This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File:                     jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier:          NcQTgpulzTmh5Xo1D9ucHGYx8b4UeWq1Vdb13UdcPSw=
Subject key identifier:   67:EA:19:D9:A9:29:0B:E6:F5:20:CF:1A:2F:85:71:0A:C3:FA:16:8E
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer:       /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial:       019BFEAF74745E74F0DB3F5E7E483B4BDF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number:          1780
Signing time:             Tue 27 Jan 2026 09:01:10 +0000
Manifest this update:     Tue 27 Jan 2026 09:01:10 +0000
Manifest next update:     Wed 28 Jan 2026 09:01:10 +0000
Files and hashes:         1: albAVH6lwfzmwVJzDmkpKh655KQ.roa (hash: BpL6bwg3t5pCu5LLatPQum4u8725IbG+PO63ipkITdM=)
                          2: i-ANpr6wgO4krsxaS_Mr1pJHk_s.roa (hash: gL8PqoF8vFY4ZSfQKB1yxJH42nNfNmgI+ETePYwGBJ0=)
                          3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: 692KVUOn2Fz0F+ypF532w1LlpSQ99dUQPhsgtsGJxDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:af:74:74:5e:74:f0:db:3f:5e:7e:48:3b:4b:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
        Validity
            Not Before: Jan 27 09:01:10 2026 GMT
            Not After : Jan 28 09:01:10 2026 GMT
        Subject: CN=67ea19d9a9290be6f520cf1a2f85710ac3fa168e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:49:ea:2d:5a:bb:37:98:a7:a5:fa:67:31:
                    b7:dd:ef:c8:01:ac:34:b5:c4:f1:ee:8d:4b:3f:a0:
                    63:14:7c:0c:dc:30:d4:8f:a6:f1:2b:87:5d:a2:08:
                    36:38:75:29:f3:c1:07:2d:3f:1b:f0:ce:1e:07:37:
                    31:1a:29:cf:1c:7d:33:1a:c8:a7:dc:28:a4:df:9f:
                    18:83:98:e0:74:e2:c4:55:54:90:9b:5c:ed:8f:61:
                    4d:ea:24:cd:af:2e:b9:91:a8:49:a5:8e:c7:46:ec:
                    8f:f0:8e:e6:f5:c0:77:db:b9:ae:64:47:f2:c6:ab:
                    27:f7:ec:f6:5d:69:aa:af:56:ee:ee:11:fc:d8:e2:
                    f4:28:ff:e4:e7:4a:6a:b9:71:cf:e4:65:a7:37:5c:
                    51:ca:ff:cf:84:c7:d3:df:c2:14:09:44:da:33:d9:
                    e1:f0:67:69:0b:a9:97:95:a4:0c:37:88:bc:85:34:
                    a7:c6:18:a1:b5:4d:50:89:da:4f:10:2a:48:f3:91:
                    46:2f:6c:f4:06:ea:6e:cd:b1:9a:97:33:4f:93:76:
                    f9:0f:a5:5e:ad:31:9d:22:ab:81:50:e8:28:f1:f3:
                    61:c3:2c:9c:f7:56:b4:b8:33:a9:fd:5d:72:d2:2a:
                    97:86:45:56:2e:d5:51:62:36:29:df:c9:bd:03:7e:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:19:D9:A9:29:0B:E6:F5:20:CF:1A:2F:85:71:0A:C3:FA:16:8E
            X509v3 Authority Key Identifier:
                keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:4d:02:47:73:b7:4c:41:f3:03:a9:ec:d9:f6:28:0d:16:
         0a:b4:7c:d8:9e:70:87:9b:fb:58:9a:b3:5c:1d:ad:13:e4:82:
         ed:7b:9a:fa:10:dd:f9:cb:12:97:79:2b:bc:0f:2c:1b:fb:9f:
         da:ef:e0:f8:e3:61:66:fa:d3:b0:5d:77:0e:0f:2d:4f:a2:ee:
         a1:df:86:f5:1f:bc:e3:3c:79:3b:a5:82:89:ec:58:1c:71:6b:
         4c:ea:3a:66:70:86:5f:c2:29:8e:7f:ef:59:7a:1b:9b:aa:fd:
         e6:ff:05:fd:9c:ce:1c:49:a4:7d:c2:75:72:1c:00:1e:4a:90:
         a2:42:9e:ed:c7:67:59:a3:4f:2a:3d:00:d5:cf:34:41:0a:44:
         36:1f:72:6c:12:ec:3e:47:67:6d:97:89:ed:0c:bf:b6:37:c4:
         5a:20:51:8d:4b:53:28:c6:0e:5c:ec:bc:db:60:75:ff:c4:b4:
         fd:28:3c:0d:28:e0:c6:b7:39:8e:34:f9:cb:6f:9d:df:89:d5:
         ca:ef:52:e8:0c:d4:77:64:07:3b:85:5f:e5:9b:93:5a:19:d8:
         37:eb:52:0f:fd:44:2d:81:40:86:03:1f:ae:f6:0f:81:92:30:
         8c:69:84:12:75:5a:6e:46:60:81:3a:ab:7b:42:2c:38:59:39:
         8e:4b:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 16:21:56 2026 by rpki-client