This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          Nhgj8dA7qrI/YKMFHR6tS43PhCWW7ogslTgtMzO7SII=
Subject key identifier:   64:97:BD:7F:7D:89:5F:0A:1F:E8:CF:20:E7:54:05:EA:55:6C:7B:D8
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019BF79A38B6EA834E13175F02807123661B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0B96
Signing time:             Mon 26 Jan 2026 00:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:37 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: vpsz9Xc3d7mFDqjc74TemjLYrdeHkEbjEW0P/rLYzLo=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:38:b6:ea:83:4e:13:17:5f:02:80:71:23:66:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Jan 26 00:00:37 2026 GMT
            Not After : Jan 27 00:00:37 2026 GMT
        Subject: CN=6497bd7f7d895f0a1fe8cf20e75405ea556c7bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:c1:65:ac:13:44:ae:27:9d:71:5c:2b:89:
                    b1:14:ad:58:c5:07:b0:44:e9:bf:e9:35:82:32:80:
                    10:f0:75:8e:dd:4e:2f:6d:6e:b0:0f:29:5c:a2:c6:
                    b5:71:a6:e9:71:c7:2f:37:ef:77:93:7d:fc:89:56:
                    94:3b:3c:3f:98:18:f9:d9:63:19:49:8c:50:3b:52:
                    a5:ee:23:e5:23:ae:f7:41:f9:9b:c2:62:16:b5:5b:
                    53:b4:18:1c:bd:51:f8:39:b5:af:bc:35:0a:c8:72:
                    8f:0a:28:a1:fc:87:55:c8:2d:a2:9a:92:93:80:37:
                    17:f9:6a:f9:fd:42:0c:d9:1c:cf:bb:5e:ac:f2:7b:
                    74:be:95:8d:44:64:ee:8b:2d:48:4d:36:88:41:26:
                    96:60:9c:18:2a:ee:4e:d5:f8:6b:46:d6:da:10:39:
                    c8:69:92:94:a3:e4:c2:6d:b6:a7:bb:25:f9:dd:79:
                    34:b9:32:e4:ef:bb:30:88:1a:3c:10:da:66:31:13:
                    f2:eb:5f:12:0b:2c:8f:65:af:19:25:84:65:03:28:
                    ec:09:bf:aa:35:16:7c:55:f6:e2:93:9f:68:02:d1:
                    53:8f:a8:b1:00:f9:f3:b9:36:79:a4:d9:ef:b1:24:
                    73:8b:74:75:30:f9:c2:6b:7e:ca:20:b4:13:5a:60:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:BD:7F:7D:89:5F:0A:1F:E8:CF:20:E7:54:05:EA:55:6C:7B:D8
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:fb:06:00:fa:27:8c:35:20:42:d3:fb:23:3c:5c:04:24:
         e4:df:67:4a:03:a7:5c:f8:ea:9f:c2:d4:ce:eb:3e:54:e9:76:
         8a:94:2f:9a:7d:fa:4d:d3:8e:63:18:ba:95:80:7d:a5:b0:98:
         8e:31:bf:d4:98:58:ae:4b:d9:8b:07:a4:b5:be:3d:81:cf:28:
         d3:46:fd:c6:72:c5:91:b9:07:26:09:c3:67:ec:ff:95:96:47:
         df:12:d0:eb:ee:22:8c:62:0c:f8:c5:21:af:d2:59:c1:cf:72:
         d1:b7:56:f8:6d:0f:63:c0:4e:12:b7:6f:a1:1f:a3:db:e1:cd:
         dd:91:e6:58:54:4d:dc:6b:b5:44:54:fe:3c:20:e0:89:f8:70:
         fc:ef:58:27:e1:38:c0:1c:9e:85:99:25:e3:38:dd:3a:40:f3:
         26:56:e4:40:25:cd:d9:57:8e:83:a0:69:7d:e2:bc:9b:e0:6f:
         6c:11:1f:5c:81:70:61:80:f4:a4:ea:25:c7:b5:05:53:7a:b9:
         78:59:6a:f2:74:6b:26:1d:e3:52:65:09:f3:a4:7c:ae:db:8a:
         6e:e3:e6:87:67:26:dd:4e:89:a6:2e:f1:0b:c9:ef:56:7e:6e:
         f4:ed:56:60:9b:5e:ee:a2:65:07:b3:19:73:e8:45:a5:d9:11:
         5f:c3:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:28:34 2026 by rpki-client