This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          qgjh0oGK3GXi6eDPN8bYE11ffgcF3xQRNKSVU+j+EQA=
Subject key identifier:   DE:1E:48:DF:45:E1:73:38:47:14:D8:57:56:CE:EA:46:5D:D9:DB:F6
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       019BF5AC33D8F7C81B529FEB036E03918B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          17FC
Signing time:             Sun 25 Jan 2026 15:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:01 +0000
Files and hashes:         1: 3xGhx8NZgWxLSKCDfcPFLQ8-OsI.roa (hash: nrPCTtkuQDIcy3WjV2PDeyqXdxGsNrOVS6dTe/yokSw=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: 8U18o/cgZfOpF7qJ1eYdF2gpVQt3+l19/URE7O5N3+w=)
                          3: X7VKKNvOYZTTFDZ8BCWjmPebtX8.roa (hash: L/kFEnNplgovPacWJl2tFaydAgsY/9Zn113PwxIDUis=)
                          4: ZH-fOKhfhXtTvq5cNeuUVWkcFIQ.roa (hash: 2xvhce+amLHD9b2VUMk2z7GO/hZOLwWwWRJLNXmF+4g=)
                          5: u9ivcp0Mnia0HnQ0D4IzKd6ABQI.roa (hash: 7vFIT7RVuGNWtyZo6py9uIoAR5B/gd1YarQbs2RvWTM=)
                          6: ue1ofATco1WyASgglUMXvaTcbAA.roa (hash: 7NG4eNgD3uRpxbInL8ONmLKALYMO6RfhX+P8iMxG0cg=)
                          7: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (hash: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:33:d8:f7:c8:1b:52:9f:eb:03:6e:03:91:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Jan 25 15:01:01 2026 GMT
            Not After : Jan 26 15:01:01 2026 GMT
        Subject: CN=de1e48df45e173384714d85756ceea465dd9dbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:9f:2b:0b:d0:31:a8:e6:d7:56:d0:a1:f0:
                    0a:cb:5c:da:a5:59:bc:c0:68:22:08:73:f6:98:2c:
                    1b:21:c5:e6:19:4c:be:0e:8e:7c:49:f8:26:d2:c4:
                    4b:1b:f9:05:42:7c:f1:96:64:a1:aa:89:5e:b5:7e:
                    40:93:71:64:d1:34:c6:21:fb:e5:f2:53:a0:bb:d7:
                    dc:4d:ca:52:1b:58:ec:71:52:5b:42:d2:99:3c:ec:
                    ad:89:61:f6:ba:c6:f4:85:7b:ba:54:1b:8f:50:bf:
                    43:e1:14:23:75:ce:b1:e4:46:cc:29:35:39:0a:67:
                    f5:67:08:8c:55:e1:4f:7a:34:fb:e0:8d:97:d1:d8:
                    47:74:b4:b6:3c:bd:17:13:ba:e8:49:f2:82:d6:04:
                    d4:2f:4a:88:26:00:ea:fc:8f:7b:e5:64:63:ca:7a:
                    1b:79:1e:00:6a:8e:3d:15:5b:ff:11:c8:d6:0e:58:
                    ad:3b:a4:67:bf:be:0b:6a:62:06:d1:63:87:17:74:
                    da:f0:08:ca:67:09:18:9b:72:58:6d:2b:d9:cb:b4:
                    e0:09:6e:05:1c:13:ee:e5:96:f6:e3:1c:ef:1c:9a:
                    ad:1d:15:02:e0:f1:77:84:55:74:02:55:6f:33:f8:
                    5b:fa:36:74:98:75:6c:7c:f3:34:df:41:62:cb:ad:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:48:DF:45:E1:73:38:47:14:D8:57:56:CE:EA:46:5D:D9:DB:F6
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:e2:dd:67:d8:b8:86:92:60:58:52:21:b5:06:99:6b:a3:
         2a:80:f6:e3:bb:32:10:2d:b6:a2:80:7b:b8:cc:34:9c:3a:75:
         3d:12:b1:eb:97:76:47:68:0f:33:cc:17:13:e2:51:14:db:06:
         31:a3:d0:b4:da:37:61:36:c7:18:e8:47:45:53:df:a4:f4:13:
         8f:e5:bf:7f:01:19:e7:15:9f:16:f2:fe:36:92:44:81:21:ad:
         21:6a:86:ea:92:5d:07:4d:07:cb:d2:1f:0e:a4:e4:75:8f:ce:
         92:9c:33:d2:64:2a:30:ea:96:eb:04:15:f5:94:28:26:91:29:
         81:25:56:41:51:80:25:f8:77:89:2e:cc:06:ed:0f:f1:87:75:
         b1:93:ff:31:39:7f:61:31:20:dc:6e:75:a7:df:21:13:c4:47:
         89:b9:4e:d6:03:1b:dc:a8:22:3d:3a:e1:d3:0d:8f:16:6f:18:
         42:35:e1:8a:a3:c6:fc:6c:cb:bf:04:03:7d:b2:e7:cb:75:20:
         31:30:fe:4d:68:0d:c7:32:34:60:1a:fb:39:fa:0d:56:60:d6:
         84:3f:44:26:f5:89:9a:9d:87:bb:a1:21:a8:eb:67:11:53:38:
         4c:ae:d3:21:d0:58:d1:f8:c8:ae:4d:bc:7b:d2:0e:8e:1b:7b:
         ed:35:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:37 2026 by rpki-client