This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          hh2WF9r7fd6NR5RM56gk1bE/eTBFq//tnl0Mu8TnYQM=
Subject key identifier:   F8:23:63:F8:E2:3F:8A:93:2F:BF:81:FA:44:4C:0F:FC:59:8B:F1:DB
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019BF42BF1109A6C4B1E13C850891D126DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          190C
Signing time:             Sun 25 Jan 2026 08:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:18 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: KDEWlMF5K+PCyILHUwXyicHKoadEmWJBrQgzQybPy4U=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: bMRFuL5894Ag4Wj_p9bI6gxJVSA.roa (hash: jFfS4SuxNRF+4A9lGtHf+IcahIjKSN9sVWjeFU7p1gw=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: vOzWPChss8TD9UUPLWu9ZYXkRZ0.roa (hash: erN8YLfmmBWfaeU1n9+ayk671l+2aam6XZCtTahVjxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:f1:10:9a:6c:4b:1e:13:c8:50:89:1d:12:6d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Jan 25 08:01:18 2026 GMT
            Not After : Jan 26 08:01:18 2026 GMT
        Subject: CN=f82363f8e23f8a932fbf81fa444c0ffc598bf1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:54:38:ae:5d:e8:04:8c:e8:59:05:9d:80:
                    86:3d:5d:7b:09:b6:7f:dc:ef:83:c6:ce:d8:1c:d7:
                    87:e1:21:7b:cd:f4:29:40:60:e7:56:7c:99:f6:7d:
                    ba:b8:f4:c8:59:06:5c:15:59:31:22:b7:61:f4:ee:
                    8b:0b:c2:a9:2c:5f:70:34:1d:5c:bf:0b:89:5a:bf:
                    f5:17:1b:6d:85:27:5f:ef:4c:54:1a:b9:26:e1:6f:
                    71:6c:57:b5:0b:4c:ad:b0:86:3f:6c:92:6c:5b:6e:
                    20:48:f8:06:fd:07:8a:0f:48:54:79:f7:74:3f:0a:
                    9d:0c:7d:d8:6a:a1:17:70:a8:4f:a6:31:da:c8:ab:
                    65:1b:c3:2a:85:0e:d5:e8:e8:41:7d:5b:81:c6:39:
                    24:b2:20:37:75:a4:89:67:5a:1f:56:4e:30:e9:13:
                    cc:23:6d:08:05:13:20:0c:01:83:fb:74:7d:38:6e:
                    58:72:8b:90:9f:76:af:84:c1:a4:fb:90:36:c9:0e:
                    d9:9b:69:47:1d:9b:3a:90:12:2f:d6:80:8d:67:14:
                    c8:07:ed:c7:a3:a7:d3:10:4b:3f:10:a4:e3:a5:5f:
                    e8:47:a5:3a:61:33:63:4a:41:96:55:43:9b:ba:19:
                    06:94:fc:e9:06:cd:2a:53:7a:32:1e:b7:95:0b:2d:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:63:F8:E2:3F:8A:93:2F:BF:81:FA:44:4C:0F:FC:59:8B:F1:DB
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:04:c4:63:cc:ff:8f:a9:16:d0:ec:77:29:24:d9:b2:3c:
         fe:0c:60:4a:13:a2:84:dd:7b:cb:29:dd:04:1e:09:b2:01:dd:
         ff:e1:f7:5a:9b:84:36:5d:4d:4c:23:71:0f:01:f3:26:ea:13:
         24:de:7e:43:95:ba:ab:d3:0b:ae:de:d5:15:a5:3f:d2:79:9a:
         2b:ac:de:c9:fa:26:37:95:be:87:47:aa:ac:b2:17:bc:a1:53:
         ea:ae:41:83:4e:dd:83:91:85:1d:4d:f1:08:3c:91:c4:88:22:
         0b:de:31:2d:b0:5d:7b:3f:b7:68:60:32:d7:01:cf:cf:d9:86:
         ae:4e:67:c8:1b:7f:5f:29:e9:b8:41:ec:7c:27:7e:cf:56:58:
         59:00:06:05:7c:88:aa:67:67:7e:44:3b:25:f6:94:ed:81:e8:
         77:c9:46:0b:c2:71:2d:ae:12:ef:40:7a:0f:b2:01:15:b0:23:
         87:77:84:f9:a3:28:e5:c6:e8:a0:06:2e:51:f3:d1:fc:93:cd:
         3a:c4:6d:23:19:66:a1:c0:59:3b:24:02:f9:2d:a0:c7:52:fc:
         70:dd:c2:91:0b:e7:1c:a9:df:bd:b8:11:ae:3b:cb:0e:67:c3:
         0d:d9:74:7b:66:79:a2:8b:12:b0:17:a7:26:0b:7e:63:5d:ff:
         df:1a:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:27:28 2026 by rpki-client