This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
File:                     eRP8_AYn_yGf5dZUmArUj0R6tBU.mft (raw, json)
Hash identifier:          fLUPyxhJRxDsZ71l98Au9+OgBNo9kgIq6R8+fjLeEHo=
Subject key identifier:   9F:F2:D5:41:E1:6F:B1:CB:13:D5:26:7A:E7:4F:03:F6:14:8E:91:89
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Certificate issuer:       /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial:       019B7FDE3CB9972FD3B8D72D4CCE435DD348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
Manifest number:          02F6
Signing time:             Fri 02 Jan 2026 18:00:29 +0000
Manifest this update:     Fri 02 Jan 2026 18:00:29 +0000
Manifest next update:     Sat 03 Jan 2026 18:00:29 +0000
Files and hashes:         1: eRP8_AYn_yGf5dZUmArUj0R6tBU.crl (hash: th9zXx1KUGfG7PhIzik1TfqrcWt9zCbuWPOiO43cvxc=)
                          2: i1B2LP9-yTi07tuSG2Y_-TvgMkY.roa (hash: tG0F6f4wrcDnFUJlrs5Gcl3Zx3QNvrtzohb8/JfVSZs=)
                          3: pBkk9LVfl1YeDqerByjctvBzveM.roa (hash: 82EkgbLocyrxDWGRLc2Y2vY6Tv5jWzO4gLVCaKvDFFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:de:3c:b9:97:2f:d3:b8:d7:2d:4c:ce:43:5d:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
        Validity
            Not Before: Jan  2 18:00:29 2026 GMT
            Not After : Jan  3 18:00:29 2026 GMT
        Subject: CN=9ff2d541e16fb1cb13d5267ae74f03f6148e9189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:14:0c:6c:9f:11:85:ab:08:4e:d8:d7:06:
                    65:ab:4a:0e:c4:f4:9f:12:d8:ef:e5:36:48:21:0c:
                    a7:98:36:f4:24:e8:a5:63:4a:e4:8b:da:80:8d:14:
                    c0:b2:d7:0e:29:27:c1:4a:7b:78:aa:28:1b:f4:dc:
                    a7:52:cc:a9:1c:ae:f1:d1:9a:4d:3e:89:1e:69:ed:
                    2a:e7:25:f9:f4:db:99:3a:79:85:70:36:f1:5c:4f:
                    5d:5e:49:1d:92:15:f4:c8:a2:21:4c:a4:55:8c:44:
                    08:a5:f5:e9:fa:49:0d:87:6c:42:37:21:13:29:dc:
                    32:1e:cf:d2:cd:54:af:9c:76:77:f8:a0:1d:38:0e:
                    bd:7e:6e:a4:d5:ba:57:c6:c4:d1:0b:cf:b2:92:ee:
                    e2:fb:9f:63:23:38:60:77:34:e9:31:b5:c8:b2:46:
                    11:f1:2c:45:fe:25:9e:7a:fc:40:48:b0:ae:72:17:
                    af:63:1e:b9:0e:75:3c:58:1e:b1:10:d9:85:44:82:
                    18:3b:e5:41:ca:59:10:1e:39:10:34:e0:93:d7:11:
                    1f:bd:1f:c0:82:42:e9:d1:c9:11:08:c5:bf:e0:d4:
                    92:e1:c0:b5:89:cf:2d:62:bf:5f:07:a1:fa:fd:ff:
                    6d:91:60:96:e5:f8:38:72:5e:29:14:eb:f6:5d:a5:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:D5:41:E1:6F:B1:CB:13:D5:26:7A:E7:4F:03:F6:14:8E:91:89
            X509v3 Authority Key Identifier:
                keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:59:18:ac:8c:49:b8:eb:7c:ae:db:3f:e5:68:34:a1:8c:84:
         b3:36:78:78:47:bf:2e:9d:9e:8e:0a:e4:16:51:8c:ea:ac:e3:
         b0:7f:4a:24:18:5b:e8:50:23:f8:8e:d2:da:71:62:9a:93:21:
         45:f7:45:c2:b0:52:c0:99:90:5c:6b:c1:75:d8:f0:79:97:b5:
         fc:23:9b:59:dd:89:f4:dd:45:ee:91:dd:6c:b7:5d:49:ec:84:
         9a:4a:03:1f:28:bd:2b:ed:21:ab:c1:e5:33:26:19:38:91:b8:
         fc:58:60:2a:cb:77:e7:79:b8:e4:d8:de:07:af:f0:98:17:1b:
         18:f2:57:35:ba:1c:69:18:ab:44:6f:d4:88:c5:cf:90:3a:4d:
         e4:f8:f2:f6:db:92:5a:e3:c3:cf:45:05:3b:66:58:5e:8d:c4:
         3e:bd:05:a0:c5:97:96:eb:32:e0:7e:4e:53:56:e5:ce:be:da:
         80:a4:1c:77:45:53:5b:8d:c1:42:9e:cb:9e:5b:26:c9:ff:36:
         e2:98:fe:ec:1d:3e:ff:25:98:2c:53:af:2f:1e:e5:91:14:47:
         fd:f4:d8:79:fe:f0:f7:3e:45:a8:a5:60:bd:09:d5:7a:83:7a:
         39:ff:98:54:1f:5b:28:c7:d3:bd:27:ee:3d:de:2c:ac:e4:54:
         1c:c4:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:29 2026 by rpki-client