This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File:                     8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier:          HMs92s8PpWKSiqQ6CEiDFW61z3//YI3oJLFAH9W7Fjw=
Subject key identifier:   F9:CA:EB:76:C5:27:BB:56:A0:A0:90:CF:6D:37:86:E1:65:72:8C:76
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer:       /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial:       019BF34FAA4E1D0D7DDA1013A9F1FD6B1E31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 04:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:42 +0000
Files and hashes:         1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: HTMbTdJBL+C26EehBKVXA/dftRugrZ3djD7y3swSdk8=)
                          2: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (hash: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw=)
                          3: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (hash: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:aa:4e:1d:0d:7d:da:10:13:a9:f1:fd:6b:1e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
        Validity
            Not Before: Jan 25 04:00:42 2026 GMT
            Not After : Jan 26 04:00:42 2026 GMT
        Subject: CN=f9caeb76c527bb56a0a090cf6d3786e165728c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:92:b3:8e:5a:82:87:74:d3:84:79:24:66:
                    9b:7a:48:3a:7c:d4:fb:6c:f3:a0:18:72:74:18:80:
                    b0:24:bd:44:94:b1:fc:c0:ec:cd:55:cb:49:9d:ce:
                    ad:71:1f:9d:4a:90:45:4f:69:4b:bb:cf:53:81:11:
                    9c:42:3a:e2:97:3e:17:1f:35:3c:05:3d:35:57:7b:
                    44:e7:76:bc:08:b1:a4:ce:d1:04:82:0a:15:21:70:
                    9c:1c:ba:ed:34:0e:a6:ea:9a:79:89:2d:91:9e:b1:
                    1e:34:dc:40:19:cc:b9:c2:57:9d:8d:13:4d:74:f9:
                    f6:9f:ea:07:89:69:2e:36:fe:82:80:5d:48:42:3f:
                    f1:ad:db:ed:a9:40:ed:1a:35:e5:9c:23:54:e9:c3:
                    a3:41:5c:0a:66:78:7e:fe:10:76:f1:c4:a8:ec:ac:
                    2f:e4:28:3f:f4:87:44:90:59:6c:2a:0e:29:9c:3c:
                    92:4c:fc:5d:a1:43:8d:23:7e:1b:92:1c:65:fb:c5:
                    12:ee:bd:13:de:29:cb:98:27:75:91:b7:de:2e:4d:
                    82:fd:b6:da:18:5b:3c:ac:95:e4:c3:c2:92:00:3c:
                    52:f5:e4:2c:e2:13:ea:ad:9d:33:8f:1d:78:ee:ae:
                    70:3b:e5:d2:72:48:44:a4:9c:95:11:3e:57:31:c8:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CA:EB:76:C5:27:BB:56:A0:A0:90:CF:6D:37:86:E1:65:72:8C:76
            X509v3 Authority Key Identifier:
                keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:c9:74:b6:81:e8:6c:33:64:fa:23:60:20:e9:53:48:1f:
         76:5c:af:7f:22:af:e6:63:e0:1d:e4:12:dc:07:86:fd:c6:7b:
         3f:f2:dd:e8:b9:8f:fc:38:c3:8b:a2:10:5b:36:8f:9e:db:02:
         e4:f1:59:0e:70:4a:33:53:d6:6b:af:cf:9f:7a:e2:cc:c7:95:
         5d:60:ce:41:33:b0:82:83:9c:88:7a:eb:ae:8b:58:70:fe:6a:
         da:3e:77:28:41:4e:7e:ce:e8:c1:4a:d2:bd:28:1f:e4:c0:2c:
         4b:63:09:02:0a:db:ea:97:bf:47:83:2a:c1:94:70:f2:1c:4a:
         d4:85:15:34:98:c1:b1:59:d4:e6:e8:a3:1e:01:b7:9c:3f:f6:
         d8:66:72:b8:92:ec:9e:d8:cf:8e:eb:86:25:48:b0:00:f2:4b:
         18:3c:1a:17:35:57:78:3a:ac:b6:32:d8:6c:79:66:6f:dd:ff:
         78:45:f3:4f:ab:f1:a1:ca:2f:12:c1:bb:f2:ba:4d:d5:8b:72:
         71:1e:35:a4:07:48:49:a0:78:7e:24:0e:96:15:4b:cf:94:41:
         59:6a:64:45:5f:c7:2a:b9:56:cf:0a:9c:c5:4c:22:18:63:30:
         e8:74:22:a2:6a:8f:ef:18:dd:d5:2b:6d:ff:b6:a5:c9:40:60:
         80:ec:61:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzT6pOHQ192hATqfH9ax4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjYwMTI1MDQwMDQyWhcNMjYwMTI2MDQwMDQyWjAzMTEwLwYDVQQD
EyhmOWNhZWI3NmM1MjdiYjU2YTBhMDkwY2Y2ZDM3ODZlMTY1NzI4Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGeSs45agod004R5JGabekg6fNT7
bPOgGHJ0GICwJL1ElLH8wOzNVctJnc6tcR+dSpBFT2lLu89TgRGcQjrilz4XHzU8
BT01V3tE53a8CLGkztEEggoVIXCcHLrtNA6m6pp5iS2RnrEeNNxAGcy5wledjRNN
dPn2n+oHiWkuNv6CgF1IQj/xrdvtqUDtGjXlnCNU6cOjQVwKZnh+/hB28cSo7Kwv
5Cg/9IdEkFlsKg4pnDySTPxdoUONI34bkhxl+8US7r0T3inLmCd1kbfeLk2C/bba
GFs8rJXkw8KSADxS9eQs4hPqrZ0zjx147q5wO+XSckhEpJyVET5XMcgT0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnK63bFJ7tWoKCQz203huFlcox2MB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfXJdLaB
6GwzZPojYCDpU0gfdlyvfyKv5mPgHeQS3AeG/cZ7P/Ld6LmP/DjDi6IQWzaPntsC
5PFZDnBKM1PWa6/Pn3rizMeVXWDOQTOwgoOciHrrrotYcP5q2j53KEFOfs7owUrS
vSgf5MAsS2MJAgrb6pe/R4MqwZRw8hxK1IUVNJjBsVnU5uijHgG3nD/22GZyuJLs
ntjPjuuGJUiwAPJLGDwaFzVXeDqstjLYbHlmb93/eEXzT6vxocovEsG78rpN1Yty
cR41pAdISaB4fiQOlhVLz5RBWWpkRV/HKrlWzwqcxUwiGGMw6HQiomqP7xjd1Stt
/7alyUBggOxhXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:46 2026 by rpki-client