This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          tRixX+A7DUy5YRGtScvzAWCuK710jCqIOL+pvElNbAI=
Subject key identifier:   08:80:68:8B:08:4A:C2:79:A3:8C:A0:1F:3F:1C:77:14:61:23:93:2C
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       019BFE0A140DEF2060B880A987F2AF67CFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          116E
Signing time:             Tue 27 Jan 2026 06:00:31 +0000
Manifest this update:     Tue 27 Jan 2026 06:00:31 +0000
Manifest next update:     Wed 28 Jan 2026 06:00:31 +0000
Files and hashes:         1: 1zy72V2wriaSR0HKRS6NKVr6ReM.roa (hash: 2UDDjiSozqkjCpyeYUYKzzS2k3igXU0suU9TIqRl8BM=)
                          2: 2A0tOUxx1jRAdQbbBEQYCyO6q2A.roa (hash: /b2wneTZen/fW0tEw9EyQoVhwLVdm5eunsXsaX5W9vg=)
                          3: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: 5sqsPQ3zXrE5N8OKdRLPlOGFeNDy62iJBHtqgVvovjE=)
                          4: wC7Btg2M06QDjiihU8mKSzWp5h8.roa (hash: kuu4Nks2Rjh8eFlTc82CmwEI6yyNJcnC/Z9zLfsyT1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:14:0d:ef:20:60:b8:80:a9:87:f2:af:67:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Jan 27 06:00:31 2026 GMT
            Not After : Jan 28 06:00:31 2026 GMT
        Subject: CN=0880688b084ac279a38ca01f3f1c77146123932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:c0:ba:d9:ae:aa:11:bb:5d:52:d6:e5:77:
                    47:3f:e7:49:d0:a3:9f:c2:aa:89:21:c7:ee:b3:af:
                    70:16:30:00:62:83:53:a3:ad:a3:c2:1b:67:e5:e1:
                    c9:86:a2:f3:e0:8a:78:a8:fd:14:c6:c2:3e:4d:d7:
                    5f:bd:70:6e:6c:73:e3:1b:d9:cd:dc:26:de:76:18:
                    a3:11:bd:42:43:66:1a:07:8a:9b:ca:d6:ff:62:07:
                    15:83:2d:e2:8b:d3:48:42:80:1a:c9:c4:eb:cd:36:
                    74:7e:29:07:fd:3f:3e:f2:14:ae:37:53:40:fa:fd:
                    f9:ef:0e:d6:30:7a:b3:36:ba:0e:74:66:84:c3:c2:
                    a2:29:c4:20:cc:b9:2f:2c:9d:0f:c6:6b:cc:34:17:
                    4a:71:35:33:51:3e:ed:24:bd:ba:d8:49:e8:86:e3:
                    9a:a1:38:92:ba:a7:92:70:df:2a:8b:fd:9c:84:bb:
                    be:ff:d6:6b:a2:68:9c:7b:f7:4b:f6:dc:d2:39:d2:
                    c5:0f:d5:d5:5c:8c:5b:d9:22:8a:88:08:6f:fe:be:
                    59:e3:fa:a5:12:9b:c9:7c:29:f6:16:c6:65:fe:6b:
                    3f:92:9c:10:23:e8:2c:1c:23:12:5b:0e:cd:d9:f1:
                    d4:5a:7b:10:63:65:2f:31:65:ed:c2:aa:8e:c6:f8:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:80:68:8B:08:4A:C2:79:A3:8C:A0:1F:3F:1C:77:14:61:23:93:2C
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:60:b8:df:04:a9:58:39:13:6b:f1:6b:bf:c9:76:fe:98:
         34:fe:d1:b4:0c:0d:6e:6f:fd:85:0d:8b:59:1a:7b:b4:6d:73:
         f9:25:7c:55:26:4a:fb:93:73:7a:b5:02:ad:e9:5a:2d:90:42:
         41:f0:90:e1:2a:cb:3d:1a:8c:18:b2:f7:9e:8e:ef:2a:bb:8a:
         e0:90:26:ec:a6:82:fb:38:95:55:2b:1a:89:ec:e8:29:e9:e5:
         c7:ed:70:3b:f1:7a:f2:a2:0c:c8:21:c9:d6:9a:31:94:5d:ae:
         c2:fe:1a:9e:88:66:c8:6e:f0:30:aa:4f:a7:33:77:01:c5:bf:
         5e:c7:63:e3:85:26:9a:b1:a7:54:6e:ca:18:c5:18:6e:74:5a:
         ef:78:aa:8f:e0:bc:b3:11:ad:0d:a7:b8:69:f8:e6:0d:7b:a2:
         63:5d:83:99:8c:37:01:b5:5c:fc:f8:d1:ef:61:66:62:fa:89:
         05:30:20:aa:fd:4a:fc:04:0d:12:61:cf:9c:14:ca:30:bc:1c:
         a9:2f:fb:53:5f:39:06:eb:09:46:3f:20:09:e6:ea:14:fe:58:
         2d:a6:39:e1:ef:3b:a7:b5:5b:dd:9d:d8:13:c3:f6:ab:4f:72:
         e2:34:bd:fe:7b:c4:e9:fb:10:33:56:94:9e:a6:60:19:55:31:
         99:1a:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:16:01 2026 by rpki-client