This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File:                     A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier:          hYLtJOatLcjwEjeletaxJtc+P5uoSWkDEBRfD1i+1Es=
Subject key identifier:   B0:31:3D:EF:BB:C1:4A:0C:AB:9A:4C:DE:ED:EA:D0:80:78:B3:FF:E8
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer:       /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial:       019BF6F5990869CD917CB4A287D84F363CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number:          0CD6
Signing time:             Sun 25 Jan 2026 21:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:49 +0000
Files and hashes:         1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: vPmAT72uU8T/9kK81zFvn+7NxULLXlQVvb67AWq9cSM=)
                          2: MGr5sDFlbQVMnRDsr0wYT2XAiUk.roa (hash: Qd2SVc4TBTw+56gUg4ZW2uBmux+ll/A2gumdDvDs79g=)
                          3: NJRcO67OlUn-IGiJT8guZ_TuAV8.roa (hash: seZ+L6NijADUgFTgnLwHb3u5+uU9gSkf5FEv7ta5fbk=)
                          4: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
                          5: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:99:08:69:cd:91:7c:b4:a2:87:d8:4f:36:3c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
        Validity
            Not Before: Jan 25 21:00:49 2026 GMT
            Not After : Jan 26 21:00:49 2026 GMT
        Subject: CN=b0313defbbc14a0cab9a4cdeedead08078b3ffe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:10:9e:42:13:7a:57:b4:dd:6c:83:34:ca:
                    c2:a6:57:6a:7f:f4:b4:1b:02:f8:ba:7c:3f:b9:48:
                    2c:4a:87:dd:20:07:8b:19:27:27:8d:ec:8c:b3:0d:
                    99:0f:6f:5a:2d:84:c9:0a:d0:aa:7c:72:ec:bc:7a:
                    f7:be:01:a5:e0:8e:48:ad:e1:60:96:1b:d5:03:74:
                    f4:db:b5:bc:f8:b5:97:f5:60:b9:2c:9b:cc:e8:1d:
                    b5:6e:79:df:ce:40:d9:32:69:33:2b:ca:17:10:ac:
                    49:d7:e2:ee:ef:89:59:da:5e:fc:fe:ef:9a:de:38:
                    8c:a6:74:d4:6a:66:ae:58:5a:1c:59:06:10:c1:d0:
                    88:0e:76:21:ae:ec:b6:9f:b8:b4:92:00:1e:15:67:
                    00:a7:2f:09:de:17:5f:e7:dd:a4:27:6a:42:a8:f0:
                    48:21:27:ae:8f:0b:6e:c5:b0:36:e0:f3:7f:d6:5a:
                    18:a8:ec:5c:df:5a:60:53:5b:b8:4c:06:c4:f9:13:
                    ab:a1:54:05:69:4d:85:c5:56:6a:a9:f3:55:5f:1e:
                    2e:45:99:c4:4c:58:99:d8:0a:9b:19:40:d9:1c:17:
                    62:87:d4:53:e7:9f:fb:4a:1a:7f:07:44:71:6d:50:
                    fd:14:9f:0b:d3:60:0f:ef:fe:72:43:52:88:b1:49:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:3D:EF:BB:C1:4A:0C:AB:9A:4C:DE:ED:EA:D0:80:78:B3:FF:E8
            X509v3 Authority Key Identifier:
                keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:47:70:10:2f:c5:3b:16:e7:6b:22:f7:88:81:f6:fc:db:82:
         c9:20:a9:7e:3e:57:d8:4c:b9:42:23:d5:bd:e5:86:cd:dd:59:
         7f:a0:43:36:3d:a4:ee:c6:65:d3:79:83:35:fc:bf:b6:c2:dd:
         10:35:06:62:30:09:36:b8:e3:3c:ff:db:95:73:36:37:d8:db:
         aa:8c:62:30:ce:a5:b3:a1:5e:d5:d0:f4:21:91:6f:ad:d0:8f:
         b5:e8:9f:b2:76:9f:5c:cf:4c:2a:60:bf:06:38:8a:92:5d:38:
         0d:3d:01:41:15:ee:ec:09:21:ee:2a:1d:a7:35:25:c5:32:e8:
         b6:69:94:5c:22:80:35:45:28:7c:43:47:c9:e6:97:2d:80:58:
         21:a5:40:b2:e2:03:4f:c0:b1:35:90:a6:60:7e:0d:68:52:2e:
         22:f8:1f:55:49:c5:c7:d5:36:fc:b1:6c:99:03:45:5c:41:e8:
         b9:97:81:21:0f:ac:e2:66:9b:cf:56:1e:3f:81:60:be:e7:22:
         56:70:fe:ef:c9:a9:8a:c6:d2:bb:92:ff:1f:6d:d9:67:f2:f1:
         f7:80:85:28:ba:70:b8:46:16:0c:54:89:bb:65:cd:48:41:ae:
         b4:c2:e5:d6:fb:9c:b1:88:1d:19:d2:34:6c:71:c2:d5:30:ca:
         fb:b7:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:32:39 2026 by rpki-client