This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File:                     JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier:          WoAYD+aLoFzu/2eYvbRKjjzd52+Nxgi1dTV5tp0J+uU=
Subject key identifier:   ED:7F:60:EC:53:07:A7:59:02:F9:89:A2:1D:24:E5:AF:9C:80:62:01
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019BFC8A725DE5E7E675A0108ABC144474BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 23:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:30 +0000
Files and hashes:         1: 15RDhqpZZkgsTOPSNsBqQRpBKw0.roa (hash: y1ueTNG9EINspskOLQGA36UFgKcaoRxo8MZbGAJPhNA=)
                          2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: Cusz8pOl7OhaqGH3/jn8UG8fCeF8Ifay1yXMDdTHRWE=)
                          3: eTMwYXEU18649L8hIZfY5-esqZ4.roa (hash: k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=)
                          4: hF8yqCHkZwt2QupwISMQn51KxH0.roa (hash: g4ZFxLc8VwmCSXJMAIu9zpO4JxsHcdS8GLLEWM06EHE=)
                          5: vxmucN7MwfwY4O7KULCcco-LMOo.roa (hash: LM+EAvwg71ia09ADFWQH++Rcqy8ftQKjbv/gLajVj5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 23:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:72:5d:e5:e7:e6:75:a0:10:8a:bc:14:44:74:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Jan 26 23:01:30 2026 GMT
            Not After : Jan 27 23:01:30 2026 GMT
        Subject: CN=ed7f60ec5307a75902f989a21d24e5af9c806201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:c5:ff:a9:1a:d2:88:10:41:e2:be:52:72:
                    70:4a:af:f3:fa:44:87:6f:18:ec:12:a3:0b:20:2a:
                    1b:04:0b:93:19:40:40:02:c4:22:92:e0:2c:ca:79:
                    94:69:37:32:a2:ea:73:79:81:dc:4c:57:84:14:50:
                    37:0f:6f:9f:9f:9e:48:b4:3e:8e:b4:d9:dc:69:6d:
                    5b:52:3a:c2:91:2c:bb:10:c0:1f:6e:2d:d6:2a:10:
                    da:73:ef:3d:15:a5:34:c4:9c:01:55:e0:9c:00:ec:
                    f8:90:c0:3e:ab:0d:65:c2:15:b7:47:68:25:44:25:
                    e6:be:cc:e1:51:8a:78:51:17:2b:2a:35:72:7a:9e:
                    eb:1a:57:ba:50:8b:05:96:31:74:20:1b:f9:26:59:
                    29:63:64:85:81:95:2d:ac:12:55:90:84:cd:cc:e8:
                    80:df:1d:7f:af:ca:e2:e6:53:e3:10:ef:3e:94:4c:
                    55:be:91:23:89:f2:ca:e9:c4:63:8a:de:c2:ad:53:
                    8d:e2:1d:3f:75:3a:50:2f:35:4c:ff:c3:a2:e7:0e:
                    e2:a0:20:76:f0:ed:be:ba:d4:ed:9c:ef:d4:5c:e9:
                    d4:e5:9f:02:f1:b0:ed:81:63:27:02:03:30:b1:4c:
                    1b:79:33:2d:26:b8:5c:8c:7d:40:a3:26:40:77:d8:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7F:60:EC:53:07:A7:59:02:F9:89:A2:1D:24:E5:AF:9C:80:62:01
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:a1:a4:4a:c1:a5:5a:68:85:6d:20:69:8e:3b:0d:b0:e5:
         b5:cb:fb:86:e2:58:96:b3:15:15:b5:0c:da:4c:f8:10:37:d3:
         c0:79:37:11:9c:0b:fc:c0:49:a4:6e:0d:5f:a5:4a:24:14:1f:
         ce:53:c0:fe:1d:67:ed:93:65:00:1b:0d:85:17:86:02:91:10:
         88:7d:86:0f:29:d1:48:fa:f5:fe:aa:2f:d1:dc:a2:02:0e:b7:
         ee:57:c1:bb:1c:bb:29:53:bc:e1:cc:b5:34:6d:b9:9b:f9:d3:
         96:f0:ef:db:0a:27:29:da:dd:40:80:e4:aa:b2:f6:22:4a:0e:
         59:22:e5:83:0d:9b:db:ab:89:81:0f:77:b1:86:3e:2c:b8:d7:
         40:a0:6d:66:2d:4d:39:4d:2c:55:43:47:79:ac:e9:aa:ae:fb:
         5c:cb:b2:1d:84:02:1e:70:5b:e4:2e:7a:04:1c:ba:d7:bb:e8:
         03:39:d1:c6:65:fe:fd:eb:29:53:5c:d8:b0:3c:0d:9a:59:92:
         2d:d3:1f:e9:af:57:e6:dd:dc:22:68:37:dc:a1:27:0b:32:02:
         26:84:bf:06:81:3a:66:9d:e3:ac:b4:ac:fc:92:78:a6:e2:c7:
         e9:78:58:10:bc:55:0d:43:5e:c1:21:34:28:c7:e0:5e:cc:4c:
         39:70:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:00:39 2026 by rpki-client