This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File:                     g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier:          dpUiAA6AYGmuhXCRg4ty0KLwC+86KeqyAc8RgI2OceE=
Subject key identifier:   FC:AB:99:1D:36:11:06:F0:54:E2:AE:E6:3F:1B:00:84:83:02:AD:8D
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer:       /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial:       019BF7D142D3244519A53C8964BB2AB10635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number:          09A1
Signing time:             Mon 26 Jan 2026 01:00:44 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:44 +0000
Files and hashes:         1: 7j86TtDTnyF_YJ7McFXkzmzctI8.roa (hash: yHR7jEUqp9HOCDauflzs4PYkcHalTQq4qkF18DoanI0=)
                          2: MMEv-JesdO5NLERLKIJQRPK7-Cw.roa (hash: HWIc+1cV2zclm+w3eWB4Yypu67JMPPnUsP0/278PUqM=)
                          3: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: 6NMokkLqvVeQ//wrHUPWKgX0ZHNsxw6hvc1s8lMP9DY=)
                          4: zixqafbxZetg142Gyx9h4OboZAY.roa (hash: RAy6HwqiwIXBD4YBSR4cpMJyrABwa2hL16WnQlYVeWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:42:d3:24:45:19:a5:3c:89:64:bb:2a:b1:06:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
        Validity
            Not Before: Jan 26 01:00:44 2026 GMT
            Not After : Jan 27 01:00:44 2026 GMT
        Subject: CN=fcab991d361106f054e2aee63f1b00848302ad8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:53:95:91:6f:b6:be:d2:c2:f4:e7:cc:01:
                    c3:70:6e:de:d4:26:f6:e3:8a:31:c1:a7:6b:46:10:
                    37:ed:63:31:26:30:6e:c6:da:88:ad:bf:8f:ca:9d:
                    2a:c2:4e:7c:2f:e2:3b:8d:33:67:22:cc:50:d3:14:
                    66:9b:38:c2:1c:24:4b:70:84:49:81:11:a2:16:39:
                    90:0a:35:26:21:3f:40:3d:d9:6f:52:b5:ae:80:1d:
                    b1:69:83:37:6d:81:94:bd:cb:cc:69:d2:0c:6d:bc:
                    18:bf:71:65:43:cd:da:5a:95:9c:78:6e:ee:d0:83:
                    60:b9:a7:88:85:4a:fd:1d:84:f7:90:f7:a6:22:2f:
                    30:d1:9d:0b:96:42:cd:5b:07:88:e1:73:c7:de:11:
                    2e:91:c6:5a:07:52:2a:1b:a8:0d:15:e7:fe:fe:f9:
                    82:37:0d:74:67:09:51:f7:0a:8a:7f:d0:2d:d9:a6:
                    f6:d2:30:cd:5e:8c:5c:66:5b:fb:c5:47:a5:e1:ba:
                    bc:66:f8:8a:fe:2f:b8:e4:6b:df:71:6e:36:12:c1:
                    29:4c:1b:e9:0d:df:87:fc:56:f2:89:80:b0:ec:71:
                    9d:f3:75:bf:64:b2:3f:d2:33:a7:ba:56:b3:42:4f:
                    c2:3f:9c:ff:e0:bc:77:8e:0d:b4:b8:7a:a5:5b:f9:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:99:1D:36:11:06:F0:54:E2:AE:E6:3F:1B:00:84:83:02:AD:8D
            X509v3 Authority Key Identifier:
                keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:b7:a7:b6:cb:bd:2d:10:3c:06:83:ae:b7:94:64:47:79:
         0e:5e:e7:d0:50:41:a7:a9:0c:a0:e2:92:32:68:54:e3:50:08:
         c5:5e:ab:23:7b:71:6a:fb:5f:98:28:fb:92:3a:5d:30:27:32:
         6b:b8:35:95:8b:cb:8b:37:46:89:f1:85:b0:b1:d1:eb:e0:a9:
         46:64:e9:b1:9f:b8:ba:d5:04:81:7a:4f:fb:a0:00:8c:52:ba:
         b1:c0:73:e3:b8:a4:c9:98:86:cf:77:93:f9:68:b0:ca:24:90:
         5d:ef:25:18:3a:7c:40:06:c7:56:d2:0a:44:b9:0d:a5:fc:a5:
         44:2c:57:11:c9:bd:54:bb:1d:4c:fe:29:01:ee:04:39:bd:28:
         18:ab:16:6f:a1:14:29:2d:fd:2b:6c:7e:10:13:8a:47:81:b5:
         df:d5:c4:8f:39:c6:65:41:c7:43:f6:18:9e:09:11:42:70:a7:
         46:38:e4:ff:01:3a:63:fe:b3:c9:f2:7a:7f:df:56:a0:c4:e6:
         84:bb:46:6b:80:e5:1c:b4:25:2d:eb:d8:0d:ca:1a:45:03:aa:
         4a:fe:11:91:02:4f:a9:8f:e4:b6:77:5a:03:e9:c4:6c:14:9b:
         9d:b6:ed:d2:32:0c:0c:f4:ef:9d:cf:08:6b:4c:9e:05:ad:80:
         b3:2f:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:28:33 2026 by rpki-client