This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          QqVJ7UUoa0kfAXk5m+brEeIwdgHMpBbP4safxN9YG1g=
Subject key identifier:   E0:84:56:73:43:64:01:3B:65:FC:E5:E8:DF:F3:00:A9:0D:C6:F7:01
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       019BF507499DE3648BFF3487A7852156B659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          08E2
Signing time:             Sun 25 Jan 2026 12:00:53 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:53 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:53 +0000
Files and hashes:         1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: w0ezXcqELHbsFU/kcQZW8BbztlVaMdKLt1Osfwiproo=)
                          2: aUSEjOq7T5GdB1gJh0wm73gZGVE.roa (hash: I/x2EyeVTVrdNEFq9RRb2OJVpKKmppQFIjO/Hlu4b9k=)
                          3: sCREUy5oJ9tpm5q7Gzs288OxCwI.roa (hash: YBVHBMqxomYQcf4nO/wlXwSvZkGQdWRYPk635BeFEJM=)
                          4: z1g6IVNfelVtJ3ruc6v117EmMOM.roa (hash: Nm253NpZatd7RqxMvrinv6oQUpdzhUYrPUnsdn7rdFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:49:9d:e3:64:8b:ff:34:87:a7:85:21:56:b6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Jan 25 12:00:53 2026 GMT
            Not After : Jan 26 12:00:53 2026 GMT
        Subject: CN=e08456734364013b65fce5e8dff300a90dc6f701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:4a:96:74:6d:6f:cb:3d:94:ba:24:55:4a:
                    31:41:20:4e:c6:49:98:12:95:fc:ec:c8:ab:41:4b:
                    59:a5:87:86:44:fe:12:8e:61:ac:4b:76:76:f5:32:
                    2d:6a:9e:1a:7b:e7:fc:67:87:27:09:60:cd:95:4a:
                    a0:08:0a:fb:88:41:8e:53:0b:50:63:55:07:4a:2f:
                    7f:96:45:30:34:6a:93:24:8e:e5:5f:68:dc:5c:18:
                    e8:99:4b:07:66:fc:31:bc:1f:31:be:f7:12:a2:59:
                    ae:f8:6b:6c:f4:58:91:06:a7:b0:e1:f7:65:02:a9:
                    b2:e6:34:2e:fc:d8:e3:05:f3:e2:fa:7e:7f:10:3f:
                    44:75:5b:71:b0:eb:bc:d8:88:51:ea:fd:35:46:ac:
                    f2:05:eb:06:a7:b0:20:37:12:15:c3:0d:6c:1a:1d:
                    a7:3c:83:ce:1e:6b:07:28:e6:79:e3:17:7d:00:5d:
                    84:3e:7f:87:74:76:d8:36:85:cc:f3:06:c9:e2:ad:
                    cd:6b:51:eb:e9:98:2d:81:b9:4e:93:7e:5e:fd:9c:
                    98:6d:47:85:14:35:32:16:b4:5a:b4:2d:86:c2:5a:
                    59:b5:ae:8f:35:bc:e7:e4:e1:03:2c:cc:85:61:10:
                    07:e8:21:2e:a8:7b:df:2b:70:8c:b8:c8:48:ee:8c:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:84:56:73:43:64:01:3B:65:FC:E5:E8:DF:F3:00:A9:0D:C6:F7:01
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:40:17:9a:a0:5d:e3:3e:f7:21:8d:7b:c2:ac:28:7d:0c:3c:
         8f:0a:b0:09:79:4d:f0:78:8b:e7:2f:9e:e2:ba:92:99:1b:61:
         51:3c:96:5c:a1:8d:ca:e0:ef:6e:87:43:97:b8:fc:95:a3:a1:
         f8:13:00:95:c1:23:ae:54:74:78:bb:6c:ae:06:90:3e:87:c9:
         05:38:f5:6e:81:34:56:49:c8:e8:63:34:b7:53:0b:c3:43:62:
         bc:c8:75:53:f0:95:1d:b0:cd:55:60:04:34:8d:85:09:6c:1c:
         68:e1:3c:0e:13:cb:81:4c:ad:b8:ce:09:37:96:07:6f:6e:04:
         cf:5b:38:f6:a6:f6:67:ab:8f:50:fd:83:ed:7c:43:35:73:03:
         f2:db:b8:40:a0:70:ba:7b:7b:c6:48:ca:24:87:d5:6a:96:83:
         e9:99:44:b4:e7:50:8d:02:9c:48:47:1f:43:c2:28:3e:a4:31:
         a9:9f:81:e1:8a:97:6a:48:86:7c:1e:79:a4:3a:b0:f6:96:5d:
         66:64:24:6f:7f:e7:67:d6:59:66:bc:81:e9:01:72:ee:f9:41:
         c0:9e:3f:7e:f7:74:74:ef:f8:e3:18:03:6e:5b:27:e3:b8:8a:
         f0:c7:3c:34:1c:a6:74:38:3b:eb:75:01:81:a1:38:1d:da:82:
         06:5a:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:52 2026 by rpki-client