This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File:                     1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier:          ohAvCaUkGWYgUiPQats+BxU9YWtPkGep4/FHnrv1xi4=
Subject key identifier:   7B:BB:F3:3A:31:7E:D2:37:04:30:72:FA:34:37:7F:91:09:8E:27:38
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer:       /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial:       019BF9BFA71FD66DEB5D1D1C9470FF1D277F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number:          1607
Signing time:             Mon 26 Jan 2026 10:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 10:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 10:00:45 +0000
Files and hashes:         1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: ERhFfp/p3HlQaz3mTAG+3e5oJkGVu5HX6ljHHdwVGoQ=)
                          2: 9e__qGyQtHSbfB8cCFuaShvSnmA.roa (hash: 3iuCXQllyeZX2xf5zOtDaRap97ynVvtPGZuAfarFsMQ=)
                          3: P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa (hash: ZN6nAyptvvcTJMcBIb6vuyb/okd9tuYrvpfl57aJd5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:bf:a7:1f:d6:6d:eb:5d:1d:1c:94:70:ff:1d:27:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
        Validity
            Not Before: Jan 26 10:00:45 2026 GMT
            Not After : Jan 27 10:00:45 2026 GMT
        Subject: CN=7bbbf33a317ed237043072fa34377f91098e2738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:d5:11:71:0f:ca:e9:f6:1c:c0:70:85:8b:
                    74:dd:7c:1b:fb:a0:3f:bf:49:57:78:c0:4e:14:2d:
                    d1:59:2f:88:0c:99:bd:09:2b:46:0d:64:f7:f7:87:
                    32:53:d3:da:c8:88:e8:3c:55:9c:6c:7a:d5:4e:83:
                    08:f7:43:dc:b8:a7:83:03:d3:de:43:59:f1:11:85:
                    43:da:83:c8:94:94:bb:63:57:71:23:c5:bd:7d:8b:
                    38:19:d3:9b:6f:d6:0e:6a:79:fd:3e:c1:ef:6e:b5:
                    c3:b4:a3:f3:e5:5e:f3:20:d4:01:40:18:3a:03:99:
                    9f:c8:ac:14:7a:00:48:5f:42:2d:6d:7c:00:0e:a8:
                    81:a8:9d:b7:f9:d3:88:c7:14:f1:28:ba:68:4e:f2:
                    0b:74:7e:be:e4:56:21:1e:ed:c4:46:85:be:ea:5d:
                    83:ca:45:8d:26:55:2c:ef:38:45:ef:60:9a:ef:9e:
                    ae:42:99:29:6e:83:8e:0d:2e:9c:be:90:fc:a2:88:
                    c1:21:4e:f2:0a:8e:ff:44:f9:5b:2c:c3:15:a2:28:
                    f6:af:72:08:02:64:6b:9b:c4:2e:21:fe:be:83:a4:
                    03:3a:0d:ad:4b:9b:d9:79:95:58:15:d7:25:d7:24:
                    54:b0:49:e7:b1:d5:91:a7:2c:b4:51:4d:4f:b5:9f:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BB:F3:3A:31:7E:D2:37:04:30:72:FA:34:37:7F:91:09:8E:27:38
            X509v3 Authority Key Identifier:
                keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:7e:c5:f0:97:f9:43:d7:84:42:36:0b:0f:fe:eb:72:86:
         75:4e:61:f3:e6:f0:3a:26:2e:05:f3:2c:22:87:0e:92:6e:71:
         94:51:31:24:0d:f8:a2:01:08:b8:12:b2:d7:45:75:1f:0d:d6:
         42:97:1c:ad:eb:f6:db:18:f3:89:b6:09:ab:8b:d4:d3:85:94:
         74:b3:ec:95:0c:22:07:0a:5e:5b:6f:41:c9:44:7f:81:a7:6c:
         83:36:76:a8:b9:b5:41:08:da:15:6b:22:69:56:00:e9:d7:3a:
         16:6e:97:7b:f4:19:11:94:cb:e4:75:04:31:15:95:b9:e1:cf:
         f4:ef:17:e3:63:79:57:7b:fc:6e:32:05:a7:38:ff:ec:a6:12:
         d0:01:c8:48:0c:5a:cc:07:ae:2c:7c:3d:c8:ce:a7:ef:69:c8:
         ae:99:5b:20:bb:2a:5c:e6:5c:3d:60:3a:4a:78:e6:a0:5d:e7:
         8e:6c:c6:63:7c:ad:5a:10:1b:df:92:10:9b:58:ac:bc:83:a4:
         74:e9:05:70:15:a2:04:9c:bb:4e:9f:9c:d8:22:b1:bb:f6:b2:
         64:44:fe:6a:34:9d:e2:d8:39:29:4d:15:c0:6e:37:29:e4:50:
         99:f8:c7:d6:99:64:c1:c2:ac:e8:78:e0:9b:56:25:4e:e5:81:
         bd:12:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:16:35 2026 by rpki-client