This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File:                     iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier:          9YaxSBth0k1AvUQJrmsjHP5g6Q/qQyb0geHXBQ3ZVwY=
Subject key identifier:   8F:D0:4C:E9:10:56:51:40:29:BA:BC:4F:7E:96:AA:3B:39:9D:FF:D1
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer:       /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial:       019BF6BF1F7FFD8C5108B29419C91AD4A826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number:          0B83
Signing time:             Sun 25 Jan 2026 20:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:19 +0000
Files and hashes:         1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
                          2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
                          3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: 4UKWzd8DEpVTew5kullSX5xwsb1DIDjwep3arA9R3Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:1f:7f:fd:8c:51:08:b2:94:19:c9:1a:d4:a8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
        Validity
            Not Before: Jan 25 20:01:19 2026 GMT
            Not After : Jan 26 20:01:19 2026 GMT
        Subject: CN=8fd04ce91056514029babc4f7e96aa3b399dffd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:c6:bb:2b:7f:68:2b:99:80:b1:cd:c1:f8:
                    89:a7:d0:55:c0:2c:4f:9f:d5:b8:4e:19:59:83:1a:
                    0b:5c:e8:42:de:43:a1:5d:01:ed:d5:51:3a:40:5d:
                    d1:89:52:48:ef:49:a1:98:d9:af:45:85:07:f3:b2:
                    ec:2f:eb:b0:85:d8:15:47:3a:8d:62:b3:ea:c3:df:
                    71:fc:5a:d8:a9:fc:0d:ef:6f:29:15:06:52:fd:95:
                    b5:26:09:ca:cb:46:55:c5:55:6d:d2:92:d8:bc:af:
                    b2:f7:ee:97:05:c0:30:34:b2:6e:07:8f:7c:76:8a:
                    b9:cb:59:b0:44:69:db:30:55:ab:6f:bc:03:57:9a:
                    e6:e3:8f:ee:00:da:0b:f0:ee:c5:65:4d:87:d0:6f:
                    df:65:1c:ec:03:4d:21:ed:44:35:d6:27:e4:df:a3:
                    5a:a9:5c:08:ca:0d:d3:ae:7e:65:f2:6f:96:2e:4f:
                    dd:3c:b3:59:59:a5:22:89:70:81:14:91:59:df:1f:
                    7e:bb:ff:e5:19:8d:c8:88:9a:ba:4a:ef:85:0b:98:
                    9c:21:92:83:4f:b8:88:a6:41:16:a6:0a:cb:38:6e:
                    0c:50:05:23:34:7a:e5:83:ca:52:3e:e1:95:91:e1:
                    c3:97:ad:90:fe:06:1c:db:6f:b2:9e:a0:20:a7:05:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:4C:E9:10:56:51:40:29:BA:BC:4F:7E:96:AA:3B:39:9D:FF:D1
            X509v3 Authority Key Identifier:
                keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:3d:89:40:00:17:6c:2a:ec:88:0b:3b:59:be:c7:cc:0b:
         ec:dc:a1:4c:bf:48:56:c6:19:88:05:18:13:d9:be:8e:58:2e:
         69:fa:4d:16:2f:d6:55:e5:47:5d:16:51:86:b0:4f:71:63:00:
         f2:8b:53:c1:bd:8d:e2:0d:4e:76:6c:9f:61:c3:ad:fd:01:bb:
         b0:a8:d2:d1:b4:9b:63:61:76:06:34:ec:37:7c:86:f3:61:9a:
         7a:fb:13:22:ef:90:0b:e9:cc:b7:c3:f8:d8:d3:d5:4f:ec:2f:
         ee:b0:3d:f3:1a:c7:6f:61:d1:21:e8:28:8a:6c:a9:14:8f:8e:
         78:ec:2f:5d:94:c8:23:2b:c3:7e:c9:38:f4:e5:d9:d6:b8:77:
         10:07:0c:14:e9:d7:d0:4a:ae:5e:0d:a6:ac:ab:4c:e6:5b:b6:
         66:f0:ef:56:67:58:74:9f:6f:bd:8d:87:aa:b8:59:53:7f:d8:
         a0:9f:41:53:ac:e7:43:5c:47:97:cc:9d:47:7f:04:e6:e4:90:
         67:25:bd:0e:40:4a:61:fd:7a:cc:c8:fe:a6:77:09:97:e3:1a:
         78:c7:4c:f9:0d:f2:7d:c4:03:73:15:fd:6c:f9:8c:6b:d5:39:
         d8:79:98:d9:1e:c1:1f:04:8d:45:80:46:67:0c:53:4c:3e:49:
         f6:a0:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:22 2026 by rpki-client