This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          8Hquf/6LDGIPAIiUOTypoJ4zjKGuQvPHDEMvC/GeE84=
Subject key identifier:   43:1F:90:A8:3F:3B:64:A8:3A:A6:15:98:1F:4F:04:61:44:FD:96:B4
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019BF5E320AE04AE30E94563AF0EE6F80C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          179E
Signing time:             Sun 25 Jan 2026 16:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:01 +0000
Files and hashes:         1: 82ufesd9jM_-UcwHl9xDd28w7bc.roa (hash: gm9W00xGdkpnPbgGYol+dd436lsvUg6lbjX2PP6ojh8=)
                          2: 85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (hash: vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=)
                          3: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: oTnIFcCV5Yj9b1B7if1IbPMW4KfOEibU+Nrs0yaktsY=)
                          4: 9RcFiPDd3R3zQqDhd_LItb-oDTA.roa (hash: AC0BWwsNFcYLQdYfVVpkxBC/1xIK6znU8uU1YFKJpGM=)
                          5: ALPiTkZxPDTnbdpPpErdvl97Wc8.roa (hash: Nf4+/SkcOD5qP7AwraGXa6vQHuKG0gARaAPpiziJKcQ=)
                          6: CFbM3tq8MZeSVuH7ugpIBzoNXRk.roa (hash: s53gGWNu/HIfCRikza+XEGXk3HsEV8bGTQkrZadSqJc=)
                          7: VzRDRUhOPTiPlaXOeGXg7YkPjGY.roa (hash: ZiS8xAZ8WIWo3rD54IGCFbmBSzYShJeiuytFXk2sEEo=)
                          8: YtxqG6YVJVzJtkAnwNNnMrka-WU.roa (hash: m+f6M6gTdplPJjEueYl+KBT8SUvLASyT3kyBqwL5mTg=)
                          9: m0JBcNifgnkupm2Gw9Bt39udNkw.roa (hash: IXsvEfN8RKH14B+O7p2elXqG3F9dsf9xtICSKf0rJUw=)
                          10: yiMg7ZQH4FHBD9YZKg_pUWu_Ev4.roa (hash: AIchpJMxJjIRdk7/i7zLscbwRaKVTsnK2jEupzwufmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:20:ae:04:ae:30:e9:45:63:af:0e:e6:f8:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan 25 16:01:01 2026 GMT
            Not After : Jan 26 16:01:01 2026 GMT
        Subject: CN=431f90a83f3b64a83aa615981f4f046144fd96b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:fb:8d:dd:43:1a:cd:58:b2:d1:09:75:68:
                    d5:db:3a:4d:0d:67:4b:bd:bd:5c:55:5f:62:dc:a0:
                    37:f8:35:5a:47:16:46:7f:a9:1e:cf:e1:f5:33:22:
                    7e:1b:78:85:c1:ca:e3:ed:f6:73:bb:d0:98:e6:d5:
                    03:13:ad:0f:5b:b2:50:7d:39:7f:43:33:60:ee:a5:
                    b9:ee:5b:55:5b:82:99:19:8b:40:32:92:a1:40:f9:
                    52:67:09:91:2a:92:78:fa:45:dd:af:0a:5b:9a:9b:
                    d2:4e:68:32:1e:23:33:27:83:fa:9b:31:16:9f:7a:
                    49:d2:ee:8e:01:4c:48:8a:72:50:d3:80:82:fb:44:
                    58:48:34:50:4b:73:5a:0e:11:d1:2e:fd:75:4e:4a:
                    cc:1e:2f:ed:b0:19:e4:6b:5e:9d:d7:75:39:f3:b1:
                    03:61:7e:40:c1:55:e5:7f:e7:bd:8e:f8:b2:5d:cf:
                    5a:99:17:31:23:8a:b0:fe:7a:a1:a0:b7:2e:46:d2:
                    66:9e:bc:08:86:50:88:d9:98:c9:42:6c:34:5b:62:
                    19:c7:7f:5e:e1:a8:8f:9e:5e:2b:70:7c:9c:3f:e1:
                    28:c4:f9:aa:a0:32:59:9f:7b:8c:4a:0c:e0:be:e9:
                    ed:2a:e2:b4:c2:5d:32:ab:5e:e4:36:13:c0:0d:2d:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:90:A8:3F:3B:64:A8:3A:A6:15:98:1F:4F:04:61:44:FD:96:B4
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:bc:8e:ff:81:b3:ee:86:32:d0:63:c8:49:9d:fa:37:5f:
         38:d4:fd:e6:24:55:0c:f4:04:67:e8:e1:84:46:b0:ee:fc:c3:
         f6:90:a0:d7:b4:96:b1:3f:3e:51:5a:74:9a:5a:f1:e2:dd:6b:
         d1:23:29:40:0f:52:0e:5c:5b:59:10:29:a2:94:d4:8e:70:73:
         93:2e:3e:9e:29:d3:b0:cd:df:54:97:3d:ff:88:66:70:80:df:
         b6:ec:6a:63:c9:35:31:3c:34:56:43:e3:b7:9e:fd:c5:70:24:
         3f:a2:09:d2:d1:4f:91:04:99:66:01:ba:7e:2e:48:1b:56:43:
         de:d3:52:e0:71:0d:d8:79:e3:97:fc:94:ba:b7:ae:6c:79:27:
         16:46:fa:21:44:c3:4c:d7:18:d3:7d:92:fb:8b:cc:5b:fb:73:
         b1:6e:1d:56:b6:b6:c5:85:41:bb:dd:9f:b0:2d:90:13:26:08:
         68:c9:39:86:9d:1c:3e:27:35:aa:6a:0d:c5:23:bb:30:1b:7e:
         70:ab:54:ff:50:0e:a4:50:d3:3f:92:80:e9:9d:09:71:46:f0:
         ba:4e:93:df:9b:5e:45:b4:3e:f4:33:0e:ed:d6:66:ff:bf:5b:
         3b:20:6c:8d:38:b7:fd:84:85:42:f0:cd:4f:12:52:65:54:f0:
         45:01:e5:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv14yCuBK4w6UVjrw7m+AyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjYwMTI1MTYwMTAxWhcNMjYwMTI2MTYwMTAxWjAzMTEwLwYDVQQD
Eyg0MzFmOTBhODNmM2I2NGE4M2FhNjE1OTgxZjRmMDQ2MTQ0ZmQ5NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxr7jd1DGs1YstEJdWjV2zpNDWdL
vb1cVV9i3KA3+DVaRxZGf6kez+H1MyJ+G3iFwcrj7fZzu9CY5tUDE60PW7JQfTl/
QzNg7qW57ltVW4KZGYtAMpKhQPlSZwmRKpJ4+kXdrwpbmpvSTmgyHiMzJ4P6mzEW
n3pJ0u6OAUxIinJQ04CC+0RYSDRQS3NaDhHRLv11TkrMHi/tsBnka16d13U587ED
YX5AwVXlf+e9jviyXc9amRcxI4qw/nqhoLcuRtJmnrwIhlCI2ZjJQmw0W2IZx39e
4aiPnl4rcHycP+EoxPmqoDJZn3uMSgzgvuntKuK0wl0yq17kNhPADS1I3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMfkKg/O2SoOqYVmB9PBGFE/Za0MB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlK8jv+B
s+6GMtBjyEmd+jdfONT95iRVDPQEZ+jhhEaw7vzD9pCg17SWsT8+UVp0mlrx4t1r
0SMpQA9SDlxbWRApopTUjnBzky4+ninTsM3fVJc9/4hmcIDftuxqY8k1MTw0VkPj
t579xXAkP6IJ0tFPkQSZZgG6fi5IG1ZD3tNS4HEN2Hnjl/yUureubHknFkb6IUTD
TNcY032S+4vMW/tzsW4dVra2xYVBu92fsC2QEyYIaMk5hp0cPic1qmoNxSO7MBt+
cKtU/1AOpFDTP5KA6Z0JcUbwuk6T35teRbQ+9DMO7dZm/79bOyBsjTi3/YSFQvDN
TxJSZVTwRQHlCQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:53:27 2026 by rpki-client