This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          MR/B+jxooKVvleKnAN1gtuMnPxoSgKHF3Z75eUShdDo=
Subject key identifier:   B6:7C:82:A7:F4:81:0F:77:DA:3D:C3:39:77:26:83:5F:70:95:EC:24
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019BDA34F11CD77EC5101C0D51681B6F2DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          17FC
Signing time:             Tue 20 Jan 2026 07:01:01 +0000
Manifest this update:     Tue 20 Jan 2026 07:01:01 +0000
Manifest next update:     Wed 21 Jan 2026 07:01:01 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 8hEL6aV6ZiOYAXICTRUWDj+CRK4jueHQRnL9arLVLOQ=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:da:34:f1:1c:d7:7e:c5:10:1c:0d:51:68:1b:6f:2d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jan 20 07:01:01 2026 GMT
            Not After : Jan 21 07:01:01 2026 GMT
        Subject: CN=b67c82a7f4810f77da3dc3397726835f7095ec24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:4f:d6:d5:8e:17:d9:af:59:f9:2a:a1:48:
                    8f:81:ce:37:98:c1:de:d3:2d:17:51:b9:08:bb:5f:
                    5f:37:f7:9f:30:38:46:6a:3f:ed:b0:da:cd:28:21:
                    c7:cc:71:37:f8:f3:dc:3b:47:a2:a5:e7:48:f4:52:
                    d8:e5:4e:f8:87:0c:04:65:78:7e:e4:d6:59:7e:5a:
                    5b:0f:9e:3a:0b:4b:7f:1d:d4:79:f4:95:b2:d8:c8:
                    e7:8d:b9:6d:f3:c1:3a:87:e4:48:bf:29:eb:1d:00:
                    b6:d2:ff:ec:2c:d6:ee:27:68:88:fb:6c:49:f1:64:
                    14:87:99:e2:31:6a:66:c8:59:d8:1a:36:6f:b2:f8:
                    9e:e2:ff:8c:b1:0b:29:85:ae:dd:70:0d:38:0e:5f:
                    63:86:98:78:b5:ba:1b:c1:30:e2:96:31:15:7c:c9:
                    4c:8b:82:be:77:a6:d2:a2:5d:19:bb:e4:3d:c3:d2:
                    4a:1a:d0:79:49:3c:da:6e:a5:fe:5e:23:ba:a4:44:
                    fd:44:d0:09:b0:be:81:be:99:3b:98:20:c0:f0:38:
                    7f:fb:67:ea:c9:72:9f:94:03:65:51:59:1c:4f:59:
                    1d:48:3b:90:43:07:fa:17:70:44:09:ee:f0:9b:d0:
                    af:48:c5:29:ae:90:11:94:93:92:a5:22:22:84:2e:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:82:A7:F4:81:0F:77:DA:3D:C3:39:77:26:83:5F:70:95:EC:24
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f0:a3:72:d1:81:44:17:55:56:ff:5e:c8:48:24:84:49:c7:
         d0:00:b1:48:d3:d3:f0:9e:2b:fd:9c:97:c7:39:f8:e1:4d:b0:
         c4:11:b9:9e:19:40:63:dc:d4:fb:72:ac:4d:f0:2d:51:88:af:
         8c:06:da:d2:a8:85:b4:90:7d:4e:a9:45:5c:11:c7:66:3e:2e:
         b9:c1:b1:8e:69:f2:75:12:08:eb:05:84:20:16:a0:d8:14:e6:
         64:17:f5:a1:1a:e2:94:78:3b:c9:81:bb:98:b6:85:76:4d:3c:
         10:15:12:04:99:e1:07:45:1e:b3:26:a8:ee:c9:04:a0:c5:68:
         1f:8f:1a:c1:99:51:0e:e4:77:9d:60:7b:74:94:2b:66:56:36:
         25:2e:cc:22:b1:cb:a0:82:17:4f:6c:3c:c3:66:bd:b6:70:ef:
         5b:92:17:1d:94:02:5a:6e:26:ef:09:ef:d4:56:c3:d2:4f:da:
         eb:ce:b6:49:79:c7:bc:9f:09:a5:b7:fc:7e:aa:cb:9a:b2:41:
         c6:e1:03:c2:1a:75:4f:3a:bc:af:48:96:83:a4:05:f5:54:05:
         45:44:91:d9:53:2c:dc:ab:54:fa:9c:03:57:b4:df:2a:c3:f6:
         93:74:22:b6:d0:50:42:aa:30:d7:3b:3d:10:88:02:f7:39:89:
         a7:a1:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 16:50:09 2026 by rpki-client