This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
File:                     jvjEceg7FPxsbMfPyWwaw-MIfq4.mft (raw, json)
Hash identifier:          0zG92X9QiX1++pBXkYavhPZ+wgKkw31+Qp3EH4B2P4Q=
Subject key identifier:   15:F4:CA:A4:6C:D0:CC:AF:D8:78:E4:A7:C5:AA:57:EE:CC:09:E9:1E
Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE
Certificate issuer:       /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
Certificate serial:       019BFDD3ADF4EBF287CB6E6B3A2FFA344BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
Manifest number:          08B2
Signing time:             Tue 27 Jan 2026 05:01:06 +0000
Manifest this update:     Tue 27 Jan 2026 05:01:06 +0000
Manifest next update:     Wed 28 Jan 2026 05:01:06 +0000
Files and hashes:         1: P4VkZniabsXu9hktkMw5Rd09dnk.roa (hash: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo=)
                          2: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (hash: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk=)
                          3: jvjEceg7FPxsbMfPyWwaw-MIfq4.crl (hash: PQoa+n/b8JTZJzh/DuBrV6AUtqWhQ38Y1B95IWsMZDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:d3:ad:f4:eb:f2:87:cb:6e:6b:3a:2f:fa:34:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae
        Validity
            Not Before: Jan 27 05:01:06 2026 GMT
            Not After : Jan 28 05:01:06 2026 GMT
        Subject: CN=15f4caa46cd0ccafd878e4a7c5aa57eecc09e91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:09:45:9e:3d:89:93:02:f1:15:f7:9d:af:
                    88:57:b7:5c:cb:82:48:b6:c0:76:6e:40:47:8a:14:
                    fb:dc:09:0b:8e:9f:cf:2d:02:9f:28:91:89:77:b8:
                    82:74:52:e0:ed:23:4a:d5:85:7a:fd:24:d1:1d:48:
                    7a:5f:23:ae:50:1a:cb:46:f2:66:07:88:65:d6:7f:
                    0d:40:af:fb:6b:bf:22:6d:dc:66:d5:35:da:32:a8:
                    04:de:0e:2b:b4:21:68:96:07:58:80:15:75:f8:30:
                    3e:ec:fd:73:30:88:3b:6b:86:0b:da:c6:d5:5d:a7:
                    7a:d1:eb:3f:ca:6e:68:21:e8:77:7a:f3:30:d3:4a:
                    40:4a:99:78:bc:f3:69:c4:30:87:43:e1:05:b3:d9:
                    78:0b:ad:0f:3f:02:76:e3:79:ea:56:a7:e2:e6:96:
                    52:7a:a7:d6:84:ff:4d:91:31:cf:23:2a:35:83:32:
                    09:71:8a:4c:76:29:24:d0:1f:de:14:ba:3b:72:f2:
                    46:4c:b7:9d:46:33:56:b4:4c:71:7e:2a:3a:bf:6e:
                    c7:1f:75:86:dc:1e:e2:f6:49:13:f3:8a:e5:b6:aa:
                    6f:09:eb:71:7a:2a:42:73:d7:97:93:ee:36:d5:69:
                    62:d0:53:f4:83:09:2c:24:91:b7:71:50:6f:b2:3b:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:CA:A4:6C:D0:CC:AF:D8:78:E4:A7:C5:AA:57:EE:CC:09:E9:1E
            X509v3 Authority Key Identifier:
                keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:8e:c1:37:1f:5a:6b:f9:27:42:4e:a7:33:e3:a8:13:68:
         e0:9d:d8:6a:85:65:1d:b7:d1:67:0a:a9:42:20:a3:4f:7c:e4:
         0b:b3:b1:90:05:16:6f:ca:42:d0:b2:6a:23:27:d8:5e:5d:53:
         88:d2:12:d6:b5:89:da:55:97:a1:29:c4:f0:5d:1b:46:d0:fe:
         19:98:9f:aa:4e:de:06:59:2e:f8:44:13:de:43:b4:75:ce:f7:
         ea:c3:db:20:47:f0:53:ab:a0:60:ec:0e:4e:fc:bd:61:27:02:
         77:f8:6b:40:65:e6:8a:1f:2d:61:21:a1:3a:10:eb:83:1d:9d:
         53:e0:8f:98:4e:a2:9f:d3:bf:bb:09:4d:7d:50:f3:5f:c3:0d:
         18:e7:dc:7e:6e:0b:48:ea:cc:5c:b4:25:8e:8a:b8:d4:c3:a6:
         6d:f4:5b:ed:ff:df:98:7d:0a:2f:ac:20:34:60:b3:ef:aa:c0:
         8f:22:6e:f0:15:7b:d2:bf:62:df:1d:65:4a:eb:c2:52:1a:4d:
         f2:26:26:8b:bc:bd:6e:a3:91:eb:b3:4d:92:ab:30:ed:85:2b:
         4d:51:73:b1:09:2b:05:24:30:b1:92:39:9f:27:29:91:21:99:
         66:c2:fb:27:d1:fb:e8:ca:f1:51:a5:ee:b0:96:82:8f:99:a5:
         e2:16:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:42 2026 by rpki-client