This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          vhCdeCSQLi3UBBoeuNIqFoVm/Rl1dY7W2ujLpetbxzQ=
Subject key identifier:   25:D4:00:9C:B8:7C:B4:E0:67:8D:62:E3:53:F2:92:DD:8D:98:96:C2
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       019BF91B74838F3D98B72481DCAAF0CD14EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 07:01:24 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:24 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:24 +0000
Files and hashes:         1: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (hash: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs=)
                          2: TrdJEenqgtHhdFelNOTUIFotJQw.roa (hash: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ=)
                          3: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: nVtHIGiCCaIGUf+YgyZQW68dVLgRvZCgkiT0jDVaqSM=)
                          4: kzDbK2QoBVIIp9tqNTtnUJP1NZs.roa (hash: X7UOIcXOkpLacmMqPlB5bii5jBSrwu1Tt1zBt5jizCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:74:83:8f:3d:98:b7:24:81:dc:aa:f0:cd:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Jan 26 07:01:24 2026 GMT
            Not After : Jan 27 07:01:24 2026 GMT
        Subject: CN=25d4009cb87cb4e0678d62e353f292dd8d9896c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:3c:25:5e:ed:d1:0d:9c:6f:27:ff:a0:78:
                    c5:36:a5:50:71:df:8f:a3:6e:42:79:ee:33:e7:c5:
                    b5:32:dc:b4:d9:05:78:0c:f1:2c:2e:31:2a:da:77:
                    64:e7:e3:bc:63:ef:40:c8:57:72:0f:f7:26:2d:a8:
                    21:3d:19:07:0d:8d:84:2a:65:4f:34:2d:ef:20:dd:
                    f3:82:9a:86:c0:bc:52:fe:d2:f9:58:0e:37:74:2f:
                    a7:8d:e6:8c:bb:4e:9a:8a:04:d0:17:fc:bc:ae:79:
                    39:4e:3e:53:1d:b8:6a:05:57:45:78:c8:03:20:65:
                    e7:b8:42:12:7c:2c:6f:ca:3e:30:4d:3b:e0:81:fc:
                    d5:b5:f8:36:6f:b7:b3:45:00:2c:8f:be:eb:89:0f:
                    51:bd:d7:32:4b:0d:ba:8a:92:83:89:f4:60:30:c0:
                    26:cc:b2:a0:7a:0b:24:bd:36:28:69:61:c4:e5:33:
                    b0:ab:ff:c8:50:29:1f:3e:8e:38:f6:72:00:82:02:
                    c0:75:a6:32:0d:47:07:48:0c:fd:94:89:01:53:32:
                    c2:30:59:d8:3d:10:a2:ea:6b:20:31:bf:80:fd:c0:
                    0c:fe:af:39:a5:32:05:3f:ff:42:17:6e:c6:79:39:
                    47:49:73:24:1a:ed:56:63:3b:44:b1:3c:1b:c4:0b:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:00:9C:B8:7C:B4:E0:67:8D:62:E3:53:F2:92:DD:8D:98:96:C2
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:08:84:2a:d3:c6:7a:58:6c:b3:7d:ed:e0:42:da:15:d3:ea:
         ba:56:79:b8:88:b8:13:27:64:b7:63:60:6d:e2:f9:fb:e8:55:
         02:71:fd:31:e4:20:31:3b:c0:da:50:ac:2a:33:f3:19:8c:85:
         0c:e6:b9:60:5f:e4:c4:7a:dc:12:97:a7:db:7b:22:94:87:49:
         13:ac:f3:fe:2b:0d:38:72:22:e8:ba:df:ec:da:08:28:22:e8:
         98:68:80:04:3d:51:20:d4:db:71:3f:59:5e:5f:52:3f:0f:43:
         3e:86:05:13:98:6e:cf:3b:91:6b:19:52:8b:18:0a:94:e7:0b:
         63:d6:7a:ec:5e:e1:8d:54:3e:b8:1f:38:a8:98:6b:b7:49:b1:
         7d:0a:0a:21:af:f1:a5:f2:25:e4:42:dd:f8:cd:8a:1a:df:76:
         a9:21:81:f3:49:45:bd:e6:bb:b4:81:09:b5:dc:a1:b6:60:ed:
         53:0d:5a:cc:8b:86:6f:15:aa:34:02:8a:a0:70:c8:da:e3:1a:
         7d:8c:59:a5:4b:09:de:90:10:9f:ef:b7:4f:c9:a3:6c:2f:36:
         71:ee:de:24:24:e1:d1:81:f1:13:44:e3:82:e5:2c:ef:41:b4:
         54:2b:00:fa:6a:0e:3f:25:35:99:47:e3:76:26:5e:a6:f7:30:
         af:09:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:09 2026 by rpki-client