:8a:bb:90:16:cb:d3:
         70:f6:e0:40:61:60:27:23:01:5e:95:ee:81:59:25:1d:71:7e:
         b2:02:0d:2a:43:21:0e:86:9d:31:a5:61:ab:45:e7:97:2a:8f:
         74:9d:26:a9:51:01:52:b9:20:81:81:e4:9f:d0:98:da:f8:62:
         b4:37:f0:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYfWyXb+b2YMqzTgvuMwBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjYwMTE5MjMwMDU2WhcNMjYwMTIwMjMwMDU2WjAzMTEwLwYDVQQD
EygxNDdlNWQ2MmZmOWM2OTRmNGY0ZmE4ZWJmMzBhZmRlZTc5ZTA1NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGJzZuisomrampA9J2USwbChAD1o
UPUsHwC76oNzmrRdlhUOXbugOuQCzvvw1LkskAOIJpyOJYtO4lVW4mdnpjEzs9K7
Ms3Z1E7zJCQfbvgfOYbkz81UqJMnZqidUEDijPshbpfSyOE5aIIIPN28wn14fxJC
UP0kc0+TBKTg8Mau6ed46xSpPv3Ez+JwXqiAv8aQinUDLNt3W05bma5RcMGFra6G
fCWbG2ln75QAmc7eFbI53xVBq6H4vuWhtjgTb8g5TVFrfCbG1oavy1S+weWH+OH+
uMonPbTdoW/9AeFiQltaGisOSCeD7LX6XsNT6YGbWfVe88DIzLiviS7v3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR+XWL/nGlPT0+o6/MK/e554FX1MB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgy6fIp0
MD16F7c6yVWcxlq6aQpwC5sMUi7/FiavuNfXuMXuis55Dp3btoscyT/p/tSUz4xF
ScOSVVD5nBybkUJAfN8XOAWjg97cg+ctBIRlCXB7KJG0dCX9BgQrZYnpaDayJhbM
viv0yBcMSEaEE7wU/mxPp0F+iYgArZ2LYCMMTQl9Tri+jxnUq67Vot660IF8WkAR
al8QxF97oElJCXtk+bDBEz8uzCyJsAurDVVtUCAx9dLkHOiFzcrUpw0miruQFsvT
cPbgQGFgJyMBXpXugVklHXF+sgINKkMhDoadMaVhq0XnlyqPdJ0mqVEBUrkggYHk
n9CY2vhitDfwag==
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:55:07 2026 by rpki-client