This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
File:                     Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft (raw, json)
Hash identifier:          oUchHEIJOldYKkWtcDjALlygpT7mahK7ouMrG0TcOgE=
Subject key identifier:   FE:AB:EA:92:83:C4:5E:93:55:C9:7F:03:04:A7:FC:7B:46:7A:96:F5
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Certificate issuer:       /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial:       019BCE9E197DAEAE2A22AA23E8A5FE230D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
Manifest number:          7F
Signing time:             Sun 18 Jan 2026 01:00:26 +0000
Manifest this update:     Sun 18 Jan 2026 01:00:26 +0000
Manifest next update:     Mon 19 Jan 2026 01:00:26 +0000
Files and hashes:         1: Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl (hash: zNJubq/uTBIn7xtPVQDpx8nR3ZTWSLPziNDVbZ0d8Dk=)
                          2: HKTlRw8pt_iSm4V-aB_WcaJhAik.roa (hash: izWUq7YDBbXVXG63e6scfhb3dS4aYrShuifxGXTpeTs=)
                          3: K3kf73kif_8vfliWyk4Ji5TH4kg.roa (hash: 3SYNjD7bYrrKEfJIrx17nR+BWZdkaTHk5mJAUooOIRc=)
                          4: LzrcKdtCnOcxwIXVys_RJ_TInLA.roa (hash: JYdZ7o0wOdwaNmYpHnApBEmPtzpUEbCrs8EkVkMmwb4=)
                          5: My-XsHw-pAeUCYdehCsmsl-d7DU.roa (hash: 88o/CECVw6Fg0CLNL8t4XNZPZxB1Y0nAWpPz410mWEk=)
                          6: P3DASKxbE4fNritsmNWOMr9fVp0.roa (hash: DabSiAhHMwaun/6BHPgQfV102dWvYK6dGo7VorlbJIQ=)
                          7: RoKhjHsA9qOTHog4qN5z9txoamQ.roa (hash: ffD+5mZjZ2zd3k6xobjIkH+QrnFvq8Or1nfW/j3huI4=)
                          8: SEJ5fIXlxUkJkOVn8BnUsAMC9UY.roa (hash: f3p21kqHYSx/CLW5cyZ2rz+TlyE7p3OQ1h/qoLM+/48=)
                          9: V6lGWiZ2jVo3s83BAWD9qzymG-M.roa (hash: TLHE6l2I0+s4AtxUSASTme+TbF4LWy7iWY+zHitON20=)
                          10: a4GMWnIJEb_DA9hg7kZuU5djAwg.roa (hash: mAW/nKgJWneFae6fS+zpLW6EH88W2cg/D2IILYB+gRM=)
                          11: bxNBlAIvzk_SF6ousanXCbANVpw.roa (hash: sT0TW9MJeQmOwJN59HN/7UMdZQOgq90ndExP5oEy1to=)
                          12: exKYPmby1hJwGmW-7_VqhM0XyAk.roa (hash: VAtQNF8T7tXYmX8AGBe402Tsxlv/qc9k3qGYwuDKq5s=)
                          13: koHuyp402Ngn3ka12oQGaA_PmT0.roa (hash: KFMe1cCTEIRgnL4lA3Z4q+ep3emiO8kdLzhuu9Ua/54=)
                          14: w-XfPqILteG9KHOxrgUZfeVhJuA.roa (hash: b2kqdmupyMow51gQQ6EiC8dJFvG8R5VrVALmITaAfS8=)
                          15: wgY3cF_O_xiUPvFNRKMjB3s-XoM.roa (hash: RGpRUe3K2yY5x3EKu/w9NolhZdC3sCxQVWFfcsYcLA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ce:9e:19:7d:ae:ae:2a:22:aa:23:e8:a5:fe:23:0d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
        Validity
            Not Before: Jan 18 01:00:26 2026 GMT
            Not After : Jan 19 01:00:26 2026 GMT
        Subject: CN=feabea9283c45e9355c97f0304a7fc7b467a96f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:4a:58:03:7f:6e:fd:b7:45:b1:ed:62:81:
                    45:17:cd:ea:bc:95:98:52:46:70:a6:95:31:8d:bc:
                    66:ea:b0:29:bc:78:37:88:48:6e:a0:69:d1:47:25:
                    6a:84:78:4d:8b:71:a4:0f:39:fc:c3:95:8e:e9:c7:
                    81:c5:6c:d8:f5:0c:75:ad:a3:57:05:41:48:15:8b:
                    e1:f7:de:eb:59:e6:ab:24:60:8a:05:e4:6c:36:65:
                    2d:3e:0f:b7:9f:9c:9d:d7:d6:84:18:27:50:99:ca:
                    0c:ad:a9:0f:9c:cb:e9:0e:a8:de:34:76:20:f2:14:
                    12:65:83:c9:57:2e:f5:6f:2c:ba:b7:da:85:72:86:
                    db:84:29:a3:ae:97:93:71:22:25:34:12:84:2e:b5:
                    2c:bd:cd:fb:c3:65:78:4f:2f:24:f0:9c:ba:81:71:
                    34:49:0c:84:89:0f:9a:49:ce:25:76:62:d9:e1:4a:
                    50:47:a6:a1:10:9a:d6:d9:50:e5:f6:59:3e:ba:02:
                    39:f7:18:f7:c1:b5:d3:aa:a3:06:86:92:06:7d:69:
                    a1:9d:93:ac:ad:ca:a1:cf:80:de:1d:39:18:a1:6a:
                    55:37:c1:0d:78:48:44:58:db:91:aa:d7:27:bd:17:
                    ff:b7:af:7b:1e:7b:44:12:4c:5c:a4:df:ed:1f:a0:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AB:EA:92:83:C4:5E:93:55:C9:7F:03:04:A7:FC:7B:46:7A:96:F5
            X509v3 Authority Key Identifier:
                keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:55:04:0e:8c:74:28:7a:3f:c2:8c:d2:5a:63:9d:96:01:
         5f:33:a0:c9:ff:48:34:5d:4a:52:ed:c6:9a:83:03:21:19:65:
         b7:2d:23:6b:1a:36:fd:a8:ab:c1:87:89:cb:65:2e:9b:5a:ad:
         2f:f3:cb:02:9a:f2:d1:14:e9:e2:10:f8:1b:01:f3:cf:c8:e0:
         93:37:a6:ee:72:11:df:4d:2a:b5:80:58:a8:6c:79:98:0e:df:
         ec:84:0c:1b:78:ad:c4:23:7a:b7:4f:32:0c:40:66:77:77:12:
         6a:f8:35:09:e4:c1:a1:08:dd:cf:86:1f:7e:a0:86:c9:71:21:
         c0:62:b6:62:ce:9b:8d:bf:d3:38:a5:ad:96:f6:18:18:15:83:
         36:2d:ef:72:10:c8:63:24:55:d6:05:94:b2:31:08:5d:00:d4:
         c5:d3:6e:11:2b:b4:d7:5b:53:e4:98:9f:e1:06:79:a6:b8:34:
         f9:25:a6:e2:66:59:16:20:aa:bd:07:c1:db:89:84:30:4a:d6:
         9f:ec:c5:d5:33:7a:a5:3a:0f:52:e2:cd:82:16:86:c3:29:71:
         fb:31:85:2b:93:3d:d4:1e:5f:48:c0:f1:2e:bc:33:49:f7:3a:
         98:5b:a5:bd:b2:6c:4e:2b:e1:f6:0d:49:b2:41:26:08:c4:83:
         f0:7e:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 05:24:44 2026 by rpki-client