This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
File:                     8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json)
Hash identifier:          XaM0lpy6eKbIDS/bw+EIsBHlkaFwhwbOjgn4+AMAYbE=
Subject key identifier:   B9:08:7B:01:E5:97:30:2D:A8:A4:79:22:B3:50:D0:2C:60:5E:72:D1
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Certificate issuer:       /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial:       019C258645EE2AF28B951414A8BD7E8326AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
Manifest number:          03E9
Signing time:             Tue 03 Feb 2026 22:01:22 +0000
Manifest this update:     Tue 03 Feb 2026 22:01:22 +0000
Manifest next update:     Wed 04 Feb 2026 22:01:22 +0000
Files and hashes:         1: 8MT0-FvjucBAJ5_4zNawUwPIbio.roa (hash: j8ctkVwf35gx11i815V7djergO6Xkd5DqwORKQjPYn4=)
                          2: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: KWUom2muc3lVmVkhr5Yvmy5p9xorz6mjbdWXaaP6HDU=)
                          3: IP5NjwFtLWkr-T6cXqTaAlNK3Mo.roa (hash: jSZDS2EJyCz5Bf4EPrnkXGN+FEAvnmOTf2xL+Wmg3zY=)
                          4: WL0tgHjXPonIgpA9aEym0R7QJaA.roa (hash: 9pBr0W2ydRSI4qFK7wS98rz+8aVtBJo8NKM5L8oOaEk=)
                          5: ugj21aD88s1RRp9wztrYsSAwiUE.roa (hash: WrSZz+UwR+wMXec4SQ0VJG4/1M5x7d6VE4FHoit+kYI=)
                          6: wgOHPQR9tp0LbGH9PUDLI1hKOuI.roa (hash: XEU3YLncsndIejQxm0E7Frwok/sigMI7wKaH9HopGIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:86:45:ee:2a:f2:8b:95:14:14:a8:bd:7e:83:26:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
        Validity
            Not Before: Feb  3 22:01:22 2026 GMT
            Not After : Feb  4 22:01:22 2026 GMT
        Subject: CN=b9087b01e597302da8a47922b350d02c605e72d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:5a:19:4f:a1:22:a9:d0:e6:d3:cd:b6:39:
                    a9:1d:2b:67:79:f6:0e:bc:ae:02:3c:18:f7:d4:c5:
                    22:50:1f:61:8c:1b:de:4d:52:f5:cf:e1:af:03:91:
                    84:cd:8a:86:a0:a1:0a:14:c5:61:24:85:75:2d:27:
                    ce:a0:43:7e:65:08:76:04:8f:a4:54:ea:45:e0:2d:
                    3e:12:aa:dc:6f:45:bb:b6:eb:fb:7f:47:85:bd:f6:
                    a4:c8:df:8c:51:5e:77:c9:60:e5:76:3b:89:ae:f4:
                    22:08:bd:41:c1:52:12:c4:de:36:f2:92:dc:d4:3a:
                    7e:c5:84:19:b5:69:18:e0:00:81:26:7a:91:24:d1:
                    f3:6d:97:89:e1:0c:90:ef:e3:ae:88:37:ec:e3:16:
                    83:60:ed:ac:67:83:de:12:54:26:18:ab:6c:3f:dc:
                    e4:e0:e3:e9:99:50:be:d4:4a:37:a5:2c:7b:6a:1a:
                    3c:cb:4a:86:eb:7b:4e:19:bc:b5:c0:15:fc:15:72:
                    67:44:94:d8:0e:e4:5b:c4:8d:4c:0a:90:bb:75:e5:
                    10:bc:75:54:7f:2e:05:78:d8:9e:fd:3c:d4:56:6b:
                    c6:68:ec:08:90:ec:45:43:0a:8b:48:de:5d:38:c8:
                    29:2b:ee:12:0b:0b:9b:b4:24:eb:47:72:0b:b8:70:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:08:7B:01:E5:97:30:2D:A8:A4:79:22:B3:50:D0:2C:60:5E:72:D1
            X509v3 Authority Key Identifier:
                keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:77:0e:2b:d3:64:58:a6:95:fd:f7:25:d1:f1:a5:91:56:
         d9:41:d7:14:b5:f9:37:c3:1e:42:79:75:e6:f9:fc:f6:0a:f2:
         35:17:05:16:45:1a:0c:62:04:42:99:57:b7:c1:2a:a3:ef:66:
         61:16:0b:a2:ae:4e:73:88:58:c5:37:86:7d:00:67:a7:5a:13:
         bf:9c:d9:16:1c:e6:f9:a1:1f:08:b9:03:a9:46:dc:e7:0d:d8:
         5e:cb:b8:71:e2:07:50:84:20:3d:e0:87:d3:2e:18:93:0d:84:
         7b:f6:17:a0:93:87:58:a2:ef:0b:fa:76:b0:4e:23:f4:bc:03:
         d7:75:e8:47:7c:60:07:b9:a9:b8:1e:c9:c6:d1:d1:ad:3d:21:
         47:0e:20:4b:6d:d1:a7:20:01:a9:22:ef:a9:92:e1:64:c1:61:
         18:80:ec:a5:9d:fb:bb:83:32:fa:e4:64:59:1c:cb:2c:06:58:
         bd:b7:ca:7a:f7:e2:4b:01:4a:b2:88:c5:04:90:16:4b:f4:53:
         82:a6:1d:04:9f:3c:5c:6a:0e:67:db:3f:67:a5:65:c8:f0:c7:
         3e:95:a5:18:4c:c8:60:82:e3:15:97:18:e2:2b:f6:d5:ca:d7:
         4b:a6:66:bb:ce:be:d5:7c:8e:f0:6c:80:e0:7a:16:77:fb:44:
         5a:10:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 05:57:12 2026 by rpki-client