This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          IyFSxzB1RYRIcNfbOMdJm182y1rRocfbtRpMvHABDGU=
Subject key identifier:   E1:CA:4A:59:0A:30:8A:2D:36:03:04:C1:CC:89:39:E9:48:6C:E4:67
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019BFA9BCAB49FCBECADDAD837B450338BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          13D6
Signing time:             Mon 26 Jan 2026 14:01:12 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:12 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:12 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: q4qr8LYXfW0GfHZmMv4kt4gCSIgIzrNjBMdXNoMeouk=)
                          2: BM26WSHmDXrBxfTRXw9OBN2bB5k.roa (hash: eTiUZXSOWwdAMhtFe/lHUOC73ALIZLmrUjbnWfXVaNc=)
                          3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          4: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          5: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          6: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          7: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          8: eeTRJICIDgN4JkjWbGf7_URm99g.roa (hash: mj84Q1Duee66N33HSly1ihLOIjdwFTJC4fdawSWCPqQ=)
                          9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:ca:b4:9f:cb:ec:ad:da:d8:37:b4:50:33:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Jan 26 14:01:12 2026 GMT
            Not After : Jan 27 14:01:12 2026 GMT
        Subject: CN=e1ca4a590a308a2d360304c1cc8939e9486ce467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:89:6a:09:38:22:48:25:78:7b:c2:50:6e:43:
                    ae:01:cc:52:e3:e7:0d:eb:fa:a3:23:45:81:87:f2:
                    77:38:e6:e8:de:25:d6:f3:03:c4:02:7b:be:e6:31:
                    27:29:a8:41:0f:9f:29:4f:6b:70:28:bc:3e:e0:ee:
                    fd:b0:c3:1b:6e:72:69:e6:8c:ba:70:16:ca:60:2c:
                    84:c8:a7:c5:a3:71:4d:45:4a:19:56:41:68:62:2a:
                    7d:34:ce:e4:0e:8a:d4:24:7a:3d:6d:2a:fa:0d:ee:
                    dd:2f:5d:21:7c:fd:28:bd:39:d0:22:2f:38:cd:43:
                    7e:9b:ba:a1:50:ad:d9:f0:b6:d6:2c:58:bd:10:30:
                    90:3f:9f:86:71:ab:1a:83:81:2a:55:53:2d:e9:24:
                    94:60:21:94:ee:ef:6d:ec:13:87:cb:50:04:25:a4:
                    db:22:3d:64:2a:51:f2:38:ac:b6:26:1b:cb:64:0e:
                    71:c2:8a:da:f9:3f:bb:d2:6d:48:c7:78:de:4d:46:
                    7d:6f:26:c0:2b:9a:15:13:8a:67:db:2b:2c:a9:88:
                    b6:bb:35:b7:24:45:50:3d:5c:e2:99:ed:61:b9:41:
                    30:dc:a4:fc:e1:44:12:91:9b:14:17:5b:a1:c6:f9:
                    f7:aa:ce:1a:ea:02:dc:f3:76:34:6b:9d:83:ef:9e:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:4A:59:0A:30:8A:2D:36:03:04:C1:CC:89:39:E9:48:6C:E4:67
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:99:4b:9e:90:cd:45:c7:40:d4:61:65:bf:56:74:5c:6e:d7:
         87:3a:09:3d:75:a5:9c:62:d9:c6:25:64:e3:b1:6a:51:ef:47:
         53:5f:5e:19:2b:07:af:44:b2:ae:90:0f:ee:ce:b2:9c:92:2e:
         c6:28:e6:43:35:41:e3:9f:6d:cf:d2:39:de:bf:91:7c:6f:19:
         57:29:12:e9:e3:1d:47:31:f3:28:6b:91:40:14:f9:81:5c:2e:
         47:23:fa:63:88:5e:df:6d:82:30:f6:19:d7:4a:54:fb:e1:2d:
         a2:a5:18:19:06:b9:11:03:f5:ae:94:6f:96:04:0c:dc:ca:d7:
         09:a0:0c:9d:31:0c:fa:32:81:8c:b4:67:ab:aa:16:c6:45:86:
         8e:39:6e:1c:60:ad:58:94:c2:4e:4f:0f:0e:38:f3:ca:be:0b:
         1a:f4:21:53:d0:31:1e:17:9f:ce:2e:88:e8:0f:3f:95:1c:59:
         22:ca:43:00:c5:e0:01:99:f5:e3:78:49:d7:da:e9:b7:d8:19:
         b7:46:de:61:4b:ff:7c:14:15:ea:69:a4:50:87:1f:17:dd:92:
         00:d4:fb:9b:24:ff:81:f5:e0:72:54:af:af:48:02:cf:54:ce:
         3f:c5:7f:a6:a1:03:9a:f4:7a:b3:56:11:7e:70:7b:ea:8b:4b:
         20:8f:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:39:24 2026 by rpki-client