This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File:                     jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier:          5w0de8+KWYBh/7Lvbvr+RkJyeBfIFt4pIkEjik85S+o=
Subject key identifier:   DC:B5:E6:2A:B2:4C:D7:71:69:83:F3:2D:42:D1:76:C3:65:C0:49:E8
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer:       /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial:       019BD733D6B944C570234C6123F7AD062ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number:          03EF
Signing time:             Mon 19 Jan 2026 17:00:57 +0000
Manifest this update:     Mon 19 Jan 2026 17:00:57 +0000
Manifest next update:     Tue 20 Jan 2026 17:00:57 +0000
Files and hashes:         1: OTzOq7SDpRdksgl_zYPgtdePfLI.roa (hash: D6qdGzPzEfS+jEvVQOP5Z3G0DkCqmvwi/YwWrt4+qgc=)
                          2: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (hash: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY=)
                          3: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: C2wT3xvdrfF5ZIKrMo6XRZkOQG1k9KdlDEOM8klbNUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:33:d6:b9:44:c5:70:23:4c:61:23:f7:ad:06:2e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
        Validity
            Not Before: Jan 19 17:00:57 2026 GMT
            Not After : Jan 20 17:00:57 2026 GMT
        Subject: CN=dcb5e62ab24cd7716983f32d42d176c365c049e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:04:7a:71:f4:c0:a7:c7:41:93:84:41:f3:
                    d2:49:4c:1e:79:76:d7:fa:8f:e6:ad:b4:6e:70:5e:
                    76:97:ac:08:7a:e7:82:bc:5d:c2:1b:9c:c3:74:ba:
                    e3:b5:99:98:b7:53:e4:e7:90:02:da:df:f6:e9:f7:
                    e8:cb:78:82:40:6a:3c:76:e1:d0:b5:f3:08:4c:6b:
                    30:e4:68:48:64:27:0a:21:9f:1e:fb:60:2e:5d:87:
                    5a:72:72:95:a6:63:ec:aa:53:4e:4a:fe:14:03:ac:
                    c0:be:8a:ac:12:6f:f7:c2:84:d2:ae:e0:73:95:b7:
                    ef:d0:d4:14:23:e0:df:cd:da:fe:de:ec:39:ff:d1:
                    0e:70:62:c1:63:b0:42:3a:07:23:11:a0:99:54:60:
                    45:b6:68:b2:6d:5f:aa:22:0f:b3:3e:94:ff:a8:11:
                    76:6c:8f:d6:36:5c:52:4b:8f:1a:ca:2f:66:46:5f:
                    7b:18:46:3e:b2:0b:9e:fa:16:5f:54:d6:50:d3:cc:
                    cd:03:01:3c:0a:88:63:f9:02:59:e6:ae:02:28:8a:
                    27:54:15:a2:f3:20:2f:7c:bd:4d:65:3f:90:3e:eb:
                    d1:8f:8b:b5:79:ec:e1:73:10:f6:1c:a4:30:52:30:
                    2d:ee:85:8b:88:3a:b9:1b:97:b9:f2:de:51:46:cc:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:E6:2A:B2:4C:D7:71:69:83:F3:2D:42:D1:76:C3:65:C0:49:E8
            X509v3 Authority Key Identifier:
                keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:62:e0:32:61:0c:88:c3:db:27:ed:8d:06:f6:20:c9:67:d7:
         41:fa:af:2e:66:49:87:04:bf:2e:2c:08:bf:48:6e:81:bd:1d:
         5c:bb:b8:61:b5:e7:63:94:73:f9:e4:57:0b:e2:92:ad:af:36:
         f2:7b:37:ea:14:e5:29:ab:81:a2:80:20:98:ce:05:2d:35:f1:
         b2:65:40:7f:3a:ef:58:c4:c0:e9:c3:14:e7:ac:d3:0c:02:ee:
         d7:be:eb:05:2f:86:30:e2:e6:6b:07:d9:eb:57:3c:77:69:3a:
         3b:bb:4d:83:e0:f7:73:ba:65:a3:0e:70:4c:1e:55:ad:d8:73:
         2e:ec:d9:64:49:fb:f2:4a:ac:31:e3:95:a6:48:7e:96:87:8c:
         b3:89:f6:fe:7e:be:73:ca:1e:52:8a:f0:10:84:5d:a8:5c:ef:
         0d:70:ea:38:17:fc:69:f9:26:58:cc:0e:fd:19:43:f8:ac:b7:
         f5:5e:fc:cd:a3:4d:9d:be:b1:9c:a0:00:dd:3d:f0:d6:f5:d8:
         c1:38:44:09:ef:22:5f:bb:e2:a0:5e:35:4b:19:0d:93:24:63:
         da:8a:e5:df:00:19:3b:68:a4:ba:71:3a:00:77:8d:f6:66:ff:
         1c:54:f4:ce:1d:3e:18:68:30:0c:74:89:90:65:59:62:97:30:
         7a:2e:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:39 2026 by rpki-client