This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          zLXkGck/RjnOCFOBBi+zvudXF0yHSMlEZ2IZJPHNwYc=
Subject key identifier:   7F:EC:CE:B9:40:A0:B6:E8:BC:BE:B7:03:F4:A1:1F:B2:4F:A8:63:8C
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019BFCF7DBE3CC581BA6265F32BD9704669F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          180E
Signing time:             Tue 27 Jan 2026 01:01:00 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:00 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:00 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: BAwzph1YqXoxXj4ZswojETP0GkpSBJhVjCHVWRyd6Tc=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f7:db:e3:cc:58:1b:a6:26:5f:32:bd:97:04:66:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jan 27 01:01:00 2026 GMT
            Not After : Jan 28 01:01:00 2026 GMT
        Subject: CN=7fecceb940a0b6e8bcbeb703f4a11fb24fa8638c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:fc:fc:df:43:1f:ca:db:fe:e6:6b:3f:07:
                    00:4f:80:e4:1d:1f:f3:c7:4f:fb:c8:5c:03:1d:f9:
                    92:d3:d9:e8:3c:04:e7:e8:fc:88:d1:bd:c8:0c:bd:
                    76:07:37:14:5d:ea:76:b1:e0:81:0e:90:93:5d:87:
                    fb:6e:81:ef:a5:ef:bf:e3:16:4d:cc:2a:ee:33:7c:
                    ea:7f:d1:3e:34:ea:dd:94:b3:61:76:38:87:03:99:
                    3c:c1:b8:32:45:ec:83:e1:fa:af:78:9e:63:10:93:
                    8f:fc:38:d3:c4:68:c0:ac:12:92:45:75:57:91:1d:
                    b6:72:21:ad:fd:95:c9:e9:c4:bb:fd:28:b0:26:ef:
                    2c:ec:be:39:af:bc:63:bc:9c:f3:3f:29:19:08:9f:
                    7c:a9:f0:9b:75:43:fc:27:0a:93:16:9f:19:59:2c:
                    1a:2f:a3:55:b0:77:ec:b3:f3:18:3a:46:9d:24:00:
                    4d:b2:c8:19:cf:53:b5:47:8c:c3:12:2a:60:5f:8a:
                    36:4c:69:aa:0f:d5:66:5a:f0:86:5c:dd:f7:ff:e6:
                    fb:06:d5:33:8a:64:cb:f2:f4:9d:8d:be:82:18:a1:
                    3e:8a:d4:21:d1:0a:e8:e9:7e:19:a3:06:d9:86:4f:
                    6e:82:eb:34:da:a8:9d:ee:3b:56:5b:86:c7:56:e7:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EC:CE:B9:40:A0:B6:E8:BC:BE:B7:03:F4:A1:1F:B2:4F:A8:63:8C
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:37:b7:de:d1:d2:a6:61:54:94:60:60:8f:0d:68:52:53:
         4b:35:08:c8:04:c3:50:75:20:9a:e6:78:ae:0a:b9:40:c5:f6:
         d7:95:be:bf:66:bc:66:3f:38:44:52:d6:3d:5a:2b:6b:28:1c:
         a5:3a:68:7e:18:37:94:98:43:30:49:c5:ab:9e:0a:23:1d:de:
         7d:98:c1:b4:19:64:f4:22:d8:95:ba:08:6f:87:4e:a0:17:da:
         a8:1e:10:5a:55:c5:8e:4f:a4:7b:53:d6:f8:23:4b:d3:6d:40:
         44:42:5d:aa:42:ca:d6:ff:1a:02:49:b6:62:69:0f:c0:f9:01:
         61:b2:52:d1:bb:c1:f5:ee:83:c8:46:82:36:2e:79:f9:34:a6:
         e4:21:d9:a4:7e:3b:8e:c1:6e:f6:9d:f2:be:d0:7c:9d:13:fb:
         6c:f6:25:8f:8d:dc:b7:de:e6:55:4b:90:c2:b6:4d:ee:b9:7d:
         45:17:af:4e:71:7f:dc:b8:b4:e0:25:b6:9a:d6:05:91:42:ce:
         0d:d0:9d:85:78:2e:d3:22:e2:92:fa:a9:cf:57:06:20:0c:64:
         4e:69:9f:c2:4b:13:67:69:2c:49:54:53:74:84:05:e8:0c:f0:
         ab:a2:b2:dc:53:26:34:42:ed:f7:8f:97:b0:74:fe:a9:7e:67:
         37:11:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:42:39 2026 by rpki-client