This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File:                     JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier:          RzvBATOC97zmvDVdoxOKncz1gO6d2zmCNSplueAWBM0=
Subject key identifier:   51:16:A9:33:00:1F:4F:16:FE:F6:99:42:8F:AA:E3:73:5F:58:5E:DE
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer:       /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial:       019C2028E23512696A74D463522CF251DC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number:          13B6
Signing time:             Mon 02 Feb 2026 21:01:16 +0000
Manifest this update:     Mon 02 Feb 2026 21:01:16 +0000
Manifest next update:     Tue 03 Feb 2026 21:01:16 +0000
Files and hashes:         1: 9mOrUxGFlBpFUlP48rOHE607Iuo.roa (hash: ti5a7ip3wlFm83mF2sprT3SXw8daN820QDTET4fAkAk=)
                          2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: T+bZlxF/BKLAveUWNGsYP4vQn2ANkeSlalw9cKtM9DY=)
                          3: O0F_WGHY6jnucw_zKVZ8I6LSbPY.roa (hash: u7jhlGqpRfEYyjNlngo1C74D4qf+tZ62ssmWPNDXYdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:28:e2:35:12:69:6a:74:d4:63:52:2c:f2:51:dc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
        Validity
            Not Before: Feb  2 21:01:16 2026 GMT
            Not After : Feb  3 21:01:16 2026 GMT
        Subject: CN=5116a933001f4f16fef699428faae3735f585ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:e9:2f:e7:f9:30:e1:b7:d3:9e:d5:c5:cc:
                    94:b1:ac:ff:7f:fb:0b:26:62:a7:a2:f5:94:11:a6:
                    ec:2c:15:90:46:55:30:17:3b:8a:4e:f2:a3:84:42:
                    53:1a:35:e9:e3:c8:5a:35:e4:8d:f6:99:5e:f0:fb:
                    5e:48:f8:70:45:e2:ba:8d:83:ce:6b:5c:38:39:25:
                    d2:0c:5c:68:56:ca:79:59:b8:92:56:63:82:a1:ef:
                    ac:a8:77:b6:35:0f:76:45:04:eb:e1:dc:66:2a:c8:
                    57:84:17:3f:0a:c7:74:c6:df:6a:98:3b:82:ab:90:
                    e0:80:c9:e5:f7:e1:0e:44:ea:46:29:0a:6f:d5:9c:
                    59:27:47:dd:91:21:d6:6d:ed:09:85:11:f5:85:86:
                    8c:24:b6:89:f9:29:50:b7:4b:30:41:7c:db:a9:40:
                    4b:18:38:b4:90:b5:54:0b:e2:c4:c4:c0:36:e9:7a:
                    a0:ac:68:97:88:b5:d9:ce:b8:f2:19:16:c2:d1:4a:
                    41:26:41:96:e7:c3:ae:68:3d:f3:f3:41:ce:14:3d:
                    8a:c2:d7:18:d9:20:c2:e7:5a:7f:d4:10:eb:47:a8:
                    76:f5:3c:fa:2a:df:a6:e0:8e:be:cd:c1:e5:69:76:
                    f4:7c:0a:5d:51:fc:29:9e:73:3f:4b:86:1a:46:9b:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:A9:33:00:1F:4F:16:FE:F6:99:42:8F:AA:E3:73:5F:58:5E:DE
            X509v3 Authority Key Identifier:
                keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:20:5b:6b:f4:c9:56:41:c6:a7:a9:2f:44:fa:e0:4d:92:
         7c:8e:5a:13:a6:fe:2a:fb:0a:b1:d5:db:db:38:2a:0e:89:36:
         5d:80:0e:da:92:dc:f4:95:fa:f2:8d:ce:9c:dd:85:2c:5e:fe:
         37:33:9a:5d:5d:6d:f5:3e:ee:1f:2d:01:44:85:1a:a4:b7:4b:
         46:f0:3c:93:8e:32:6a:8c:47:c9:c2:f5:f4:9e:f1:2c:aa:18:
         74:ff:37:81:a0:ff:a4:8e:67:0b:c0:71:13:34:41:31:e6:88:
         e0:33:68:62:8a:13:2a:00:ee:93:a3:92:7c:60:f2:c5:d1:a4:
         1f:bd:20:32:ac:6a:ce:e8:76:24:2f:11:4b:43:06:f3:62:9f:
         89:9d:12:f3:20:19:50:5a:1e:43:c7:b2:1b:a2:5b:33:c9:21:
         34:3a:3a:3e:ac:b0:d2:04:a5:79:6f:f1:9c:7e:44:6e:0b:75:
         09:f7:79:6d:dd:9c:79:17:41:d7:80:bd:6b:b3:90:d4:a8:72:
         0b:5d:ed:75:a1:07:11:6a:98:c5:29:16:45:57:5f:63:41:cb:
         14:9d:b9:c0:2a:db:e3:8c:73:4b:19:13:c4:31:27:d8:e5:92:
         09:ee:33:83:59:90:38:dc:6f:82:27:ce:4a:f6:cf:a0:6f:b9:
         a6:a2:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 04:55:39 2026 by rpki-client