This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File:                     8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier:          7LAMnSspyCUfXYxG3wGMahZSZFYVHHs9CsK6mDCMQ78=
Subject key identifier:   D5:C9:69:81:FF:55:B0:AB:AE:1F:58:23:7B:27:B8:1F:13:09:7B:31
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer:       /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial:       019BF6199D6C5CB16D2B5498552ABC90DBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number:          0977
Signing time:             Sun 25 Jan 2026 17:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:32 +0000
Files and hashes:         1: 4-ElW7SzvQVexJZ0nCYVSR1GA2M.roa (hash: KOsKfu6flOdE/SBx4Eu8MfS9wR/KNyf0gsESr/I2qzY=)
                          2: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: dNzFNDxUSxbSl0Eojs53qxriwvce2uCrzzBhiGW9IkU=)
                          3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:9d:6c:5c:b1:6d:2b:54:98:55:2a:bc:90:db:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
        Validity
            Not Before: Jan 25 17:00:32 2026 GMT
            Not After : Jan 26 17:00:32 2026 GMT
        Subject: CN=d5c96981ff55b0abae1f58237b27b81f13097b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:94:dd:98:20:5e:1c:8d:33:00:3a:a7:ef:
                    50:1c:53:30:4d:29:96:d0:d1:f6:c9:07:86:13:b2:
                    f3:31:20:12:d9:2b:81:8b:e2:fd:0d:05:48:77:ec:
                    37:ad:82:89:7e:87:a1:dd:0c:f2:96:eb:07:19:03:
                    3f:d6:c1:ab:91:ab:d8:44:78:af:9b:61:f8:d1:27:
                    94:bb:5c:2d:8c:73:87:20:0a:d6:38:b3:46:14:40:
                    d0:48:0c:30:e9:12:b6:8a:04:6d:b3:ec:c4:27:c9:
                    44:40:0d:6e:8e:19:d5:b2:71:48:ed:fd:f2:0b:b1:
                    48:05:73:54:99:e5:0f:63:87:f3:ec:90:11:fe:45:
                    6a:97:5a:5d:bd:cc:e2:a6:e6:f6:93:d3:9d:11:1e:
                    f7:bc:59:2b:bc:48:07:51:fc:6e:f3:c7:3a:b2:8e:
                    bd:a3:9b:b8:0d:5c:7a:7a:f6:1c:96:49:c1:3d:63:
                    8d:57:1c:6e:f5:27:55:bd:0d:a4:50:27:52:b8:6c:
                    23:07:16:36:ce:26:68:f5:7f:05:4f:af:d1:16:5f:
                    78:bf:2d:fe:3d:db:28:cd:04:ee:08:88:11:c9:30:
                    65:1a:1b:d8:dd:14:78:c4:bf:8a:5f:e7:7c:54:1a:
                    09:bc:5b:63:25:20:74:1a:a9:ac:f2:98:52:af:e5:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C9:69:81:FF:55:B0:AB:AE:1F:58:23:7B:27:B8:1F:13:09:7B:31
            X509v3 Authority Key Identifier:
                keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:39:db:76:31:9a:8e:f1:b5:e4:30:26:95:3e:2a:50:67:
         27:3f:51:3e:d1:a3:57:8b:63:b0:45:3e:98:64:92:e4:ef:71:
         54:38:31:7f:00:40:fb:7e:2c:f7:bf:b2:54:a4:ad:4f:21:b7:
         51:1f:dc:6a:17:84:c4:1a:5c:18:86:83:4c:0d:00:15:5f:fd:
         f4:27:f6:47:74:48:a9:27:66:c5:7f:63:a7:74:da:d0:55:bc:
         83:d6:5a:3c:da:37:e9:ea:6e:06:cf:4e:f1:a9:1d:24:e0:e3:
         7c:c6:5f:eb:bf:10:dd:02:79:80:54:9a:dd:dc:7b:60:87:8b:
         13:bd:b7:6b:f4:42:31:f0:a4:76:97:23:46:3f:bf:37:08:87:
         e6:27:86:23:b4:4d:fc:18:da:4d:1e:b5:de:ee:5e:1e:a9:e6:
         27:22:0b:14:f5:01:2a:25:5b:7f:60:9b:0a:86:a3:43:ed:48:
         5e:0f:48:aa:69:81:6c:51:f4:0a:b0:e2:6d:7b:0d:5f:c8:7e:
         40:38:d1:38:c0:65:82:1b:39:e6:8e:0e:83:77:4c:02:4a:01:
         0e:a7:02:f5:63:5b:82:56:36:64:5a:a5:f8:3c:aa:07:9f:07:
         c1:f3:57:81:c0:5c:16:b6:4c:ca:58:f4:ce:84:33:77:e4:ee:
         de:f5:8e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:01 2026 by rpki-client