This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File:                     4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier:          3eP3zdvD6iTxgVypIkX3W3subQD1zekOAscb/VfaNmc=
Subject key identifier:   93:17:98:D6:50:0C:4E:18:1D:E9:0E:08:A2:35:60:4C:A3:51:DD:52
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer:       /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial:       019BF19882BD7407C46BDE0F3627B6E92299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number:          07C8
Signing time:             Sat 24 Jan 2026 20:01:02 +0000
Manifest this update:     Sat 24 Jan 2026 20:01:02 +0000
Manifest next update:     Sun 25 Jan 2026 20:01:02 +0000
Files and hashes:         1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: du9xskGXzaH74HcwOYTiU0zJF/8Ni7mbkWvCbLFI7bo=)
                          2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
                          3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:98:82:bd:74:07:c4:6b:de:0f:36:27:b6:e9:22:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
        Validity
            Not Before: Jan 24 20:01:02 2026 GMT
            Not After : Jan 25 20:01:02 2026 GMT
        Subject: CN=931798d6500c4e181de90e08a235604ca351dd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:f5:4d:5f:96:4a:63:9e:e7:4e:69:d6:47:
                    b4:a8:d2:f1:ef:08:2c:f4:00:12:7a:2a:11:c2:59:
                    3a:0e:56:36:da:d9:15:f8:72:08:5b:aa:26:a7:f9:
                    1f:ef:ac:28:46:10:91:de:70:8f:34:e8:f6:f1:d4:
                    25:47:78:42:ce:db:a4:77:da:4b:68:74:b1:88:e9:
                    3a:95:0a:e1:38:3f:c4:c3:fb:7a:63:46:03:40:d2:
                    16:e8:66:55:8a:60:3c:9b:6b:55:c1:16:9f:89:e1:
                    49:8c:c7:d0:2a:ac:d7:43:24:c7:ba:3d:11:5c:36:
                    32:25:68:48:5f:c9:68:e4:c4:dc:ac:c2:5a:e3:94:
                    f8:66:bf:8b:bf:50:04:aa:9c:b4:fc:f7:d1:a8:61:
                    21:2e:59:bd:7f:09:4f:f7:b9:52:28:e2:43:9c:08:
                    60:5b:09:f4:cf:33:e2:84:93:1c:f3:d7:08:09:51:
                    5d:00:c3:69:5d:22:fa:48:64:fe:93:43:d0:d0:45:
                    fe:78:43:c9:01:a9:27:e9:b9:04:46:9f:0b:3d:d7:
                    ab:30:65:11:aa:e5:9b:e7:a7:2d:c5:6c:9b:9a:bd:
                    d4:ec:7d:11:d9:a2:c5:fb:38:65:8e:e7:e4:22:d9:
                    f4:cc:19:66:fa:1d:9f:b4:ae:34:04:70:21:a2:11:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:98:D6:50:0C:4E:18:1D:E9:0E:08:A2:35:60:4C:A3:51:DD:52
            X509v3 Authority Key Identifier:
                keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:90:65:22:c9:29:01:50:32:1f:12:8b:0d:c6:06:3d:72:d3:
         9a:9e:1f:59:9a:46:ec:5e:80:3d:67:d7:a6:2e:7f:5b:25:4e:
         90:22:f3:14:13:04:ed:aa:98:a2:f2:8b:5e:4d:a8:2d:10:ee:
         32:41:c6:16:98:aa:3c:21:78:f2:34:2e:6a:02:4b:c4:40:76:
         ff:90:00:a0:ed:dc:96:c4:60:28:01:97:0b:95:6b:b8:7b:6c:
         1f:bc:66:23:c4:62:37:22:1b:1c:98:78:35:d1:87:78:22:41:
         cd:8e:36:aa:fe:bd:9f:9b:f6:19:6c:55:04:84:dd:0b:a1:c2:
         1b:9c:71:7d:64:2e:98:ed:69:b3:16:ce:cd:c9:e1:82:9e:9e:
         ef:b5:c1:6a:e8:58:6e:4f:a0:ca:a6:44:c6:58:be:80:2a:7b:
         75:eb:f4:a0:e2:ec:f6:72:b3:d1:8b:3d:69:e4:db:aa:e7:c0:
         1f:30:df:3e:a6:8b:26:3e:4a:bd:eb:a6:4a:3f:05:f4:c0:1b:
         29:bf:72:34:31:6c:dc:90:22:c1:b6:32:ba:b7:d7:e6:b9:a9:
         1e:be:eb:29:42:b9:d7:1e:ac:45:2c:0b:5c:69:e0:90:b1:bc:
         70:21:75:e2:d9:38:3e:a1:14:8a:9d:8a:82:e1:26:7f:0a:57:
         26:10:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:12 2026 by rpki-client