This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          HVBTctQvZTIKaPPi32fauK79hkDYvYfedoHDaxyahvM=
Subject key identifier:   92:D3:9C:D1:68:19:74:30:AA:31:58:E2:8B:98:01:88:B2:97:10:45
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019BF72D98E1832CCDAB1C8734A06CD0597A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          17A0
Signing time:             Sun 25 Jan 2026 22:01:58 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:58 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:58 +0000
Files and hashes:         1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
                          2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: gdUEXFKUW2b8K11HzQWKcyCKzJfnKPV4AnRM2Raorck=)
                          3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
                          4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:98:e1:83:2c:cd:ab:1c:87:34:a0:6c:d0:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jan 25 22:01:58 2026 GMT
            Not After : Jan 26 22:01:58 2026 GMT
        Subject: CN=92d39cd168197430aa3158e28b980188b2971045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a7:ce:ea:b6:2d:a1:ec:b2:84:6b:44:d4:f9:
                    93:6c:be:53:0c:b2:59:47:61:fb:92:cb:56:c8:fe:
                    45:91:9e:df:b1:58:0b:37:94:f4:0f:0e:52:18:3f:
                    0c:f5:f9:41:5d:7f:ae:14:92:9c:01:3c:c0:cb:7f:
                    6b:68:c0:a4:cc:21:a9:ec:2b:8e:3c:a2:2d:dd:70:
                    64:47:8a:de:d0:4e:82:31:a1:c9:40:af:d7:64:b7:
                    02:9f:2d:8a:d2:4f:04:9b:4a:a6:c0:0b:33:51:34:
                    ea:5b:46:a7:ac:f8:c6:b1:d6:c3:ea:27:86:4e:f7:
                    97:7f:8c:3c:6a:fd:05:25:96:99:1c:b2:cd:a3:3d:
                    e2:54:6c:8f:9c:eb:b1:da:da:73:b5:98:63:51:f9:
                    fd:31:cd:29:01:be:3b:8f:44:2c:d2:ee:b5:d4:28:
                    e7:e4:88:50:29:a8:e4:39:d3:4f:ad:b9:8d:ba:8d:
                    01:ca:4b:5a:11:b4:bc:18:1d:f0:73:9e:a4:6e:ab:
                    94:08:97:44:85:7d:a1:8d:f5:84:ee:1a:78:b8:6c:
                    f5:bd:c4:2b:e9:99:5f:66:49:a4:a5:6a:4a:46:83:
                    9a:92:b1:48:2d:4c:c5:b7:8e:d7:b7:5d:cb:65:5d:
                    58:dd:26:dc:e5:b7:5e:62:6b:43:e6:79:14:67:8e:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D3:9C:D1:68:19:74:30:AA:31:58:E2:8B:98:01:88:B2:97:10:45
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e6:c5:c3:6e:c9:5b:ab:b9:94:1d:c6:74:b4:be:a6:18:fb:
         11:42:6d:4f:84:45:d9:2e:d7:77:76:d8:79:2b:fc:9b:25:ba:
         fa:1a:ad:1a:b0:ed:76:af:13:e5:5c:2b:bf:4a:b4:77:dc:16:
         e9:62:ea:24:4c:64:3e:d3:ef:bf:0e:2e:78:ae:31:78:03:4f:
         49:c7:41:42:b6:d3:a6:6e:bf:48:c5:31:df:57:84:3f:a5:c2:
         4f:68:99:39:f1:d6:15:90:dd:08:c2:85:18:85:34:e9:d2:8c:
         3a:bd:25:36:9c:73:a4:70:0e:db:fe:42:0b:6d:9d:87:81:11:
         05:bf:77:63:ba:cd:68:3c:f6:c8:ba:13:26:4e:86:91:2b:4b:
         75:19:c1:af:b4:b2:98:23:60:af:db:7e:a5:34:8c:7b:b5:a3:
         b4:13:aa:8e:98:4c:76:47:37:a3:f6:8f:ca:30:20:83:65:d4:
         bc:e4:bc:36:18:82:c7:71:9f:4f:62:4e:f9:dc:79:12:d7:42:
         dd:33:c7:6b:b3:50:94:0c:31:34:70:ad:8c:d1:37:fc:f9:2f:
         68:f0:34:9f:9a:3b:0e:84:56:1f:83:56:5d:3f:94:80:e4:cd:
         86:f1:ac:82:b6:44:9c:06:3c:54:d0:e7:50:dc:09:0c:3d:5f:
         d1:e1:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:06 2026 by rpki-client