This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
File:                     jXskLMdAYjU4IyQFjJHa_GOZACY.mft (raw, json)
Hash identifier:          gCwKOaNOASWwNHTML9/ykrlIfNY3L1Mec+enMIbQMEU=
Subject key identifier:   D0:40:59:27:F8:D7:35:1D:CC:3B:08:C9:72:15:55:8A:C3:6A:0D:1F
Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
Certificate issuer:       /CN=8d7b242cc7406235382324058c91dafc63990026
Certificate serial:       019C1CB9C2E38068AF0B45FC2443FB6D1762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
Manifest number:          93
Signing time:             Mon 02 Feb 2026 05:01:01 +0000
Manifest this update:     Mon 02 Feb 2026 05:01:01 +0000
Manifest next update:     Tue 03 Feb 2026 05:01:01 +0000
Files and hashes:         1: P0CumdZQgDSrrWlI0D1aYJJUcd0.asa (hash: BA2NFYuYvPxMigDBuhbLG4trF8mSaN77z6KytfnkVdg=)
                          2: jXskLMdAYjU4IyQFjJHa_GOZACY.crl (hash: fzbfPrrfTANyxBY+vdZY4yHlBrUhQUGJmb+MhNoFa3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:b9:c2:e3:80:68:af:0b:45:fc:24:43:fb:6d:17:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7b242cc7406235382324058c91dafc63990026
        Validity
            Not Before: Feb  2 05:01:01 2026 GMT
            Not After : Feb  3 05:01:01 2026 GMT
        Subject: CN=d0405927f8d7351dcc3b08c97215558ac36a0d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:95:f3:7e:5b:33:9e:3c:eb:a0:e2:9f:f1:
                    07:f1:84:2b:65:07:ee:3e:c0:6d:95:9a:d5:f3:86:
                    6a:fa:b5:ae:1e:b1:7f:52:67:3f:41:a4:57:fa:d6:
                    5b:47:87:1d:b9:f0:19:4b:b4:e6:c4:38:fa:c8:87:
                    aa:3b:76:22:9d:06:3c:1f:97:24:ab:64:bf:6b:07:
                    29:27:01:62:33:b4:2e:41:10:c0:0a:20:46:42:a4:
                    e6:8f:fb:ca:e8:da:82:09:8a:ea:4c:6f:14:0d:ca:
                    14:50:61:2c:7b:aa:6d:d7:cd:06:6e:42:53:de:61:
                    f2:8f:d1:16:6b:00:3f:90:22:e5:d7:ca:40:fe:00:
                    89:21:8b:1b:1d:1c:ea:14:9d:01:e9:af:1d:b7:1f:
                    f8:78:1d:3e:46:6a:74:60:54:60:3e:a7:d0:6b:22:
                    f1:8b:7f:ef:b5:e7:ff:68:6b:53:7d:e2:9a:bd:4f:
                    85:5c:85:95:06:34:2a:cd:97:06:6d:11:19:15:3f:
                    80:93:28:e9:97:e4:81:67:a4:7a:b9:f7:ad:96:db:
                    c7:72:b8:c3:6a:d3:8f:3d:34:8d:01:ed:22:40:82:
                    f3:d5:12:61:73:1e:ff:70:57:22:86:2e:04:f7:75:
                    1e:4e:b4:12:e8:45:ae:8a:2a:0c:93:88:21:9d:a9:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:59:27:F8:D7:35:1D:CC:3B:08:C9:72:15:55:8A:C3:6A:0D:1F
            X509v3 Authority Key Identifier:
                keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:53:cb:34:ad:86:fd:1c:0d:75:cf:f8:42:f4:56:d1:29:
         11:1f:df:e8:c5:01:19:9f:9b:6c:90:c2:3b:df:e4:85:8f:98:
         8f:23:51:95:96:55:ae:d3:b5:24:e0:7c:c2:51:8e:68:7c:21:
         22:08:dd:37:e9:21:e5:be:35:f6:36:35:7a:c6:32:03:15:f0:
         54:42:75:79:e3:0d:f7:c8:fe:17:66:2e:9a:4c:c4:f9:17:94:
         9b:92:d1:89:07:74:d4:ea:a6:dc:8c:e8:16:18:6e:a3:f6:bf:
         92:d3:12:50:f6:e0:9f:f1:04:eb:85:73:c1:3e:39:fb:46:f6:
         d0:45:0f:e1:8a:4f:33:42:91:82:62:67:ed:37:f7:2d:3d:99:
         b6:9f:64:43:03:b8:2c:96:94:53:63:28:d8:15:20:37:f1:89:
         2f:25:3b:39:e6:4b:9b:64:6e:37:92:b5:5f:8c:69:85:b9:53:
         0f:aa:b5:b1:e7:e0:be:ca:f8:27:9d:01:ed:bb:be:42:fd:ac:
         a7:ee:86:e8:7c:7b:17:3c:e1:ab:5a:de:8e:48:57:20:07:0b:
         ec:4c:14:1d:2c:ed:84:94:91:7d:72:00:09:c8:3f:a6:16:80:
         36:a5:c3:80:c2:e2:70:79:7c:13:a3:d3:53:db:65:d6:03:50:
         ea:49:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:05 2026 by rpki-client