This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File:                     JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier:          Sd9MD7djrrx6MiN8N5qcRvhHRmmnkG6+HlEQvTbvv3A=
Subject key identifier:   39:01:98:F6:9F:BF:E5:9C:8D:CA:CA:C3:2B:CD:42:7B:09:55:9C:85
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer:       /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial:       019BD4325DDD94E2536267433872A12BE1A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number:          0E2B
Signing time:             Mon 19 Jan 2026 03:00:29 +0000
Manifest this update:     Mon 19 Jan 2026 03:00:29 +0000
Manifest next update:     Tue 20 Jan 2026 03:00:29 +0000
Files and hashes:         1: 2dSMBioa0CJlE-_iiWI5yu7Yi7M.roa (hash: 8jy3SPSzF+c2UbKzDY/rfjIL+e/CbsBFRDuCRIAKo94=)
                          2: EYEi3UyV4PPxbsXZPvHf3qct6b0.roa (hash: J8PkbU826kQSW013HrTZ3nJm8J4WQxOLN5tFHZuHLNw=)
                          3: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: xpCeVrX6o/HvHaX3dQ1CI90pPeqZYCvMNjxIUspOlhM=)
                          4: abClcaJF9Pz5P-aPFdTiX1324wo.roa (hash: y9xq/HgVZ9OrpJC9mppsc8uPLkL4WQBTwePMbo3kLgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d4:32:5d:dd:94:e2:53:62:67:43:38:72:a1:2b:e1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
        Validity
            Not Before: Jan 19 03:00:29 2026 GMT
            Not After : Jan 20 03:00:29 2026 GMT
        Subject: CN=390198f69fbfe59c8dcacac32bcd427b09559c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3c:ed:e4:13:7e:0e:f9:ac:7c:a6:e2:98:54:
                    0c:e9:2c:91:d6:e8:82:a3:d9:4e:75:a7:23:7a:01:
                    5d:ce:9a:b7:ca:33:1a:b0:03:e1:64:d7:92:56:b3:
                    e7:9e:a5:54:67:6e:ac:6e:e1:7e:4c:e1:25:d6:f8:
                    a7:0f:c0:5d:bc:de:2c:b3:5c:c8:dd:ee:ba:7c:a5:
                    f4:36:ea:ec:74:3f:43:79:99:64:48:dd:87:2e:21:
                    ee:ad:24:e2:b0:08:d7:47:94:7d:59:b6:3b:fa:66:
                    9a:ea:e5:84:6c:a1:30:97:8b:57:ce:c6:87:ac:8d:
                    3b:ff:92:15:25:3a:ae:4f:ff:23:36:83:32:ca:ae:
                    6c:9f:83:03:ef:f5:c4:39:3a:91:f1:00:2f:b9:64:
                    36:9b:e1:e2:05:8e:67:1d:20:4f:e5:aa:87:2b:ca:
                    d1:3a:4b:b5:40:53:43:c4:6a:d8:a7:ad:f4:58:ca:
                    02:6e:50:f4:08:db:ba:ad:1a:2a:03:e6:62:77:de:
                    b7:fe:8f:fd:bc:92:93:c9:63:27:54:db:57:92:7f:
                    5a:0a:6e:b5:77:7c:b6:51:b7:1c:88:15:92:03:d6:
                    ee:36:82:34:bd:06:9e:46:05:a1:c9:e5:43:10:8d:
                    96:cb:99:e8:2f:03:a7:49:2e:69:aa:10:c0:30:bd:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:01:98:F6:9F:BF:E5:9C:8D:CA:CA:C3:2B:CD:42:7B:09:55:9C:85
            X509v3 Authority Key Identifier:
                keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:61:3c:e5:7d:e2:40:fc:5c:94:a1:61:87:73:70:cd:da:
         19:9f:d5:78:2c:cc:57:dd:2d:5b:8d:3e:f0:9d:2c:97:f0:b0:
         eb:92:1e:de:39:33:f0:f1:9f:72:af:f7:5d:5a:06:00:79:7d:
         8a:b3:61:21:c4:6c:a4:84:7c:47:07:a0:7f:55:91:95:74:39:
         c7:e3:84:04:24:40:50:32:cc:3d:5a:88:98:1d:37:81:b2:7f:
         a3:01:fb:7d:61:54:26:56:7f:df:33:01:69:ee:1b:74:6c:d3:
         c1:e8:ce:82:96:e8:8a:41:3b:2a:4f:bd:b0:9a:6f:91:e8:e4:
         0f:bc:71:07:79:61:20:97:6c:ff:7c:92:80:0b:79:f5:9d:d2:
         5f:93:d7:90:33:6b:e1:30:10:35:21:a8:80:ee:05:93:8c:ea:
         e2:29:2d:8c:15:37:b4:12:02:e1:df:e8:15:8b:3b:15:26:19:
         c6:82:04:6f:43:cf:cb:35:02:76:f7:8c:69:6a:94:3c:7d:a7:
         1f:ac:28:a5:13:2e:11:d2:a8:fd:e3:9b:02:ce:24:98:22:13:
         80:86:82:f5:4a:ef:0f:cd:5b:84:fc:f3:f5:ad:a6:62:41:d5:
         c9:e7:ee:b1:46:62:33:8a:33:95:ed:ab:15:19:a3:6c:2b:8a:
         c1:b6:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:07:23 2026 by rpki-client