This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File:                     1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier:          oU8Wk7KMGFuh8lMFefNV0svo5inBQSt28F2+EuFW/Ss=
Subject key identifier:   8A:33:31:19:D9:FE:22:52:4F:51:C9:73:2B:0C:B0:9C:E6:8F:06:AE
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer:       /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial:       019C205F3524C90A2A5986582F99E8E44062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number:          161B
Signing time:             Mon 02 Feb 2026 22:00:36 +0000
Manifest this update:     Mon 02 Feb 2026 22:00:36 +0000
Manifest next update:     Tue 03 Feb 2026 22:00:36 +0000
Files and hashes:         1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: 4RbVII+oLzmueYopTfJL7JfOU9c6NW+keAW7G454iyE=)
                          2: 9e__qGyQtHSbfB8cCFuaShvSnmA.roa (hash: 3iuCXQllyeZX2xf5zOtDaRap97ynVvtPGZuAfarFsMQ=)
                          3: P8xyOq2U5UBbvhb9Fv2EvSSXyPY.roa (hash: ZN6nAyptvvcTJMcBIb6vuyb/okd9tuYrvpfl57aJd5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 21:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:20:5f:35:24:c9:0a:2a:59:86:58:2f:99:e8:e4:40:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
        Validity
            Not Before: Feb  2 22:00:36 2026 GMT
            Not After : Feb  3 22:00:36 2026 GMT
        Subject: CN=8a333119d9fe22524f51c9732b0cb09ce68f06ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:e5:7d:9a:f3:09:80:a7:72:02:be:8e:02:
                    11:2f:8a:97:ca:18:fd:f8:09:69:37:fa:2d:95:06:
                    a0:7b:e7:81:d9:d4:8e:f0:20:f8:87:f3:2f:05:c9:
                    de:11:dc:1b:a2:73:5a:dc:8a:00:5f:da:3b:82:44:
                    7a:fc:21:96:52:c6:8a:b7:02:86:86:2e:86:9f:22:
                    30:7c:a2:5a:56:7a:73:b7:48:08:67:e2:b7:c6:82:
                    6b:27:8f:c3:ef:88:23:36:c8:1d:8a:49:0e:7c:1d:
                    e5:18:87:db:70:17:59:30:96:2d:00:d3:69:67:56:
                    61:f2:b9:e6:6b:ea:d3:98:50:4a:3f:69:2d:b0:a8:
                    71:e3:2a:66:a4:c9:e5:4c:d4:43:ac:5a:df:77:f0:
                    a5:3a:2d:3a:9a:52:03:6b:16:26:db:a8:e7:ab:12:
                    41:8e:e7:a1:d1:e0:28:9b:8a:c9:33:b9:7e:9f:7e:
                    87:cd:aa:08:a0:8d:f0:5c:a5:cb:70:2f:43:3c:bc:
                    c6:a6:95:74:ef:d2:05:03:4b:f6:33:db:6a:ed:c5:
                    29:b6:da:6a:4e:74:af:78:d1:4c:07:12:1b:56:16:
                    7f:34:89:4d:08:9f:d1:23:6b:f1:85:ae:b4:b3:c7:
                    be:96:72:64:c7:66:9b:63:7f:75:2f:8c:6b:40:96:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:33:31:19:D9:FE:22:52:4F:51:C9:73:2B:0C:B0:9C:E6:8F:06:AE
            X509v3 Authority Key Identifier:
                keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:84:19:31:dc:25:53:fc:ba:13:13:13:f1:ca:63:80:76:bc:
         9e:19:3b:25:f8:4a:2f:7d:42:fc:48:07:2a:73:f5:21:1a:6f:
         9c:05:17:b8:fa:85:ad:9c:e7:63:5b:e8:16:e1:1f:77:88:f5:
         49:fb:de:85:a5:7a:a5:c5:6b:8a:a4:c8:d9:70:0a:8b:e2:5a:
         e4:29:de:53:e4:2b:1b:99:88:69:75:07:4e:b2:c5:5e:a4:ec:
         71:1f:c2:73:d9:27:e1:41:23:3a:f7:5e:3e:90:c8:65:bb:be:
         51:36:6f:32:f0:ce:aa:37:f6:44:f9:e7:be:2a:df:2f:7c:58:
         0a:a8:dc:7d:ad:9e:5f:74:9f:f5:fa:fd:a6:27:1c:ad:f3:c9:
         9a:af:35:56:ff:63:26:a9:f6:03:b0:44:cb:82:e9:ac:5a:4e:
         27:44:b5:f6:a0:a5:ad:6f:15:b7:7b:56:3f:aa:4a:bb:d5:dc:
         b0:e7:51:b9:5c:8f:85:d5:1e:22:fb:c7:ec:33:48:9f:4a:0e:
         09:d9:f2:c1:1a:b2:94:0d:55:07:c2:39:fd:a1:ef:ff:99:3d:
         ad:8b:d4:ec:dc:79:d2:dd:ce:b6:7a:b5:36:08:3d:b9:71:21:
         4f:30:45:47:34:ae:ad:16:2b:aa:47:9a:88:08:b3:06:41:a9:
         6f:67:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 02:12:21 2026 by rpki-client