This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          NhplrGwrhIYTOYBc9kfouJB0DmZltNGMcXEWOt8/i1o=
Subject key identifier:   CD:49:53:B0:AB:CF:F3:A2:DB:92:2B:0D:5A:E7:86:23:39:A7:CB:06
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019BE1EEE7DE54CC0C2C09203E4D2FB33684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1800
Signing time:             Wed 21 Jan 2026 19:01:29 +0000
Manifest this update:     Wed 21 Jan 2026 19:01:29 +0000
Manifest next update:     Thu 22 Jan 2026 19:01:29 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: PxhHwglDoSFfEEmIFGT5689q3XM7r4V1JIFvDBxn7pU=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 19:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:ee:e7:de:54:cc:0c:2c:09:20:3e:4d:2f:b3:36:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jan 21 19:01:29 2026 GMT
            Not After : Jan 22 19:01:29 2026 GMT
        Subject: CN=cd4953b0abcff3a2db922b0d5ae7862339a7cb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:ae:b2:a2:f9:df:be:29:f8:37:22:3f:ef:
                    00:3d:47:2a:69:99:50:e2:bd:2c:7a:08:ab:cc:68:
                    2b:a0:5e:6d:f9:65:69:8e:43:bb:dd:37:07:2d:fa:
                    5b:79:90:5f:ea:7e:fb:ce:09:f7:de:82:fc:5c:ba:
                    95:58:40:fc:9e:40:ba:60:7b:7e:d4:3c:10:bc:d1:
                    a9:83:6e:45:c0:da:53:93:e5:40:da:44:a4:a0:9d:
                    ef:16:88:d7:12:eb:cc:8d:5c:13:73:6c:0e:e3:9b:
                    0c:2a:d1:7d:de:9e:e0:9c:ab:e4:ce:33:ff:a5:b6:
                    b4:5d:39:f1:50:3b:7d:6e:82:0b:1d:d0:e3:d9:0a:
                    2d:55:c1:e9:88:2d:30:8c:75:b7:b7:7e:ea:14:86:
                    29:37:54:5a:d6:05:3a:60:41:8f:f5:6d:63:74:a2:
                    3a:6e:09:cb:6e:db:a4:e9:d5:a1:fa:b5:06:21:7f:
                    e3:91:0b:b8:9b:e9:1b:52:67:36:7a:4e:dc:ef:47:
                    ba:17:f9:66:28:2a:c3:04:9e:02:00:0c:20:b4:ca:
                    ac:f4:bc:3e:3b:c8:09:b5:85:87:2c:61:d4:0c:90:
                    b4:3a:3a:05:ef:ea:13:d2:32:0d:72:c4:d9:55:30:
                    e0:30:9c:69:9f:2b:bc:72:86:49:8f:95:94:b8:20:
                    5a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:49:53:B0:AB:CF:F3:A2:DB:92:2B:0D:5A:E7:86:23:39:A7:CB:06
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:66:0a:24:88:dd:38:32:31:d2:e1:80:f7:b0:82:bd:c9:85:
         25:3f:f5:c4:d7:bf:1f:1d:64:7d:3f:a7:a2:e6:1e:4b:83:70:
         27:53:23:bf:9c:1c:b4:f4:c9:36:15:43:f7:f2:df:30:19:d8:
         c9:6e:c2:1f:5a:f5:e2:95:b1:45:8e:eb:a6:3c:48:7d:fb:f9:
         81:96:b0:d3:40:f1:4c:f7:02:7f:6e:4f:e1:51:84:d2:d8:85:
         c8:1d:61:f2:dd:3a:00:ec:20:35:77:3e:3e:5a:2f:cd:a6:0e:
         c7:08:20:0c:87:70:a2:5a:5b:4c:1c:ca:4d:da:c0:17:c9:65:
         af:87:66:5e:6b:a2:89:75:93:08:52:68:af:59:57:60:eb:41:
         33:28:ee:1a:cc:c3:65:09:ee:ee:31:f2:90:e1:91:28:8d:ea:
         74:11:b5:f2:2d:02:f1:b7:38:04:7a:86:76:d4:0a:dd:57:73:
         7b:87:31:ff:85:0e:34:33:0c:e8:58:61:c1:4c:aa:f6:e5:60:
         14:d7:47:fd:15:db:48:b8:fa:f4:ba:5b:da:66:3a:0c:bd:69:
         78:fc:ef:84:97:8e:71:0f:c1:b6:55:20:dd:06:2c:5e:f5:ea:
         e4:81:e7:93:87:5d:e5:3e:7d:9d:e0:ee:99:dc:6b:50:f4:7e:
         a1:9b:7e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvh7ufeVMwMLAkgPk0vszaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwMTIxMTkwMTI5WhcNMjYwMTIyMTkwMTI5WjAzMTEwLwYDVQQD
EyhjZDQ5NTNiMGFiY2ZmM2EyZGI5MjJiMGQ1YWU3ODYyMzM5YTdjYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxeusqL5374p+DciP+8APUcqaZlQ
4r0segirzGgroF5t+WVpjkO73TcHLfpbeZBf6n77zgn33oL8XLqVWED8nkC6YHt+
1DwQvNGpg25FwNpTk+VA2kSkoJ3vFojXEuvMjVwTc2wO45sMKtF93p7gnKvkzjP/
pba0XTnxUDt9boILHdDj2QotVcHpiC0wjHW3t37qFIYpN1Ra1gU6YEGP9W1jdKI6
bgnLbtuk6dWh+rUGIX/jkQu4m+kbUmc2ek7c70e6F/lmKCrDBJ4CAAwgtMqs9Lw+
O8gJtYWHLGHUDJC0OjoF7+oT0jINcsTZVTDgMJxpnyu8coZJj5WUuCBazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1JU7Crz/Oi25IrDVrnhiM5p8sGMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGYKJIjd
ODIx0uGA97CCvcmFJT/1xNe/Hx1kfT+nouYeS4NwJ1Mjv5wctPTJNhVD9/LfMBnY
yW7CH1r14pWxRY7rpjxIffv5gZaw00DxTPcCf25P4VGE0tiFyB1h8t06AOwgNXc+
PlovzaYOxwggDIdwolpbTBzKTdrAF8llr4dmXmuiiXWTCFJor1lXYOtBMyjuGszD
ZQnu7jHykOGRKI3qdBG18i0C8bc4BHqGdtQK3Vdze4cx/4UONDMM6FhhwUyq9uVg
FNdH/RXbSLj69Lpb2mY6DL1pePzvhJeOcQ/BtlUg3QYsXvXq5IHnk4dd5T59neDu
mdxrUPR+oZt+qg==
-----END CERTIFICATE-----
Generated at Thu Jan 22 04:19:17 2026 by rpki-client