This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
File:                     Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json)
Hash identifier:          NpyjUrg9wJUElmoVrP2/mCvNwY6ZD2TVor2zxnWVS9w=
Subject key identifier:   D0:9D:8E:AF:EE:57:8B:BA:9F:B8:DD:78:8F:AC:D2:55:B9:DB:1C:19
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019BF4D126ED77CCB976A8538DD28A39E682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
Manifest number:          0872
Signing time:             Sun 25 Jan 2026 11:01:46 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:46 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:46 +0000
Files and hashes:         1: 1-ASpO_8hZ5V-Ic4Aeg3nVe_uCoo.roa (hash: wogB5Zle9ac2g7KYp6EyaKF99ndjJco7ApxVo0RaiP4=)
                          2: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=)
                          3: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: cpZcqdD24103TMqOa2IBYEEBkFvCpfqM5z6b05gy2N0=)
                          4: Ldib0sJakE8ZKooEG4htHcyRxxQ.roa (hash: FNTpROf4uoy7qWvXeLIv8VAK05w3xcysE+coW3g+tqI=)
                          5: OUk4bgGC3OCebo2r3JX7kFSxVtw.roa (hash: 3wGYjxsZ43jN+PMrritKLslUAurQFB46XPi5qVQJ22Y=)
                          6: RNXrQdlRFEsYspN65SDyIUg32Wc.roa (hash: 9cC9EK68jMT2svrATtO+3QtQ1eW/IUeA812wyGXe6GM=)
                          7: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=)
                          8: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=)
                          9: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=)
                          10: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=)
                          11: f0B3MgXGlqLEfyor4GSGExZTVJ4.roa (hash: GDscvk0i60nD5lnQdIjm8L9vXbQTY0TlzuMcrui2UII=)
                          12: hCl-0r0u30gY3X_QTYVrlxuoF0A.roa (hash: 7PsKvjXxiXeu119UcG4oPYszfeXApUMOiVMhsPclDPA=)
                          13: iizT7ljCPFPoblKrQN_-pYAvcWA.roa (hash: 2Sel1Rmop+9+ax8FFWzLYou2UTrk0N/ygJRhxGdLS50=)
                          14: jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa (hash: 74IQiVstIh3KzJDiJivZ5vXC5OARjoNqNmVIrOMQl9I=)
                          15: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=)
                          16: pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa (hash: eDbwn0mnmgvF86dDy5bv6IYDjmTGECKb7lV458qQ5XM=)
                          17: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=)
                          18: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=)
                          19: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=)
                          20: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=)
                          21: u1U0vqodwoJEkUOEBkgZTYTajtY.roa (hash: 7KWvi0THi97QClEL8gxGIx4mPMywIoHzr+MsAscg8xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d1:26:ed:77:cc:b9:76:a8:53:8d:d2:8a:39:e6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Jan 25 11:01:46 2026 GMT
            Not After : Jan 26 11:01:46 2026 GMT
        Subject: CN=d09d8eafee578bba9fb8dd788facd255b9db1c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:26:9e:26:51:e5:6b:8c:5b:b7:78:6c:a0:
                    5b:03:31:c2:d7:a1:5a:4f:26:97:bc:a8:11:d0:f6:
                    15:42:a0:b3:13:69:ed:0b:61:a2:de:d2:7f:de:2e:
                    ab:ef:4d:43:17:86:ce:3a:82:3d:13:26:ad:e1:48:
                    3f:a6:19:e0:ae:da:0c:fc:e0:50:0a:17:f0:df:16:
                    07:f6:a6:c4:90:da:c6:ba:38:1e:ac:bc:8a:25:79:
                    a1:b0:b9:a9:cc:aa:60:c2:50:fa:ee:74:68:29:c0:
                    cd:61:49:77:ca:db:86:b4:83:4e:d4:07:6b:f8:ff:
                    2c:13:98:1d:ad:88:a0:7d:ee:bd:50:29:c9:0b:59:
                    86:29:25:c4:87:a3:70:6d:60:b8:78:b9:a6:15:9b:
                    c5:66:e6:9b:91:3b:96:da:6d:97:ad:5c:46:a1:b0:
                    b2:fc:48:0f:3e:99:e2:70:00:1a:5d:da:4b:9b:cc:
                    a9:25:4e:9d:69:77:a3:55:a6:b3:e6:ec:8e:35:77:
                    53:6f:95:6d:3c:56:c3:e7:90:c1:ff:00:14:71:a5:
                    04:82:34:ff:9f:c3:3b:75:61:2e:57:13:29:c3:20:
                    29:33:07:fa:9c:9a:47:0d:ee:d5:b7:32:42:d4:f5:
                    6b:3d:6b:70:79:ac:d0:ec:02:14:42:c3:13:f5:c2:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9D:8E:AF:EE:57:8B:BA:9F:B8:DD:78:8F:AC:D2:55:B9:DB:1C:19
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:63:88:56:10:e5:60:24:a9:3a:d2:4e:fc:05:11:2e:d0:
         2f:c0:b1:b2:63:e4:6f:51:30:9f:3b:6e:5d:12:80:a5:8a:93:
         d5:7a:b1:4d:27:79:71:5b:5a:a8:39:63:d9:f8:fb:b5:18:90:
         8b:31:33:fa:12:4b:d7:5e:97:49:ad:82:72:fb:87:10:5e:76:
         4e:2c:ab:4a:3d:d3:ae:70:33:0d:56:57:82:a7:84:15:85:c9:
         e0:c9:6c:bb:a9:02:ef:eb:38:02:06:5f:53:46:10:d6:94:7a:
         ee:eb:2e:71:5e:60:4f:82:00:b7:fa:48:a3:75:63:0f:20:35:
         01:e6:bc:bf:a0:72:2e:22:17:f8:92:d5:0a:0d:92:38:9f:07:
         8f:05:e3:e2:ef:9f:00:bc:cc:5c:79:f4:4b:b2:32:f9:af:a6:
         e9:b8:03:32:f3:b4:6c:89:bc:58:93:74:c7:bf:c3:b6:24:37:
         cb:d9:8a:55:46:a4:df:5d:00:de:3d:14:ea:c6:72:c1:d2:73:
         ce:b7:5d:7a:2b:34:33:59:f0:ea:9d:31:1b:48:88:ff:4f:0e:
         e4:b3:fd:e6:6a:ad:ec:84:bd:89:95:e6:2d:25:7c:0a:62:82:
         20:1a:1b:73:8e:e2:2d:9e:68:e1:4d:f7:eb:05:3b:fd:4a:08:
         8c:cd:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:31:53 2026 by rpki-client