This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File:                     A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier:          pfYAQ6Ksc1wQMXn1TM1L9xHdx24dq17CopCkk10aFx4=
Subject key identifier:   D8:C3:94:46:08:3F:03:88:D4:5A:20:AF:5F:3C:E0:FC:F9:3A:FD:D2
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer:       /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial:       019BD57DDB5F883C6798F5CAC6A1E1BE228B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number:          7E
Signing time:             Mon 19 Jan 2026 09:02:33 +0000
Manifest this update:     Mon 19 Jan 2026 09:02:33 +0000
Manifest next update:     Tue 20 Jan 2026 09:02:33 +0000
Files and hashes:         1: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
                          2: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: 84Ff3VB+jR5lejc/Av0CzOSfIfAdiZ0pJWVfQPAba5g=)
                          3: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
                          4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
                          5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:7d:db:5f:88:3c:67:98:f5:ca:c6:a1:e1:be:22:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
        Validity
            Not Before: Jan 19 09:02:33 2026 GMT
            Not After : Jan 20 09:02:33 2026 GMT
        Subject: CN=d8c39446083f0388d45a20af5f3ce0fcf93afdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:52:51:15:6a:ea:0c:d1:c9:5c:da:30:85:
                    74:5a:a6:1d:6c:90:fc:de:2c:f0:6c:9d:68:e7:fc:
                    91:6d:a9:cd:ff:15:d8:2b:99:84:1f:c1:ee:44:dd:
                    ee:39:a2:9e:b8:51:7f:3d:91:50:ad:5e:bb:86:5b:
                    f7:31:bf:79:ab:51:54:a2:63:37:a4:8d:a7:50:ff:
                    59:a0:50:dd:51:ac:dc:1a:8c:cb:98:9a:ff:e1:f6:
                    67:68:ea:16:01:ce:f1:97:7a:ca:85:52:db:7e:cb:
                    da:2c:52:5d:59:0a:0e:da:04:94:4b:37:6a:05:b0:
                    68:0b:e6:7b:56:b3:b8:3c:a1:a1:fc:1d:8d:81:4c:
                    eb:a1:0d:cf:57:78:91:5d:f9:60:40:05:2d:07:d3:
                    75:58:34:0a:4e:40:f1:60:71:89:ae:39:3d:78:83:
                    75:8e:99:f3:c7:ef:c5:73:43:68:c5:ad:2b:62:9c:
                    5a:30:a7:c7:58:8f:b4:24:6e:0d:e7:a0:f2:0f:bb:
                    b3:06:9e:a5:76:c7:e9:b9:c6:7c:a8:93:c0:d1:83:
                    a7:1a:fa:65:35:b6:7e:c9:37:05:04:01:d4:b5:cd:
                    48:7b:72:1b:d7:1c:30:32:96:cc:82:8b:30:d2:2c:
                    d4:91:cf:c5:70:be:6f:c6:cb:39:76:16:a3:72:1e:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:94:46:08:3F:03:88:D4:5A:20:AF:5F:3C:E0:FC:F9:3A:FD:D2
            X509v3 Authority Key Identifier:
                keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:5a:c0:44:f8:1e:e7:4e:15:61:14:2d:b7:ae:7f:71:35:
         0a:89:99:ab:0f:a2:8b:aa:da:af:6d:13:54:f2:de:55:57:5f:
         a6:ae:3e:39:bf:da:39:a8:35:6a:ba:a9:94:a9:c9:3a:5b:30:
         1e:cf:2f:b8:f6:a1:ed:48:61:d2:00:f6:d3:1a:0e:1c:25:df:
         ce:00:8b:22:f7:94:9a:12:fc:ff:a4:8c:d1:12:fe:23:62:cd:
         e3:7f:19:7c:94:e5:56:17:2b:28:06:36:dd:d7:e0:52:f7:72:
         77:d7:06:5b:cb:6a:bf:53:28:56:ff:e5:a3:60:dd:3f:f5:13:
         a2:e5:5b:02:6a:73:0b:87:ef:24:c8:01:fd:04:92:49:be:cb:
         90:d5:db:a6:d2:f0:8d:be:80:93:59:2b:93:f1:28:e4:a3:7f:
         55:56:70:87:14:04:a9:36:81:fa:8c:ad:d2:4e:3a:f4:8c:46:
         48:7c:c3:61:81:73:d2:bf:db:0d:e7:b7:af:5e:7e:32:75:f0:
         b5:0e:57:df:26:03:17:d1:2f:43:7c:dd:5e:35:0b:ee:02:c7:
         b2:da:7e:2c:af:fd:00:cd:7e:dd:e4:69:40:5c:22:03:dc:db:
         0e:2b:8e:4d:a3:44:84:74:17:66:42:2d:99:f5:c4:fa:12:98:
         71:48:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:29:35 2026 by rpki-client