This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File:                     J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier:          Fp/iogFC+86nlQTq6z4AxHUbfsZpXj8OPW9lW6Nhvy4=
Subject key identifier:   A9:92:C8:24:A5:22:15:14:45:4E:16:A3:53:E7:32:83:15:01:88:CB
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer:       /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial:       019BF3F5318808B26C18F4F0820F2D3D6430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 07:01:31 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:31 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:31 +0000
Files and hashes:         1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: JvNiU6LdSodIKAqzgW6Bk+Rixp6/whXoDE7llud9bsk=)
                          2: jBgP0ZxKjo0YSzqd_TK2OMNM1yA.roa (hash: NPXmvQHxJlW40kzBTMvnmr6Di/9Jvg0kb9ABW5Mzs2U=)
                          3: s85prk7lB7OHOvdXqqZFsWfGqEc.roa (hash: iGBERYu2TBQWCZD16JU1FSrpNzezsPbpIBfvEy3IZ88=)
                          4: zsiyH9LindvtPQtrUkCUPQuqxkA.asa (hash: odnNAHLQtzQB0+XVqqbnp6S4e2ZlUPUkv81AsiZqSc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:31:88:08:b2:6c:18:f4:f0:82:0f:2d:3d:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
        Validity
            Not Before: Jan 25 07:01:31 2026 GMT
            Not After : Jan 26 07:01:31 2026 GMT
        Subject: CN=a992c824a5221514454e16a353e73283150188cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:1d:9e:c5:c5:64:6b:62:1d:88:53:67:48:
                    74:3e:62:cd:e3:ab:20:08:ad:b7:97:9c:14:12:b3:
                    4e:26:84:c3:0c:2b:f7:22:fb:d5:c0:a5:1c:cc:39:
                    4e:0b:2e:52:ac:61:96:87:52:a1:83:8b:cb:b7:78:
                    40:d1:9b:1b:4f:41:74:72:07:a7:45:d9:45:70:55:
                    40:65:82:5c:a2:c8:c4:ab:c4:4d:0d:80:10:fc:2e:
                    2e:a8:56:ed:5d:5d:1c:8f:64:bb:fa:8f:16:9e:7d:
                    1c:d9:bd:4c:50:60:79:a6:47:bd:6d:51:ed:16:45:
                    6b:51:6c:9c:6c:e5:af:62:3d:5e:b5:9b:6f:df:fb:
                    36:4d:78:a2:1a:d2:68:2b:ee:0b:79:49:e8:01:ba:
                    09:21:80:46:db:b3:a9:a9:5d:70:1a:9b:41:6a:a5:
                    94:e3:d7:c2:3a:9f:ad:ad:9f:d9:00:f6:38:ee:6b:
                    5f:98:ff:d0:a1:66:4c:b1:f0:bd:8a:6c:fb:0f:02:
                    7c:ca:04:54:a2:8d:6a:8f:df:04:4f:ab:68:0e:c5:
                    75:64:08:75:4a:46:26:1a:d5:ab:c6:6b:da:d2:12:
                    1c:9e:2f:c4:4d:19:e9:e0:34:81:46:ee:d3:91:66:
                    bb:44:95:1b:87:50:1f:0e:74:b2:e5:a0:54:21:d1:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:C8:24:A5:22:15:14:45:4E:16:A3:53:E7:32:83:15:01:88:CB
            X509v3 Authority Key Identifier:
                keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:a7:f1:5f:d2:f5:18:c6:02:19:f3:e9:8a:36:86:82:a7:
         bc:4c:7e:cc:b2:e9:f2:c5:93:29:63:28:53:e1:98:00:90:ca:
         93:37:c4:fb:5f:59:5c:d8:de:4c:fe:f0:97:6a:4b:51:8b:16:
         a7:de:13:6d:f6:b9:3b:40:b5:4e:9a:74:04:17:92:60:0e:b5:
         21:10:a5:18:7b:07:68:c3:0e:76:62:8f:8e:e9:2e:ee:23:84:
         12:29:e4:00:31:fb:b6:69:49:5c:68:b9:67:66:e1:59:71:13:
         d3:a8:6f:04:21:8d:88:90:5b:db:99:71:4c:b0:ca:3b:54:3b:
         5d:70:f2:97:98:fb:c8:17:57:d1:bd:52:b9:d6:da:1c:fd:08:
         78:5e:77:03:49:64:78:0a:f7:d3:e8:03:c7:ed:7b:d2:fc:a4:
         f4:91:df:ff:d7:19:e2:a7:da:34:65:c3:53:5c:48:c6:55:38:
         05:ac:88:96:cc:d4:52:f0:99:d0:01:8f:cf:cf:ff:98:4b:49:
         81:90:a1:4c:30:a6:87:ae:0a:fa:37:98:16:97:09:a6:10:7d:
         ea:7c:e4:f2:b5:b1:af:e5:5f:45:7f:f7:d5:71:ed:39:dc:a4:
         85:99:88:e1:e6:14:86:66:7d:cd:54:33:41:70:45:b5:c4:90:
         86:26:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:47:15 2026 by rpki-client