This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File:                     jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier:          8rZWhwbbUxsRp41QNCGS5CFJeQn+YbhIj2mUxWGnGi8=
Subject key identifier:   A9:81:A1:9A:C5:91:C0:61:C0:0C:6A:0D:2F:81:29:35:F2:B9:8E:15
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer:       /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial:       019BFC52F2A92ECB7221DD062EADD0F9D4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number:          0C6A
Signing time:             Mon 26 Jan 2026 22:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 22:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 22:00:53 +0000
Files and hashes:         1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
                          2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: oOuksFZ+LJJd5mE75OBoeWRIQHbT5SJ1bK+IxNckIJc=)
                          3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:52:f2:a9:2e:cb:72:21:dd:06:2e:ad:d0:f9:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
        Validity
            Not Before: Jan 26 22:00:53 2026 GMT
            Not After : Jan 27 22:00:53 2026 GMT
        Subject: CN=a981a19ac591c061c00c6a0d2f812935f2b98e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:c7:54:28:7a:ab:ca:71:bb:bb:ca:9e:a6:
                    d8:a1:fb:4f:6a:06:8e:0f:b5:38:2a:f7:ee:c1:90:
                    90:1f:b5:ec:64:d1:41:84:c2:e6:e4:b3:87:20:1a:
                    73:90:99:c4:b4:42:14:98:6c:16:12:c6:5f:1b:af:
                    8e:ad:74:56:ff:b0:fa:90:86:14:be:dc:c8:dd:fb:
                    45:31:5d:46:da:51:ca:7a:79:54:d6:97:48:01:29:
                    97:b3:3d:18:8d:01:6a:5a:18:06:9e:86:f1:93:f3:
                    d9:3d:33:96:3e:c5:73:0d:25:0c:50:cf:9a:df:40:
                    82:6a:27:6b:a6:90:bd:80:0d:dc:e6:ee:de:3b:94:
                    4e:78:05:fb:70:10:a7:46:b1:01:28:df:b9:8a:0a:
                    ee:a8:bc:3c:a4:f3:cd:5a:cf:82:a5:4b:58:e1:0c:
                    e3:4d:f7:d3:6f:f8:86:fa:80:23:16:1b:50:e2:cd:
                    36:49:e9:4b:1c:1d:2b:66:f5:11:aa:dd:f1:c2:fb:
                    d0:6c:b4:93:ba:80:43:c6:bd:2d:b4:41:0f:85:c2:
                    7e:a1:43:2c:b6:18:6b:8c:6e:0b:df:06:4e:3b:ff:
                    4e:61:fa:bc:ef:28:3a:52:1d:4d:b2:e7:a8:2d:2a:
                    96:df:ea:d0:f2:81:26:5b:7a:db:54:29:76:22:02:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:A1:9A:C5:91:C0:61:C0:0C:6A:0D:2F:81:29:35:F2:B9:8E:15
            X509v3 Authority Key Identifier:
                keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:4a:be:88:e5:b4:f8:94:d1:bd:77:49:85:e4:f3:18:26:7e:
         27:27:83:3f:96:d4:42:49:f5:9d:06:bf:8f:bc:42:d2:58:10:
         1b:6b:3d:45:05:54:a4:30:9a:d3:98:3e:ee:39:0c:74:6f:67:
         a0:2f:50:c7:92:94:d5:6f:84:29:3a:ed:d0:69:5d:f2:f0:58:
         b0:09:92:cd:98:08:1a:40:7a:52:70:ac:56:b6:04:4e:39:ce:
         97:a4:b7:9c:d8:96:8d:6d:36:88:35:1c:2c:c9:74:67:4d:e2:
         37:f7:4d:a4:fa:25:df:ac:c1:76:4c:43:85:23:d8:69:c8:0b:
         c2:e8:ea:30:16:8c:30:64:ac:c2:72:53:3c:76:87:b2:73:46:
         a0:de:9a:09:77:65:9c:1a:23:23:32:fb:a6:77:0a:40:b8:d7:
         77:69:4e:eb:e7:4d:e8:59:78:38:e7:db:a9:be:c9:a8:63:b7:
         58:e7:11:2e:31:fd:e2:cc:9c:a3:41:65:08:ea:4c:dd:63:c3:
         19:38:04:de:51:f8:31:db:fe:8f:c9:44:d2:3c:1a:ec:dd:19:
         16:61:9b:60:86:df:b6:ae:31:a2:67:06:36:34:24:1d:c3:2f:
         ae:51:cf:31:ca:68:fb:e0:89:35:9c:f8:38:83:59:74:b0:51:
         f2:17:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:39 2026 by rpki-client