This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File:                     JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier:          RcWizcBD1XGiUWvxeIZKjUQSjs5OApMGzG4rdomn7VM=
Subject key identifier:   E1:E2:9B:E3:78:DA:5C:75:D5:AA:66:42:DD:94:75:A2:07:02:E2:F6
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       019BFCC1104E4A5666BD59DD25CFF3C16B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number:          17F0
Signing time:             Tue 27 Jan 2026 00:01:09 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:09 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:09 +0000
Files and hashes:         1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
                          2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
                          3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
                          4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: PD9a0xFV7TyM2OuTz3X5kfuu5yQCpX4pXCWdzL3eJ1M=)
                          5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
                          6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
                          7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
                          8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:10:4e:4a:56:66:bd:59:dd:25:cf:f3:c1:6b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: Jan 27 00:01:09 2026 GMT
            Not After : Jan 28 00:01:09 2026 GMT
        Subject: CN=e1e29be378da5c75d5aa6642dd9475a20702e2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:b9:a7:92:14:87:2a:f7:10:a1:9c:bd:25:
                    d1:7e:11:1e:09:42:0e:56:18:2f:c9:d9:27:03:37:
                    1b:e5:46:48:b5:f6:c0:b9:fa:a8:26:45:c3:2a:8b:
                    c4:cb:2d:9f:ff:d9:1c:18:fd:0c:a9:ab:d8:2f:38:
                    49:9d:15:d0:54:c5:7e:c0:0c:34:f1:ec:0a:be:e3:
                    bb:12:01:36:a3:19:0f:e9:1d:09:36:d5:e6:4e:ca:
                    c8:39:5f:23:a5:57:a5:71:c4:9c:a9:38:e7:b6:20:
                    c6:0c:ad:46:2a:6d:f3:d1:a1:9a:32:5c:97:18:37:
                    ed:d1:7b:ab:db:c9:90:15:5e:9c:ca:4d:2f:af:11:
                    79:46:f7:f7:8e:02:3f:06:3b:2e:cc:0e:68:b0:f8:
                    7e:32:6b:95:6f:4d:5c:c7:7d:7e:c9:7f:3d:0c:1a:
                    ef:d4:e2:dc:74:1b:62:f8:6c:b4:38:d1:9b:17:91:
                    36:03:51:42:10:52:69:75:29:57:b3:36:9e:b6:c1:
                    fe:0b:fb:97:a5:19:a1:73:aa:a7:d7:f4:88:4c:c1:
                    c5:16:7c:ee:50:4d:ca:ae:47:2b:ce:6a:70:97:20:
                    ec:b5:82:85:48:8e:46:c6:19:87:fa:6f:91:4b:ed:
                    53:9b:c8:31:30:73:93:e9:12:b7:42:0d:c8:83:99:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:9B:E3:78:DA:5C:75:D5:AA:66:42:DD:94:75:A2:07:02:E2:F6
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:27:4b:b2:f5:32:33:d7:06:f2:28:16:8c:80:24:5d:49:00:
         42:23:53:e6:33:42:8d:82:5d:ca:33:e6:0a:06:19:28:c2:4c:
         87:c2:1d:89:26:68:0a:ad:32:75:c2:b7:df:f8:8b:c0:05:ef:
         54:38:07:f1:3e:5f:69:84:4a:90:42:2d:c4:9d:63:f8:9d:6b:
         02:80:3d:8d:e3:10:bc:ed:a4:2c:38:ae:98:51:a9:d3:18:8c:
         c6:72:af:52:dc:ae:17:a1:6b:d9:5c:40:c0:4c:21:72:4b:8e:
         be:9c:ab:91:b6:63:ad:57:f3:1b:ab:a8:aa:6f:cd:27:92:a0:
         36:ab:42:82:27:2c:3f:cd:a6:4a:b1:af:ad:55:b3:6b:81:60:
         3a:d1:86:8e:b6:47:42:ee:0a:48:60:f0:e0:38:83:7f:ea:46:
         d4:a5:b4:96:7c:d6:3c:4d:e3:d0:9a:50:21:1e:f4:fa:42:f5:
         87:62:9b:04:28:fb:9c:f7:6e:4b:ec:f7:22:a9:54:d2:42:bb:
         be:f2:8f:17:6a:f8:44:13:7b:b8:46:1f:57:8d:32:25:cf:7f:
         d5:64:19:16:93:c8:74:e1:01:66:50:3b:a8:c7:94:7d:e7:82:
         a5:3a:39:d3:11:3e:4d:0d:37:e7:ea:11:48:49:25:78:3c:35:
         ab:d7:b2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8wRBOSlZmvVndJc/zwWsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwMTI3MDAwMTA5WhcNMjYwMTI4MDAwMTA5WjAzMTEwLwYDVQQD
EyhlMWUyOWJlMzc4ZGE1Yzc1ZDVhYTY2NDJkZDk0NzVhMjA3MDJlMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGW5p5IUhyr3EKGcvSXRfhEeCUIO
VhgvydknAzcb5UZItfbAufqoJkXDKovEyy2f/9kcGP0MqavYLzhJnRXQVMV+wAw0
8ewKvuO7EgE2oxkP6R0JNtXmTsrIOV8jpVelccScqTjntiDGDK1GKm3z0aGaMlyX
GDft0Xur28mQFV6cyk0vrxF5Rvf3jgI/BjsuzA5osPh+MmuVb01cx31+yX89DBrv
1OLcdBti+Gy0ONGbF5E2A1FCEFJpdSlXszaetsH+C/uXpRmhc6qn1/SITMHFFnzu
UE3KrkcrzmpwlyDstYKFSI5GxhmH+m+RS+1Tm8gxMHOT6RK3Qg3Ig5k32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHim+N42lx11apmQt2UdaIHAuL2MB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKidLsvUy
M9cG8igWjIAkXUkAQiNT5jNCjYJdyjPmCgYZKMJMh8IdiSZoCq0ydcK33/iLwAXv
VDgH8T5faYRKkEItxJ1j+J1rAoA9jeMQvO2kLDiumFGp0xiMxnKvUtyuF6Fr2VxA
wEwhckuOvpyrkbZjrVfzG6uoqm/NJ5KgNqtCgicsP82mSrGvrVWza4FgOtGGjrZH
Qu4KSGDw4DiDf+pG1KW0lnzWPE3j0JpQIR70+kL1h2KbBCj7nPduS+z3IqlU0kK7
vvKPF2r4RBN7uEYfV40yJc9/1WQZFpPIdOEBZlA7qMeUfeeCpTo50xE+TQ035+oR
SEkleDw1q9eyTw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:58 2026 by rpki-client