This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          V0nLNjJZ3ip7O/p+8/C1vsIEZDgq1PFH+neOK52vC2o=
Subject key identifier:   3E:FB:CD:3B:7F:86:AF:EC:E9:AF:B2:B3:30:24:81:1B:CB:DE:60:1A
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       019C0B213A6D7506BBEBF710EAE4EBBF487C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          17FB
Signing time:             Thu 29 Jan 2026 19:00:52 +0000
Manifest this update:     Thu 29 Jan 2026 19:00:52 +0000
Manifest next update:     Fri 30 Jan 2026 19:00:52 +0000
Files and hashes:         1: 12Bkajqn8hY_Tq-T8WCRlP0nznI.roa (hash: jWtonX7g3GC6/5xeR6p1a9rNHCNPlB4P0Uas2A2bjUs=)
                          2: 2HtmQ8xlAJvm0moSCesBLrlqcg0.roa (hash: KEh1A4R7uR3CothDrO5KpNTer5MO9ATqtUH8iwiVnsE=)
                          3: AO6sWsJNSjTXMKcNRY6EDXZ3xME.roa (hash: EfPwurI2AoPqZUYbh42RmCLOoiMjh57uB5KvuqjCpDI=)
                          4: AkkpcfvYgRN9-dBm_sDrZIzwpQg.roa (hash: tVvTVlzi68bWXLrCBZVOAwWEBV5LPqcuZ68tBSNWDQE=)
                          5: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: EgRrQcRCLr+nHUg5nB+qjHfsnVWk6/ymZgLC+NlM07E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0b:21:3a:6d:75:06:bb:eb:f7:10:ea:e4:eb:bf:48:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Jan 29 19:00:52 2026 GMT
            Not After : Jan 30 19:00:52 2026 GMT
        Subject: CN=3efbcd3b7f86afece9afb2b33024811bcbde601a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:08:68:69:52:1b:ca:02:00:3a:e3:7b:b6:
                    1b:fe:b2:03:0e:88:2f:60:b0:e0:bd:ff:0c:bc:72:
                    12:d7:8b:51:82:ac:8b:c3:ed:06:75:8e:4d:bf:b3:
                    b0:6a:3d:f8:26:ef:b6:84:5b:8a:3d:94:b7:5e:a7:
                    9a:79:f9:18:ae:89:5d:27:74:04:4f:08:1e:1d:64:
                    0b:3b:83:d4:88:49:ba:f8:88:f0:22:1a:d2:ca:62:
                    ca:62:d6:c8:61:55:a0:46:28:e1:f6:94:65:84:bf:
                    d0:7d:44:d5:da:d2:47:1a:26:04:a2:94:19:33:e3:
                    ca:e9:cd:82:cd:a1:05:86:ee:16:b9:8f:a3:b6:69:
                    f7:1d:49:2e:86:5f:29:98:8b:eb:3f:f6:b9:37:b8:
                    9a:72:98:ad:e4:a6:3a:96:70:81:df:be:6a:65:3a:
                    bc:83:a7:20:ac:5e:38:50:63:b8:9d:99:ba:81:f1:
                    91:4b:88:1a:58:a2:d3:2f:78:2b:4f:e7:8b:3a:62:
                    23:28:be:1d:25:3e:e1:28:03:e9:26:a4:17:5a:34:
                    4f:02:47:97:f8:b3:8e:4d:86:1b:bc:2b:07:46:ef:
                    37:1e:f1:7c:63:d4:51:1c:e3:5b:a7:c1:d7:16:c3:
                    fa:6c:7f:f8:be:30:e4:cb:b4:12:c7:11:c6:3d:c0:
                    74:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:CD:3B:7F:86:AF:EC:E9:AF:B2:B3:30:24:81:1B:CB:DE:60:1A
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:1c:cd:ad:9a:8a:63:87:db:b3:03:7b:fc:28:16:06:42:
         a4:0b:f1:e3:44:57:34:9c:b5:c1:56:d5:f2:fe:29:2e:d6:a6:
         b9:45:7c:a6:e3:a4:1f:32:e3:5b:18:d8:68:8b:17:eb:45:14:
         6e:de:1e:75:b1:b7:34:98:48:7b:d6:74:ee:ef:fc:cc:e5:15:
         f1:bd:b6:14:02:7f:c3:7b:4f:19:6a:f3:dd:4a:d9:92:75:25:
         21:d6:e0:81:53:65:04:b6:96:b1:7a:0e:bc:27:fd:be:cb:da:
         c3:1e:ec:ff:92:c6:59:05:84:34:cb:28:e3:d6:20:c2:45:c1:
         f4:a9:98:01:4d:ab:3b:85:99:04:53:3f:33:27:60:54:82:21:
         a7:c7:be:17:90:4c:a1:73:0b:0e:ee:4c:47:2e:2e:22:45:48:
         05:5b:66:d4:dd:c5:f0:bb:d6:3e:e4:f4:7b:79:3e:db:5e:f2:
         b9:62:2d:a4:9d:1f:5c:22:7d:09:56:89:18:b7:8c:3c:b5:61:
         41:60:92:e7:50:14:10:95:7d:ac:a0:1d:a2:c7:33:ca:8c:44:
         1f:d2:2a:4b:83:fd:e5:72:49:80:31:60:28:26:58:b7:18:39:
         ab:f9:c5:65:0e:7b:5c:8f:9d:70:07:a2:f3:75:7c:63:ff:24:
         d9:ee:07:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwLITptdQa76/cQ6uTrv0h8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw
OTBhMjEwHhcNMjYwMTI5MTkwMDUyWhcNMjYwMTMwMTkwMDUyWjAzMTEwLwYDVQQD
EygzZWZiY2QzYjdmODZhZmVjZTlhZmIyYjMzMDI0ODExYmNiZGU2MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJoIaGlSG8oCADrje7Yb/rIDDogv
YLDgvf8MvHIS14tRgqyLw+0GdY5Nv7Owaj34Ju+2hFuKPZS3XqeaefkYroldJ3QE
TwgeHWQLO4PUiEm6+IjwIhrSymLKYtbIYVWgRijh9pRlhL/QfUTV2tJHGiYEopQZ
M+PK6c2CzaEFhu4WuY+jtmn3HUkuhl8pmIvrP/a5N7iacpit5KY6lnCB375qZTq8
g6cgrF44UGO4nZm6gfGRS4gaWKLTL3grT+eLOmIjKL4dJT7hKAPpJqQXWjRPAkeX
+LOOTYYbvCsHRu83HvF8Y9RRHONbp8HXFsP6bH/4vjDky7QSxxHGPcB0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD77zTt/hq/s6a+yszAkgRvL3mAaMB8GA1UdIwQY
MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt
M2M5ZWJjNDU2NjIzLzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz
LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXgcza2a
imOH27MDe/woFgZCpAvx40RXNJy1wVbV8v4pLtamuUV8puOkHzLjWxjYaIsX60UU
bt4edbG3NJhIe9Z07u/8zOUV8b22FAJ/w3tPGWrz3UrZknUlIdbggVNlBLaWsXoO
vCf9vsvawx7s/5LGWQWENMso49YgwkXB9KmYAU2rO4WZBFM/MydgVIIhp8e+F5BM
oXMLDu5MRy4uIkVIBVtm1N3F8LvWPuT0e3k+217yuWItpJ0fXCJ9CVaJGLeMPLVh
QWCS51AUEJV9rKAdosczyoxEH9IqS4P95XJJgDFgKCZYtxg5q/nFZQ57XI+dcAei
83V8Y/8k2e4HAg==
-----END CERTIFICATE-----
Generated at Fri Jan 30 01:20:47 2026 by rpki-client