This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
File:                     M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json)
Hash identifier:          juEkNqW7paaeLGfqfaa3KQVzDOPbtzztYPe81IjvheU=
Subject key identifier:   B5:AC:3B:E2:03:75:29:2E:08:F9:A0:DF:50:AF:29:CA:48:D7:F6:44
Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Certificate issuer:       /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Certificate serial:       019C0EFE9247C2E5C89806DE49088ACCB04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
Manifest number:          0C1B
Signing time:             Fri 30 Jan 2026 13:01:30 +0000
Manifest this update:     Fri 30 Jan 2026 13:01:30 +0000
Manifest next update:     Sat 31 Jan 2026 13:01:30 +0000
Files and hashes:         1: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: C2u1E3x6W9XU2VNzVt/7Zi6v+dXFKNRqK+8zTmd3DgM=)
                          2: ROpvBepIbgL1YB38sWe6DYyZ2hY.roa (hash: e7h0xATOBW6CdBIVhb27eeZ36b1QWdWkJWfktjBe1pA=)
                          3: gFtvV2Nf6aHPmzajQ5srlB1oKxU.roa (hash: I4oXKyNPDYtBodXHPnB3VP2AM/PrjjCBgXSPVTROeHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:fe:92:47:c2:e5:c8:98:06:de:49:08:8a:cc:b0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
        Validity
            Not Before: Jan 30 13:01:30 2026 GMT
            Not After : Jan 31 13:01:30 2026 GMT
        Subject: CN=b5ac3be20375292e08f9a0df50af29ca48d7f644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:f0:b3:bd:e3:b7:40:fc:f7:dc:e6:63:4a:
                    d8:57:43:c5:ef:58:80:11:04:b1:7e:96:2c:c7:8b:
                    f9:08:d4:cf:d2:7e:14:5f:63:85:59:0a:71:66:8a:
                    bd:6f:b6:41:41:d0:c0:08:1f:c9:ce:c4:f7:34:75:
                    75:d6:8e:4c:26:af:04:38:4f:92:87:53:e4:ba:69:
                    90:2b:d8:2a:7b:38:d4:6c:e0:ce:0d:db:54:96:1b:
                    89:b9:dc:15:67:68:79:82:e1:c8:a6:44:6e:a2:12:
                    7d:88:3f:20:3a:79:da:9b:de:4c:85:df:2a:b2:cd:
                    53:e0:26:19:c0:8d:6b:ef:1d:16:74:7b:d4:84:17:
                    7c:c9:cd:ed:b9:4a:f4:e0:2d:d1:15:05:00:1e:6a:
                    14:14:a2:f8:7e:01:25:2b:a5:8b:90:d3:be:25:39:
                    8f:ae:d6:2f:33:f1:6b:dc:58:03:d3:49:4c:14:48:
                    d7:1d:08:27:68:85:6d:e8:fa:f0:40:6d:32:a3:b7:
                    d1:94:24:4b:09:cf:b5:f0:62:61:63:16:64:f3:5c:
                    78:dd:f2:1d:11:87:b3:ac:41:3f:e1:da:72:f3:05:
                    a1:fa:6b:61:e1:4e:a0:9c:af:f3:1a:2e:27:08:c8:
                    8c:6b:50:71:bb:c3:cd:cd:a8:d3:07:fc:4a:2c:00:
                    e0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:3B:E2:03:75:29:2E:08:F9:A0:DF:50:AF:29:CA:48:D7:F6:44
            X509v3 Authority Key Identifier:
                keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:88:ef:18:10:8e:04:b3:08:97:f1:b8:b4:a5:26:2e:7c:50:
         7a:43:94:8e:f6:dc:c2:43:8e:88:03:85:13:80:bf:74:cf:4b:
         c0:82:19:87:fe:30:5a:66:97:ab:2b:ff:b4:68:24:10:8a:fc:
         9b:b9:37:e2:7c:95:34:21:c4:89:ee:ea:d7:40:07:20:e0:4d:
         65:81:e9:4d:46:40:3c:21:1c:b1:63:6e:d4:85:99:40:c8:73:
         3b:0d:8b:17:4f:9d:7a:a0:16:30:22:0e:a9:45:e9:17:fc:f2:
         bf:f4:0b:1e:64:bb:97:b1:9b:c0:f7:57:f1:d4:cc:9e:6b:3e:
         e4:4a:f4:c0:84:8d:81:8a:f5:48:9c:10:1f:fb:04:1f:bd:19:
         6d:80:b1:4b:1f:86:9c:22:45:74:c9:07:4d:df:06:81:59:33:
         92:42:dc:ce:0b:94:93:2f:6e:a2:80:af:e5:be:22:95:aa:0e:
         27:ba:cc:69:5e:ed:eb:d5:85:97:ee:b6:9c:7d:b8:9c:bd:9b:
         7e:a8:6f:1a:b2:3b:d5:7e:6d:2c:30:2f:88:65:02:05:ba:a8:
         b3:65:19:b2:7a:4e:5a:ea:8f:9c:34:0d:d0:5e:64:66:dc:dc:
         83:3e:1e:b6:b7:d6:76:b4:41:6b:31:be:44:80:e9:ed:fc:a6:
         46:8a:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 20:12:27 2026 by rpki-client