This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File:                     8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier:          B/xE+ZZMNGAD0+ITZVgnMAjvBAG7S7OOODRobLm+IFk=
Subject key identifier:   23:83:63:AC:40:22:3F:56:B9:E2:9E:9E:75:30:9D:5B:6A:6E:E6:F9
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer:       /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial:       019BFBAE1023FE4AE0BEF3CF6E8E04788D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number:          08AC
Signing time:             Mon 26 Jan 2026 19:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 19:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 19:00:47 +0000
Files and hashes:         1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: kZugLUTJVVQj0sf9M3yQL9DwJESqehAo0lcAtOfim5I=)
                          2: Xt6VlYdBXXzNk_5SkMqf0Ssy87E.roa (hash: 9vBskc5hxURaaf/JWcTgm3uyfOTVcjvg9WeBIxqRnpQ=)
                          3: iLu5B9aeu4NSBPHA9ivJ0i8Z4AA.roa (hash: acJKMRQ5Omks2WW0pWsL2TS7UwZ6+sYIZuHt+6L6NH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:ae:10:23:fe:4a:e0:be:f3:cf:6e:8e:04:78:8d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
        Validity
            Not Before: Jan 26 19:00:47 2026 GMT
            Not After : Jan 27 19:00:47 2026 GMT
        Subject: CN=238363ac40223f56b9e29e9e75309d5b6a6ee6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:4d:1d:73:75:e3:e7:cc:9c:b5:92:ac:5d:
                    c6:16:1a:ea:89:aa:42:47:14:25:d9:8b:ab:54:0b:
                    22:48:7f:19:62:9c:79:0a:28:3d:da:32:d7:87:bb:
                    8f:c3:f8:c9:74:19:8d:2c:01:24:16:27:96:3f:67:
                    2a:bd:85:5a:36:11:aa:3b:70:d5:49:7e:dc:b0:6c:
                    56:0b:15:1f:ab:2c:dd:a6:19:33:12:0a:f3:ac:38:
                    87:d7:68:b2:84:2d:b2:46:0e:ef:c5:10:09:cf:e0:
                    33:80:6b:4b:22:6d:de:2e:f6:b4:d7:1f:bb:f7:39:
                    ef:c1:09:22:f8:03:5b:ce:23:af:9a:a2:7e:0f:fa:
                    97:9d:19:95:18:3a:eb:4f:b0:d5:53:7b:9c:3e:13:
                    c8:f8:4a:3d:2f:8d:f2:f3:9d:75:33:1a:44:ab:56:
                    e2:0a:c8:86:a2:06:06:a1:99:4e:f0:1d:98:38:be:
                    ca:88:0d:b8:63:d7:b0:b0:a8:9f:c6:2e:97:ef:d6:
                    d3:2a:1a:32:1c:6c:bd:da:7a:ea:62:fa:15:c1:76:
                    1d:7e:32:7d:b0:bb:da:80:e1:1a:d8:34:c3:83:ef:
                    32:ed:db:a8:ae:a2:66:f1:e5:1c:ae:85:6f:65:b1:
                    39:f2:66:90:8c:31:05:df:f3:e7:8a:35:f2:b5:2a:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:83:63:AC:40:22:3F:56:B9:E2:9E:9E:75:30:9D:5B:6A:6E:E6:F9
            X509v3 Authority Key Identifier:
                keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:65:b3:01:a2:d6:4f:2c:17:00:a7:24:b7:79:e6:89:ee:
         8d:55:54:27:8b:97:38:42:89:bb:7c:34:0d:e5:c6:91:02:cb:
         ff:99:c5:5f:6a:fa:17:2f:7d:db:8f:af:52:2b:28:76:33:50:
         65:0f:7c:7e:ba:08:fd:8d:aa:0c:e9:5f:a2:7b:09:f4:8f:ff:
         9c:51:d7:cb:42:10:ee:db:c4:72:9a:73:7c:2f:a6:bc:bf:ec:
         9f:d7:67:77:17:6d:d8:f5:ca:52:7b:fe:d6:44:98:9e:9d:fa:
         bb:f7:98:5a:1c:0e:eb:f5:78:ea:4e:12:39:79:c9:76:38:71:
         63:fd:e8:18:49:7a:e6:7d:6d:0d:0b:15:44:60:d5:12:68:a9:
         9e:70:79:e5:ec:cb:c2:f9:98:0a:4f:4e:b3:d6:21:19:08:68:
         75:cb:54:7e:31:06:c7:5d:b6:66:30:33:90:15:ff:f5:cf:06:
         b4:98:b0:51:85:19:fd:7a:de:1f:ec:de:d1:04:33:03:55:a6:
         d5:5c:ff:99:c2:f6:9e:21:fc:e9:6e:2e:e9:5f:43:25:8d:83:
         7b:28:82:60:2f:71:53:62:92:15:2d:f3:ff:bc:e3:78:f9:1d:
         87:3b:78:89:5e:13:a4:09:45:23:0a:e3:75:25:3e:07:24:c7:
         4f:97:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:40:22 2026 by rpki-client