This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File:                     2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier:          xmu6ziUvR3TWDNV9C3M3bpJj1fPatFCOYRyeXl98QFw=
Subject key identifier:   A8:EC:4F:A8:47:FE:56:B5:77:04:E3:54:EA:02:AD:B0:9E:C2:84:4A
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer:       /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial:       019BF2AB1370FA030D15DA159C0341F4C2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number:          0ACA
Signing time:             Sun 25 Jan 2026 01:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:56 +0000
Files and hashes:         1: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: FLum2RSQCuKaqcSBF7NWyUQKJzwJtYs1uBYbeh2SJgk=)
                          2: 3x-NKns4WK2EjpOMEJoJpIWj9Ck.roa (hash: QRb3J8nMmBOOsUmMgbTcpmnm8lqCJiwslflpTn2ZSQw=)
                          3: GT10PWWk40LjIYF15OP2Wd_xt-I.roa (hash: loBYBLOnVHrWiz+2I6Up0zBWAHuCROfUTDMKwTlcM6s=)
                          4: KV-kXiax0brWWeQZDEBKQIQ7lj0.roa (hash: VaX4IhwjfnzcwylL43ff4dLH5Qhw2TlZSvdp0A2GC5g=)
                          5: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (hash: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo=)
                          6: UkKSFgRU0i3KaGnHwMCMWucAEJg.roa (hash: 5Ch+ryXt3IKffn5gHuwCN/ReoHH/iCHv2Si1y+KwSg0=)
                          7: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (hash: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8=)
                          8: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (hash: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc=)
                          9: avmhdb_wzCiEf_bFZVLepM346tM.roa (hash: Fd2kheVgg0mzBwUJ7cAsgm0+4NKEkBm1SzUz47egMuw=)
                          10: cq5oEfhpwOAB3SATuFVA2r_HrW0.roa (hash: AXB6GDcfWkIUxEgaZTV6RBJ8X36uSaSobiHqDrLQUBA=)
                          11: hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa (hash: OOYOWz2G4m3FFRMrCNHPvogLHfi53TOFEQWueZF5XRA=)
                          12: tKvDm86AMvEYB6hIUoRsN49Ezbc.roa (hash: pU+aaBDxFZaTXPgmpTQRfdLFYbNDZGhl1yZjscogrfY=)
                          13: tnraOPm2wq2V9j6Hrmc8SV9avLQ.roa (hash: 0L3Box8fqHKPp7PEt0nCwu/IlhVupcAp096tLCY3oh8=)
                          14: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (hash: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:13:70:fa:03:0d:15:da:15:9c:03:41:f4:c2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
        Validity
            Not Before: Jan 25 01:00:56 2026 GMT
            Not After : Jan 26 01:00:56 2026 GMT
        Subject: CN=a8ec4fa847fe56b57704e354ea02adb09ec2844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:47:ea:6d:d9:3b:76:33:fc:33:2b:7e:8c:
                    ae:74:b0:45:7a:83:15:33:7f:f4:f6:dd:c5:98:4f:
                    f2:cb:9f:5e:26:46:93:6e:bd:c8:f2:e7:ae:97:0e:
                    e5:e1:8e:5e:12:10:94:74:94:c3:a8:ab:c3:8e:93:
                    60:97:c6:a1:25:17:e6:31:d6:83:eb:bf:0e:c4:a2:
                    e7:8a:fe:5e:e7:c7:87:50:02:c8:33:95:96:72:8b:
                    a6:56:28:e5:cd:04:08:7a:71:85:77:d4:ab:8a:d9:
                    21:ca:94:19:a6:2d:ed:95:0b:2c:ff:9d:60:4d:2b:
                    ac:ce:ef:98:55:29:02:ca:3a:52:68:09:af:75:e7:
                    7f:e1:02:fc:dc:68:f5:95:d8:d4:84:4a:55:ad:a9:
                    8b:11:9f:67:79:7f:db:c5:49:e5:73:2b:bb:bb:fe:
                    05:45:05:98:fb:c8:25:a9:b0:79:99:16:b0:f1:4e:
                    8c:98:99:15:e4:39:e9:55:f4:d0:f2:dc:46:84:fe:
                    34:97:eb:83:a0:f7:33:02:ae:6a:8e:d0:2b:ed:65:
                    df:92:76:52:d7:37:ef:b6:c3:4a:20:64:86:75:94:
                    73:c7:e4:51:fa:4d:00:c0:4a:38:86:37:0a:b4:6c:
                    85:54:86:d4:5b:3e:40:55:b9:18:cf:2a:20:b7:f1:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:4F:A8:47:FE:56:B5:77:04:E3:54:EA:02:AD:B0:9E:C2:84:4A
            X509v3 Authority Key Identifier:
                keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:74:f2:1d:dd:de:14:a7:09:23:13:78:b7:8a:53:cd:df:
         ea:c7:a2:95:d9:87:3f:5f:e9:02:4c:d2:c1:61:78:7a:36:3c:
         01:4e:c4:0d:64:76:7a:a0:4e:e4:37:00:c7:f1:f9:fc:f8:62:
         a7:af:c9:ce:f7:c9:c7:a3:d7:4c:33:45:2e:fc:ff:2d:46:f5:
         57:eb:31:0b:62:bc:5a:ec:28:f5:40:24:6a:28:41:ee:d4:8d:
         c7:9f:a7:55:d0:25:c6:75:95:52:45:ca:d1:a6:5f:df:ec:5e:
         0b:5f:76:0d:a4:d4:30:e7:ab:03:19:2f:48:15:a7:fa:81:e1:
         0e:1c:bc:a1:95:e9:ac:df:4f:6e:17:a5:91:93:85:98:e3:90:
         6f:dd:6c:5c:99:22:9f:4a:c5:f6:c0:8a:de:cc:7e:db:e4:59:
         79:56:30:73:29:e9:63:2f:93:31:a4:61:11:f7:33:4c:69:f9:
         aa:d8:db:20:9b:68:8a:20:4f:0d:e8:02:5e:44:30:61:dc:cd:
         ea:36:a5:3b:a8:1e:ec:7d:99:9a:9f:53:f0:05:b3:0b:2c:0c:
         63:7b:c1:28:e5:31:ec:ec:00:fd:d1:ff:9e:b3:83:6a:4c:a2:
         a4:ce:2d:be:59:5b:2e:e6:5b:fe:0b:7f:99:75:f4:c3:ca:91:
         ef:e0:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:45 2026 by rpki-client