This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File:                     Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier:          j5GhYQ3Mdt9ldomaWU3kjTT4UPJcjwLGN/40Uy11cwc=
Subject key identifier:   89:8D:2B:8A:3B:FB:DA:FA:A5:A3:96:AF:25:28:68:6F:98:41:F0:CE
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer:       /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial:       019BAB374A36866823AD293E971AD55EE606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number:          0778
Signing time:             Sun 11 Jan 2026 04:01:25 +0000
Manifest this update:     Sun 11 Jan 2026 04:01:25 +0000
Manifest next update:     Mon 12 Jan 2026 04:01:25 +0000
Files and hashes:         1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
                          2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: EM87xQe1lNKDHsZlQNuQmy/xfzxYdJTPBZ7x4ddkoUk=)
                          3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ab:37:4a:36:86:68:23:ad:29:3e:97:1a:d5:5e:e6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
        Validity
            Not Before: Jan 11 04:01:25 2026 GMT
            Not After : Jan 12 04:01:25 2026 GMT
        Subject: CN=898d2b8a3bfbdafaa5a396af2528686f9841f0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:0a:cc:1b:25:33:f4:b7:f4:d3:3e:6e:7c:
                    44:fa:6e:7a:1b:8e:e8:95:45:8b:72:eb:f4:81:d0:
                    44:e3:d1:4f:a5:ab:cf:36:88:92:39:aa:38:c3:46:
                    b1:69:7d:c7:a4:a9:ed:75:a4:79:3f:71:48:c4:e1:
                    f4:a0:74:43:c4:90:68:7f:31:cf:63:23:fa:3c:65:
                    15:b0:7a:37:d2:05:7b:e2:37:6a:81:91:c0:7e:19:
                    9f:9d:97:89:cb:85:d7:4d:4f:93:7d:15:1d:b0:3a:
                    0b:7c:bc:04:61:f8:ab:38:ac:c3:3e:f1:2f:74:f4:
                    a5:e2:70:3a:2a:a6:f4:79:23:55:b4:12:78:5d:f2:
                    b4:06:1b:f5:58:9d:83:3c:9d:c4:fe:58:22:64:06:
                    16:ff:4f:48:e4:c3:cc:6a:36:df:16:e8:56:c9:9d:
                    41:ad:dd:05:02:3b:a9:87:7f:61:9c:43:c3:37:43:
                    e2:ef:bc:4e:69:8e:6e:24:4b:23:ec:96:57:cf:b2:
                    41:09:8d:47:4c:ed:10:e3:95:90:45:f6:09:df:e8:
                    78:51:e6:13:a7:64:fa:1a:59:52:94:3e:d7:13:e4:
                    e0:9a:8f:a9:3d:56:8f:89:f0:86:a2:c5:85:28:92:
                    fa:23:f6:38:18:11:ed:68:80:75:3f:44:ad:a5:5d:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8D:2B:8A:3B:FB:DA:FA:A5:A3:96:AF:25:28:68:6F:98:41:F0:CE
            X509v3 Authority Key Identifier:
                keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:e6:85:ed:fb:72:f6:a4:f9:41:db:d1:17:a2:cc:bf:9b:
         12:fe:82:f6:37:18:b7:d8:c0:b4:76:0d:d1:98:68:ce:26:74:
         e0:dc:61:75:6c:ad:cd:53:fc:10:e3:99:53:29:31:f6:18:a0:
         3c:16:98:9b:81:9a:37:4c:cb:9f:ba:b1:1a:d2:da:5e:95:fe:
         72:8f:ea:f4:ca:f7:2a:6e:eb:a0:d2:76:f8:f1:83:19:06:1c:
         92:a8:e4:75:0b:68:7b:6f:0c:06:11:3e:4b:7f:f4:70:4c:e5:
         b8:2d:e5:28:13:9d:56:8c:84:37:23:fa:e9:f8:e5:33:dc:0f:
         35:49:8e:cf:82:02:82:c6:f1:6f:fc:b4:d1:53:3c:82:e7:3d:
         bb:22:cd:de:37:32:d9:c8:9c:46:f3:60:e9:95:96:95:c6:a3:
         a7:47:b0:ed:c8:84:24:dc:6b:b9:6a:4d:24:b7:21:23:69:5e:
         8b:e9:7d:4c:5c:4f:b7:c5:ea:91:93:10:1e:b1:a8:3d:21:31:
         e3:5f:12:a1:9b:be:82:59:e6:54:1b:30:62:89:df:09:a4:52:
         cb:ad:f8:dd:91:28:a7:a2:5d:f3:2e:13:58:6d:14:fc:a4:7d:
         d7:c3:0f:66:85:8a:84:35:49:f9:31:1a:23:ff:cc:ab:fc:af:
         c8:1d:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:36:04 2026 by rpki-client