This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          TEXzrL2lUn/7JWzS6PDqUUAU06Oxyhi8ajcbpXZxMhw=
Subject key identifier:   4F:29:17:7A:14:47:2A:7D:B6:17:E1:11:6C:31:4E:0E:61:90:99:A1
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019BF876253559CEDBC9BD87893BFA163A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 04:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:50 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: WIPzM40gnW03tO0u5+WNlQ/2aosZurvvsNQT4uAlmM0=)
                          2: G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa (hash: CRoiGyn3+g1TcYhralq7D2YpvKZFCAsmyg1ItQBPBYo=)
                          3: d79pVbNl6KV7mE-TmGcgiFhhpy0.roa (hash: 6sQKNK+i7JugUTkWCMHqg5UJuTLwVJ2b0IOTbHFw/EY=)
                          4: uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa (hash: sxZlIQb25hDFz3ykb8U9qXE3lTMI/4iHplhe6RLTs2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:25:35:59:ce:db:c9:bd:87:89:3b:fa:16:3a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Jan 26 04:00:50 2026 GMT
            Not After : Jan 27 04:00:50 2026 GMT
        Subject: CN=4f29177a14472a7db617e1116c314e0e619099a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:54:e2:40:80:35:af:b5:f0:dd:aa:ad:70:
                    75:a5:1e:4c:cd:c7:46:5c:93:22:38:d1:d2:12:32:
                    63:b0:f6:59:86:f1:a8:82:e8:07:0f:a5:b0:84:fb:
                    ce:0e:e0:e5:67:0b:f2:cc:9f:9d:cd:30:77:5f:d7:
                    98:0b:ec:43:70:72:31:e1:4b:71:74:5e:f5:8f:18:
                    7e:a6:e5:58:68:f4:6a:45:f7:dd:13:ef:29:f8:fd:
                    6a:97:55:7c:d2:97:8f:8f:bb:13:dc:17:3f:43:49:
                    2b:aa:4e:1c:db:b0:b4:54:c0:8d:15:d7:be:67:5c:
                    86:ee:4a:49:5a:05:9c:a1:41:71:ca:f2:30:50:db:
                    20:09:e6:3b:d4:cf:64:db:1e:28:d4:a3:94:c2:5a:
                    31:3b:c1:ba:c1:cf:f7:64:95:85:61:33:34:9b:dd:
                    e8:c7:00:42:03:ba:0f:7b:1a:72:7f:92:09:ab:64:
                    7b:9b:8f:02:1f:e6:dc:86:37:8b:c3:22:c7:62:63:
                    7a:87:d6:76:03:47:fe:8b:2c:94:0b:87:5b:45:ea:
                    44:21:9b:50:6c:c7:22:3d:6b:f6:41:3d:6b:54:83:
                    aa:2a:7e:db:c9:3f:00:27:c4:ec:55:d9:53:54:26:
                    d4:0f:bb:d2:56:ed:31:0e:05:92:df:69:df:eb:0f:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:17:7A:14:47:2A:7D:B6:17:E1:11:6C:31:4E:0E:61:90:99:A1
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:c3:e9:13:c7:5d:0d:df:20:35:66:f7:bc:02:4a:87:9f:
         85:72:f9:f8:5d:1a:61:8f:f8:ca:77:da:97:a6:f7:69:35:3d:
         3d:ab:65:91:c6:26:dc:27:5e:83:66:c0:55:47:03:60:91:d4:
         10:a8:ab:35:2f:3b:74:b7:5e:d2:89:3f:74:2b:b3:bd:0a:c1:
         8c:e8:cd:50:d4:34:6a:1e:dc:4e:91:42:17:14:ef:08:f2:64:
         fb:27:d1:f4:a5:d0:a4:17:ee:15:42:91:b1:a1:74:3b:c1:9d:
         ca:99:d7:b5:b5:a0:82:11:e4:32:06:7e:d8:d4:c0:94:8e:e4:
         0c:54:06:1c:ec:4f:c6:f6:69:ab:f6:ee:f4:38:84:38:50:19:
         cb:7f:37:ee:ba:1d:f5:d6:ac:cb:97:ad:59:0d:7a:e1:f4:dd:
         73:c3:d5:4c:37:ba:e9:36:dc:de:38:32:ba:4a:26:c2:f0:e4:
         be:9d:7d:90:18:02:ce:10:f2:e3:f4:69:16:04:44:88:8a:29:
         26:78:58:59:6d:6e:b4:59:7b:27:a3:02:e8:a4:05:e8:8f:94:
         a0:63:e8:55:95:dc:13:7a:4a:f1:88:6b:e3:fc:8a:7f:a4:0a:
         eb:5e:b7:93:01:56:b3:e9:eb:fb:80:8d:f8:6d:ad:3f:cf:86:
         0b:b6:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:20 2026 by rpki-client