This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
File:                     jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft (raw, json)
Hash identifier:          6gGmxb0gWwmrlSzkozu49PesJRn4A9Aaa8/UtKRhXA4=
Subject key identifier:   F2:07:7C:FA:91:6B:27:FA:58:46:EF:D7:AC:54:E4:B1:59:5B:5E:BC
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019BF386743988D8A94692E7C80368A87AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
Manifest number:          B4
Signing time:             Sun 25 Jan 2026 05:00:33 +0000
Manifest this update:     Sun 25 Jan 2026 05:00:33 +0000
Manifest next update:     Mon 26 Jan 2026 05:00:33 +0000
Files and hashes:         1: 8sncQGN_dofXozDeejTadUl8wRs.roa (hash: SW1+/cf3HtR0IB+S11zpo2LhAnvKL4afLlJ8vSGUHZ4=)
                          2: UtXzH5Oi0AulZFx0l8qig6QKaPg.roa (hash: 1qkvw5zb1r9z9CjOBe9UqDsw7BNtoAEFm0cGx+TLWUU=)
                          3: jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl (hash: 7rHeqWazwi8fYZLYWwav/jHag+HnDLeNW+Yc1c1w3yM=)
                          4: qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (hash: Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:86:74:39:88:d8:a9:46:92:e7:c8:03:68:a8:7a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Jan 25 05:00:33 2026 GMT
            Not After : Jan 26 05:00:33 2026 GMT
        Subject: CN=f2077cfa916b27fa5846efd7ac54e4b1595b5ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:60:98:14:6a:09:00:28:cd:99:a3:17:45:
                    0a:6f:8c:1a:53:d4:2b:4a:47:2c:7f:4a:96:44:d1:
                    aa:7d:05:9f:75:d2:dd:68:11:5e:3d:1c:8b:75:51:
                    bb:87:10:a7:5b:61:1d:5f:30:a4:80:54:3e:0c:b3:
                    2e:79:a5:16:00:e5:43:2a:7b:60:2f:53:06:0c:51:
                    8e:d5:61:88:b5:9f:bf:ce:21:3d:e2:a7:30:dd:8c:
                    56:fc:a2:35:28:71:f7:2d:6a:b4:b1:88:af:8c:f9:
                    99:19:01:90:69:e8:ca:53:2e:dc:05:ac:90:bc:39:
                    94:2f:16:0d:c9:1f:f5:ba:58:d6:77:f5:b8:4c:df:
                    d8:7b:12:4b:d9:f3:13:57:68:7c:94:e1:59:d4:57:
                    d8:e1:78:4a:5d:88:d0:0a:75:51:37:98:ee:27:58:
                    fe:5d:a6:1e:5d:f2:2f:8f:17:fa:bd:bf:8c:64:e6:
                    ef:db:78:e5:af:93:30:32:34:c4:8a:23:2a:04:b5:
                    ab:5a:e2:81:b3:04:8e:40:33:f7:fe:ac:37:2a:5b:
                    dc:e8:a7:92:51:0e:72:14:df:6b:f0:d5:e1:3e:1c:
                    19:89:29:f8:86:da:d1:d0:8e:35:01:0d:32:5c:1a:
                    96:72:b0:d0:13:b5:e2:49:f2:ea:27:b2:0f:cd:0b:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:7C:FA:91:6B:27:FA:58:46:EF:D7:AC:54:E4:B1:59:5B:5E:BC
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:14:1f:3a:bf:31:62:35:a2:99:2e:68:18:8e:c5:c8:97:da:
         87:92:93:72:5a:55:14:04:1f:dd:fa:16:46:31:88:3c:d2:0f:
         26:eb:dc:16:aa:d0:71:c8:bd:cb:55:e4:a7:4f:88:b1:8e:41:
         63:6e:df:05:19:ad:37:c2:37:bc:94:70:c0:98:7c:07:05:1d:
         f8:9d:04:81:56:b7:43:4a:f2:a3:ea:37:26:fe:8f:30:97:37:
         10:17:ed:72:89:96:d5:87:0f:a8:c1:e5:7e:0c:95:19:dd:17:
         db:1a:b9:60:b3:2d:39:c5:1f:e6:9e:29:5c:f9:dd:07:3d:cc:
         bb:39:e0:19:89:78:6c:be:0e:68:e0:10:98:89:5f:da:7d:1d:
         06:a7:b6:2d:e0:81:f6:14:be:61:89:7b:27:dc:31:7e:b0:82:
         3b:b6:83:b9:d2:ad:2f:5b:1f:46:44:64:85:cf:86:c2:ed:3f:
         e5:4f:f6:bb:ac:96:b1:5e:c1:ca:f3:27:78:be:d0:9c:06:83:
         e4:ef:6d:68:78:e8:8b:5e:0a:55:3c:0f:dd:b6:6e:8c:2a:0d:
         ec:a6:11:17:a6:d8:9d:48:19:b5:cf:2f:97:52:50:57:52:9c:
         3f:c3:e2:43:42:25:c9:2f:34:43:c1:ed:f0:67:e7:5a:25:54:
         28:6f:b5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzhnQ5iNipRpLnyANoqHqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl
NzNlNWUwHhcNMjYwMTI1MDUwMDMzWhcNMjYwMTI2MDUwMDMzWjAzMTEwLwYDVQQD
EyhmMjA3N2NmYTkxNmIyN2ZhNTg0NmVmZDdhYzU0ZTRiMTU5NWI1ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjBgmBRqCQAozZmjF0UKb4waU9Qr
Skcsf0qWRNGqfQWfddLdaBFePRyLdVG7hxCnW2EdXzCkgFQ+DLMueaUWAOVDKntg
L1MGDFGO1WGItZ+/ziE94qcw3YxW/KI1KHH3LWq0sYivjPmZGQGQaejKUy7cBayQ
vDmULxYNyR/1uljWd/W4TN/YexJL2fMTV2h8lOFZ1FfY4XhKXYjQCnVRN5juJ1j+
XaYeXfIvjxf6vb+MZObv23jlr5MwMjTEiiMqBLWrWuKBswSOQDP3/qw3Klvc6KeS
UQ5yFN9r8NXhPhwZiSn4htrR0I41AQ0yXBqWcrDQE7XiSfLqJ7IPzQt7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIHfPqRayf6WEbv16xU5LFZW168MB8GA1UdIwQY
MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt
NjdmZjVhMGNlMWE1LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1
LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExQfOr8x
YjWimS5oGI7FyJfah5KTclpVFAQf3foWRjGIPNIPJuvcFqrQcci9y1Xkp0+IsY5B
Y27fBRmtN8I3vJRwwJh8BwUd+J0EgVa3Q0ryo+o3Jv6PMJc3EBftcomW1YcPqMHl
fgyVGd0X2xq5YLMtOcUf5p4pXPndBz3MuzngGYl4bL4OaOAQmIlf2n0dBqe2LeCB
9hS+YYl7J9wxfrCCO7aDudKtL1sfRkRkhc+Gwu0/5U/2u6yWsV7ByvMneL7QnAaD
5O9taHjoi14KVTwP3bZujCoN7KYRF6bYnUgZtc8vl1JQV1KcP8PiQ0IlyS80Q8Ht
8GfnWiVUKG+1pA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:56:47 2026 by rpki-client