This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File:                     8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier:          +eax8MHXtAbLz5dABkIK0Vv1IuvVwMrhBatFFMIfRjo=
Subject key identifier:   9B:14:62:84:D7:57:7F:92:C0:31:D0:F4:17:08:19:59:D3:DD:BF:2A
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer:       /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial:       019BF79AB78BF5E6FD7704D1C3154E18C7CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number:          0182
Signing time:             Mon 26 Jan 2026 00:01:10 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:10 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:10 +0000
Files and hashes:         1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: ssNrlm+mzrWiRzC5CVo2IlsNWZkhgEdfcbP/hFk0Q+o=)
                          2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
                          3: ZT3zt4JjQMvNJMoraIK7n0XBLRQ.roa (hash: panNpFZp6bpYl4EtuEneCVUYvSbhDT4PYxL2xEkmKNA=)
                          4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
                          5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:b7:8b:f5:e6:fd:77:04:d1:c3:15:4e:18:c7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
        Validity
            Not Before: Jan 26 00:01:10 2026 GMT
            Not After : Jan 27 00:01:10 2026 GMT
        Subject: CN=9b146284d7577f92c031d0f417081959d3ddbf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:a7:41:51:f6:c9:0c:4d:50:4d:3b:73:cb:
                    61:51:e2:ad:f8:7b:b3:b6:9d:41:a9:a5:bb:2d:12:
                    5b:1d:84:a6:00:13:76:de:77:2f:b9:99:e8:87:f6:
                    96:36:c7:8c:dd:c7:00:63:76:2a:73:ae:0e:29:30:
                    ff:f6:54:d1:ef:b9:8f:70:8b:44:83:65:c9:fe:68:
                    61:cf:8b:ee:ba:e0:f6:f1:cd:83:06:62:86:de:95:
                    1f:b3:90:16:d5:dd:f4:65:d6:45:e9:ea:2e:37:80:
                    96:03:cf:94:58:bf:75:65:69:fd:69:ac:89:f2:6c:
                    00:c7:6f:e5:a6:56:3b:c0:d0:18:45:eb:85:38:94:
                    eb:81:b4:1a:65:31:95:10:03:48:b2:d1:5e:43:77:
                    6a:ca:76:c5:f6:ce:ee:34:0d:39:36:85:4a:10:b8:
                    b1:3a:38:e7:7f:d0:cb:7f:7b:4b:e8:b1:67:21:60:
                    17:c4:06:92:77:d8:82:f4:a1:6f:18:1e:ba:65:b0:
                    87:10:c3:e6:86:51:a2:aa:5c:17:64:11:d9:53:e0:
                    8e:e6:6e:c0:23:bf:d0:dc:3b:5b:b5:e8:0d:df:f6:
                    fb:52:6e:32:7f:60:ab:54:30:ef:17:75:d5:25:5a:
                    03:b9:7c:69:be:49:8a:c7:2d:2e:41:3a:79:fa:df:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:62:84:D7:57:7F:92:C0:31:D0:F4:17:08:19:59:D3:DD:BF:2A
            X509v3 Authority Key Identifier:
                keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:05:88:ff:94:0b:05:8f:bf:76:84:0e:ff:16:40:cc:a1:
         49:92:95:78:7a:2a:2f:59:58:24:b4:28:21:ed:05:7a:61:30:
         29:2f:cd:66:c3:c2:9d:1f:0c:19:1e:9e:31:c6:8d:f0:37:4c:
         85:72:8f:57:7b:f9:41:04:ed:d1:f0:da:8f:d9:1e:3e:b0:6f:
         d7:79:7a:fa:3b:fc:56:e4:d0:1a:d2:e3:ba:c5:d8:40:c6:bd:
         64:5b:53:c8:bb:cc:bf:7d:bd:ad:ab:41:d6:cf:e7:28:10:0c:
         67:a7:ec:e4:a2:ca:17:d1:04:4e:a8:61:cb:4f:bd:c9:18:05:
         3b:b9:e4:24:47:a2:15:06:8b:b0:6c:47:f4:b4:6c:64:7b:23:
         ea:8a:b2:18:b4:25:81:95:de:7e:af:c5:bc:c1:a3:5e:3b:02:
         17:07:68:92:c4:0b:42:c4:d2:0b:8f:1a:ff:09:f1:eb:02:be:
         e1:e5:ec:f2:68:04:29:be:28:ee:00:54:3d:9c:33:c7:a3:06:
         ae:f2:df:41:15:55:2e:a6:d5:3d:f4:3f:d1:cf:d9:d0:5a:c3:
         9e:d6:22:f0:0f:3d:af:f8:a5:1a:87:2c:60:f7:b3:27:98:d0:
         4b:79:97:96:cb:6f:e7:4b:72:92:cb:91:e2:81:fe:f2:fd:23:
         29:12:1f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:33:22 2026 by rpki-client