This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File:                     1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier:          8yfEzah5yu/6ieEKhmSAWNO+iWLSOLOPS4E0M0Vgikg=
Subject key identifier:   92:29:42:31:59:20:AD:B1:51:E7:87:DA:11:2D:9E:B5:21:DF:1A:0E
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       019BF951B8BF02A9AE01371CB5F695E6FF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number:          0AD1
Signing time:             Mon 26 Jan 2026 08:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 08:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 08:00:40 +0000
Files and hashes:         1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: /OqC5upBTKLa80jNspr1qgTWHG/fBaGfPrzXt3bhiJA=)
                          2: GHotn1I_CfqFAPEWFyv9br8ia3I.roa (hash: jZG9+3CBzuOz4wMuP+83/hjNEuOMEsA5C1lYAS1ilM0=)
                          3: LSzcWbNsdVdvEIBim3BJCzhTVYU.roa (hash: FuA94sbSiSEVegunW1ULoVnEChhQx9cTZsUwwYAqYyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:51:b8:bf:02:a9:ae:01:37:1c:b5:f6:95:e6:ff:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Jan 26 08:00:40 2026 GMT
            Not After : Jan 27 08:00:40 2026 GMT
        Subject: CN=922942315920adb151e787da112d9eb521df1a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:05:a3:3b:a1:cb:89:a2:35:dc:30:bc:0e:
                    af:a1:22:7c:08:eb:41:ac:27:30:ea:82:24:a1:ef:
                    b8:c0:b3:e3:e4:6c:2a:2d:2d:1b:6d:7c:7a:85:1c:
                    cf:e3:f4:d1:d0:d2:7d:91:39:b2:eb:e6:74:b1:ef:
                    bd:50:11:4f:56:3b:2f:7e:46:5d:ef:39:32:86:2a:
                    35:76:47:8a:ae:47:75:2d:c2:c8:59:8d:c3:f7:04:
                    05:d6:45:d3:92:38:a2:f1:f7:9c:7c:af:97:5b:5a:
                    ab:3e:51:eb:06:43:ad:62:de:73:d9:54:69:3d:6b:
                    9e:63:a9:49:22:16:17:17:50:96:d0:02:b7:d7:8e:
                    21:dd:f6:01:d3:83:aa:34:d3:e1:d5:db:b2:37:4a:
                    f6:75:08:95:07:7c:93:ab:cb:c7:63:fb:f3:0d:e4:
                    b8:76:3a:50:12:2a:c2:54:ac:e1:6a:b3:65:bd:25:
                    58:e8:fb:b7:f3:20:be:0d:10:13:ac:d4:92:da:d8:
                    83:93:ca:5c:da:ef:b1:9c:61:44:fc:4d:a1:03:65:
                    cc:21:1c:d4:32:ea:b6:02:d1:bf:00:99:f0:d8:7b:
                    c0:61:0d:72:6f:d0:b0:23:dc:7b:46:0c:5c:70:10:
                    ec:eb:0b:e2:01:30:44:18:83:bb:d2:dc:a4:e0:99:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:42:31:59:20:AD:B1:51:E7:87:DA:11:2D:9E:B5:21:DF:1A:0E
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8d:96:74:11:99:73:e6:58:cf:b1:4d:a8:39:59:aa:b3:23:
         4d:80:be:1b:03:25:68:52:58:51:48:1a:57:ec:89:0e:ff:c9:
         6a:0e:0b:64:49:10:fd:c6:0a:a5:88:e8:9f:85:72:06:bd:5a:
         18:59:62:dc:39:b4:10:b6:1c:88:00:f0:58:d2:3b:2e:65:84:
         ff:3b:d6:be:9f:93:cf:ff:e6:9a:e3:ac:34:4d:e9:26:b9:63:
         46:85:e6:3f:9b:6e:1c:1c:b6:1a:71:b2:43:7a:db:2b:b6:14:
         c4:9c:c9:bf:33:e3:a8:61:41:af:c3:f1:30:83:37:6d:44:1d:
         5c:6a:c5:30:d2:47:0c:0c:fe:50:ef:22:b6:6b:3d:38:e2:79:
         f1:7a:64:22:be:52:22:7b:14:1e:e1:a0:7a:1e:00:d0:9e:8c:
         ed:70:8c:60:58:78:d5:9f:14:60:2e:7e:d6:7b:74:39:69:a5:
         7b:87:30:bd:bb:0a:c2:b6:40:7a:a5:57:cd:3b:12:02:2f:86:
         ee:a2:78:d7:98:df:16:87:6f:7f:07:13:9a:83:84:da:b1:25:
         d3:ea:7c:07:e5:9e:c1:f1:97:a9:78:05:8d:40:f0:53:33:49:
         81:ad:43:8f:8d:58:13:ad:cb:b7:28:be:01:5c:06:a0:65:14:
         a2:50:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:31 2026 by rpki-client