This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File:                     CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier:          Yg6D9a7eW1q7qFKyBXUTBdZdW16bANfGm07TDe9dQNg=
Subject key identifier:   7A:D4:35:11:EA:61:27:5E:B2:51:5F:E6:A5:3A:1F:3D:3A:4B:98:8B
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       019BF8082EBF807231C3472653B04865F18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number:          0AB6
Signing time:             Mon 26 Jan 2026 02:00:44 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:44 +0000
Files and hashes:         1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=)
                          2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=)
                          3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: gm4M325EFxtXXeNKXjKXAXUQ2LHIGwyNWxkP5tWabok=)
                          4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=)
                          5: KmiT_bFL6NVBkgtLbXi4ZisK1YU.roa (hash: tgNhq7zv9mTiPGPG9+7tVy0d58V7ydi8nCuBJyqvKtc=)
                          6: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=)
                          7: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=)
                          8: XKCSd_q8htYD2dRhnR0ZGHQd6aE.roa (hash: nrVIhJk0vcnWtX4bPvYtuPJXkD1qd5lmX9UObVE8TRk=)
                          9: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=)
                          10: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:2e:bf:80:72:31:c3:47:26:53:b0:48:65:f1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Jan 26 02:00:44 2026 GMT
            Not After : Jan 27 02:00:44 2026 GMT
        Subject: CN=7ad43511ea61275eb2515fe6a53a1f3d3a4b988b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:af:a1:f9:51:9e:b1:ec:e4:ff:ad:fe:aa:
                    dd:78:ef:cc:17:9f:3d:5c:e9:a3:a3:1b:e1:bb:0b:
                    d7:4f:0c:67:cb:02:32:6d:ee:56:46:24:52:7d:8b:
                    cf:15:46:aa:bb:43:bb:b7:36:df:87:89:1a:eb:b4:
                    c7:c7:3b:e7:5d:ac:29:b3:10:14:35:02:ff:26:90:
                    5d:7c:a2:2b:f4:97:66:fc:97:8b:cb:6f:1c:90:09:
                    e7:56:22:1e:e5:7d:e4:a0:63:cb:94:21:ce:15:27:
                    07:46:ec:58:de:56:03:2f:cc:29:84:c6:bd:24:b8:
                    bb:90:3e:5f:89:7e:30:87:71:c1:dc:72:5c:09:f1:
                    58:80:39:ab:83:c9:ee:7a:23:26:bf:23:4f:fd:da:
                    20:9f:b7:a4:5a:aa:1e:f1:5e:ce:a6:df:11:a4:12:
                    03:ca:aa:73:d7:c2:53:51:86:c7:6a:e7:79:a9:4b:
                    48:45:20:1c:7b:2f:02:70:be:92:52:62:68:e6:a9:
                    65:bf:ab:b7:91:1a:f3:79:b2:95:7d:33:7e:9a:b0:
                    da:4b:03:e6:ec:32:44:44:7a:4b:0c:84:89:be:2b:
                    f9:ca:ba:6e:d9:da:c6:4e:16:d7:3c:b0:75:20:b1:
                    da:ff:51:04:bc:a1:b6:9e:eb:4c:1f:3d:7d:d0:e4:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D4:35:11:EA:61:27:5E:B2:51:5F:E6:A5:3A:1F:3D:3A:4B:98:8B
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b7:bc:94:3c:e0:2d:26:dc:c9:08:82:7e:12:87:9e:79:70:
         4b:35:71:db:47:1f:2d:83:2d:8e:4c:7e:71:9f:d0:4f:22:42:
         ed:5c:b4:6a:7b:dd:4e:c3:4e:95:90:21:bf:71:8d:d8:a1:e7:
         03:3d:90:90:53:b4:08:4d:9d:dc:e9:50:b6:17:e7:87:ff:a9:
         1f:0a:d7:38:df:2a:dd:2b:28:16:22:32:8b:36:2a:d2:50:c9:
         8c:ab:98:db:4d:85:3a:16:3d:f8:6a:f9:15:51:a2:1b:85:69:
         4b:5d:2e:c9:6e:7e:2c:36:b2:25:70:ed:23:29:c2:e3:7f:5c:
         dd:1f:69:2f:ba:5f:e9:19:c8:79:72:34:a4:a1:0d:a9:f0:03:
         96:d0:4a:0f:40:2b:bd:fe:06:6c:70:58:c7:94:53:39:07:40:
         ec:7a:15:f1:d2:dc:bf:3e:15:18:95:df:1d:de:10:42:bc:ec:
         70:fa:fd:2f:ee:81:69:e9:09:35:9d:b1:44:d2:ae:77:a4:38:
         9c:e1:f1:91:56:af:c3:47:28:8e:24:41:b7:bc:7b:3a:a9:8e:
         5b:70:57:e2:21:a1:1b:6f:e9:18:dd:dd:29:4f:e8:75:3e:7f:
         5d:6f:e9:94:91:c3:2f:40:32:e7:77:0d:7a:91:46:fd:67:8a:
         91:54:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:57 2026 by rpki-client