This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          mrjuQFA0ava8u0mXDwdheQi50kFkgRwsy6aK1Wzf6mQ=
Subject key identifier:   84:88:B4:C0:B6:BB:DD:F1:F4:3E:0D:18:CB:CA:9E:FE:42:A7:7C:3D
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019BF6BEFE89F981B74770FFC61D52115949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          13D4
Signing time:             Sun 25 Jan 2026 20:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:10 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: Yi33TeeKPd0xUjHb73L6pB6DKHCl354FLg9RvC1+plY=)
                          2: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (hash: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc=)
                          3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          4: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          5: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          6: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          7: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          8: eeTRJICIDgN4JkjWbGf7_URm99g.roa (hash: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ=)
                          9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:fe:89:f9:81:b7:47:70:ff:c6:1d:52:11:59:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Jan 25 20:01:10 2026 GMT
            Not After : Jan 26 20:01:10 2026 GMT
        Subject: CN=8488b4c0b6bbddf1f43e0d18cbca9efe42a77c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:65:9f:34:16:46:23:3b:b8:e0:fd:6c:96:
                    5f:fd:2a:94:dc:8d:37:59:88:bb:40:50:f8:f3:2b:
                    22:69:bc:5c:60:ec:49:be:27:51:5f:99:49:bf:a9:
                    f2:3a:ef:02:80:6d:e2:8b:96:37:08:9a:ad:17:68:
                    d7:70:c7:d9:ea:df:08:e0:59:fc:e4:7a:97:97:55:
                    51:15:44:0c:58:20:37:ca:1c:1d:a0:92:7d:63:a9:
                    52:2d:f0:84:13:19:d2:a3:21:4e:80:26:c1:10:50:
                    15:31:ce:9f:dc:7b:dd:6c:ee:7c:7f:ee:df:8b:98:
                    cc:e6:32:2a:03:2f:e7:e8:e4:6b:d0:88:c9:1f:51:
                    34:85:46:1b:8d:67:ec:7c:6e:11:4f:c8:b9:3c:fa:
                    78:28:a2:63:7f:47:7d:67:fd:63:95:c7:f5:21:25:
                    1a:9f:d8:fb:30:54:5a:e4:1e:38:87:e5:1b:e2:c6:
                    07:f7:67:e2:47:ef:83:90:6c:d3:54:de:e1:f5:a9:
                    ae:70:44:6e:48:31:ca:21:ad:ff:7a:fb:e9:7d:d3:
                    21:cc:02:2f:00:e1:85:85:38:b5:d7:24:88:7c:e2:
                    8f:9c:02:7c:ca:3e:11:6f:a1:bf:80:3f:2a:9e:9d:
                    6c:7d:76:10:71:81:e2:4a:81:5e:c7:2c:dc:7e:52:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:88:B4:C0:B6:BB:DD:F1:F4:3E:0D:18:CB:CA:9E:FE:42:A7:7C:3D
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:62:82:2d:12:71:ec:44:04:a4:40:1d:e5:b6:07:f1:47:
         49:cd:f9:a4:70:b2:25:3d:44:75:5c:78:e2:97:40:e2:a0:bb:
         96:af:c0:3b:71:81:9c:6a:69:d8:e6:fb:f5:6c:e4:f0:aa:f6:
         d8:bb:15:b3:9c:26:04:ae:e8:3c:c0:ea:1c:4e:80:80:99:7e:
         c1:bf:d0:3c:74:de:69:36:31:cc:6d:54:f3:24:d4:2d:aa:1b:
         68:e2:9d:ed:ff:92:62:32:17:1c:84:9e:90:3a:78:25:e1:bd:
         e2:82:3b:19:58:56:47:53:b8:00:64:4f:58:bf:6a:fa:6e:5b:
         b2:6a:44:11:a7:5d:49:14:45:c9:d8:66:c5:5f:94:56:6d:b0:
         45:08:e5:6c:ff:11:91:2e:18:1d:91:49:0b:6e:fd:ca:0a:36:
         75:96:8b:2c:10:19:0c:0d:d8:a0:72:46:0f:c6:8a:df:e6:ea:
         a2:9d:cb:20:91:e2:ac:29:6f:39:ec:42:4c:4c:34:47:17:d1:
         84:de:15:1f:7a:31:b8:a5:9f:2d:42:c2:9c:21:26:dd:09:ed:
         5c:d0:7f:78:70:78:b0:32:92:ee:2a:65:80:6d:f5:3b:b9:61:
         a8:d0:4b:7a:1f:9f:91:7e:47:74:59:68:b2:63:21:85:cf:29:
         76:46:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:37 2026 by rpki-client