This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          /F3aMa8q60b7TabrPUMHrUrOqn4CAOKnxGSWmdes+/U=
Subject key identifier:   38:9B:17:9C:9E:D6:E6:43:C5:E5:DE:F2:D7:97:02:AC:1D:80:82:1C
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019BFEAF0FD38C39E0898A7543DEED2A1299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          1101
Signing time:             Tue 27 Jan 2026 09:00:44 +0000
Manifest this update:     Tue 27 Jan 2026 09:00:44 +0000
Manifest next update:     Wed 28 Jan 2026 09:00:44 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: DiCCF0MzpxJ/3tmdhn+ePLv5Uy65egA0ZreOsSvjwqM=)
                          2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
                          3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
                          4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
                          5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
                          6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:af:0f:d3:8c:39:e0:89:8a:75:43:de:ed:2a:12:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Jan 27 09:00:44 2026 GMT
            Not After : Jan 28 09:00:44 2026 GMT
        Subject: CN=389b179c9ed6e643c5e5def2d79702ac1d80821c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:95:17:1c:db:94:a4:7e:9e:d7:42:f7:cd:
                    b0:35:73:f6:08:2f:70:70:b1:69:37:ac:68:7f:a0:
                    41:0d:40:b0:88:20:7d:92:27:9a:c8:f5:bb:fb:6d:
                    37:b2:0e:0d:c6:f5:62:84:cf:bd:2e:87:00:0c:f7:
                    ca:46:e4:27:20:7d:29:66:33:82:dc:9d:bf:1a:1b:
                    fe:1f:43:ec:5f:1e:9c:e1:4d:08:5d:22:54:08:a6:
                    03:8b:51:11:cf:cc:1c:7e:63:2e:bb:74:a1:8d:99:
                    5f:ad:44:74:12:f9:8f:5f:16:26:fa:a6:0c:1f:25:
                    0d:3f:d2:26:0a:e9:98:42:b3:8d:fa:31:e0:94:f8:
                    d0:8a:32:a6:6e:e1:de:4e:74:1f:e3:c0:55:7b:e7:
                    69:7b:c2:e6:85:a6:cd:ce:21:c1:19:ed:45:95:5e:
                    e2:79:1c:57:cf:47:2f:8d:26:4a:66:dc:ed:04:62:
                    d3:27:2a:f3:73:7b:f8:42:ec:9d:8d:31:09:ea:63:
                    71:be:c0:bd:23:3e:57:2e:f2:3e:de:6b:e0:2c:b0:
                    ef:11:da:4e:6e:f0:71:d6:81:76:29:fb:97:7f:e5:
                    57:b2:97:60:61:04:11:0d:5c:47:bd:0a:97:99:05:
                    dc:1d:17:f5:c4:ec:d0:8b:41:09:86:37:3b:93:f1:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:17:9C:9E:D6:E6:43:C5:E5:DE:F2:D7:97:02:AC:1D:80:82:1C
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:40:c5:b0:fd:86:1d:0a:22:ca:43:4b:5f:ee:e5:ce:b9:
         09:b2:e0:f5:1a:17:77:99:e1:4c:81:6a:38:d0:7a:41:5d:60:
         2a:29:5c:89:31:0d:7b:f9:a2:1c:f3:f0:75:96:08:40:47:0b:
         8e:c2:8e:c3:24:b6:4a:ef:86:a1:4e:e3:c3:44:e7:6a:f9:1f:
         e3:e8:80:65:9e:46:9c:52:d1:6c:7c:c2:04:86:5b:6a:fd:0a:
         e2:ab:9a:bd:32:2a:28:a5:c7:66:73:d4:6a:fc:bf:02:ac:be:
         da:34:94:00:fd:cf:a3:92:19:f2:b2:80:2a:9a:1e:4b:20:8a:
         14:5e:be:2c:ad:05:61:eb:72:13:76:0a:51:cf:f8:3d:1a:5e:
         48:c7:a7:cb:2e:77:12:99:4f:ce:9a:00:a6:b1:cc:89:fd:6f:
         d6:9f:07:4b:c2:73:76:b5:b0:66:50:6d:4e:a8:fe:41:93:0c:
         53:86:36:f4:72:a4:83:1e:b9:00:3e:0f:61:dc:9b:87:43:bb:
         0b:9c:74:3a:91:e4:19:96:06:c5:32:71:c4:1a:38:ba:f1:82:
         14:94:d9:20:03:38:7e:8c:ad:c5:b5:87:7e:bb:23:c9:b4:9a:
         fe:41:77:ef:0d:9b:d2:ed:ae:2d:fd:35:77:cf:1a:6c:53:d7:
         8c:82:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:44:22 2026 by rpki-client