This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          TdG7OJSd73tP3942kBi4WA1lyfzuAO71xlmfUvNGIss=
Subject key identifier:   0E:74:3F:30:4C:A7:0F:8A:21:8F:57:08:E6:A9:56:6C:BF:25:9E:CC
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019BC307F9E98F3F6ED5C4E282F51ECF427C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          17F0
Signing time:             Thu 15 Jan 2026 19:00:38 +0000
Manifest this update:     Thu 15 Jan 2026 19:00:38 +0000
Manifest next update:     Fri 16 Jan 2026 19:00:38 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: IWn9PmWm0HCsBir05o/lL+bLcx4W2JEpF9FJINdJxmA=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c3:07:f9:e9:8f:3f:6e:d5:c4:e2:82:f5:1e:cf:42:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jan 15 19:00:38 2026 GMT
            Not After : Jan 16 19:00:38 2026 GMT
        Subject: CN=0e743f304ca70f8a218f5708e6a9566cbf259ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:64:ce:5e:35:e1:f5:7f:20:cb:6b:71:20:
                    39:ca:3e:e9:55:36:66:d7:00:8b:a4:f9:25:32:ac:
                    e4:e5:8a:18:56:ec:1c:f0:b9:1f:78:7a:c6:a5:87:
                    59:2c:4a:36:01:7e:59:7e:9c:a9:c5:21:4d:e3:f8:
                    fd:a6:10:4f:f2:b2:f7:89:e8:c9:b2:2e:33:df:f7:
                    ac:1f:3e:8a:cf:dd:22:4a:b5:48:eb:74:fb:8b:17:
                    97:96:da:f5:e0:84:23:1e:63:d3:50:26:a5:51:0a:
                    75:d0:64:2c:fd:7d:35:9c:66:86:c4:2c:8b:a3:57:
                    c3:fe:f7:37:a8:0b:a4:86:45:97:c3:b1:9c:34:a3:
                    04:05:fe:f7:8f:9e:7c:86:0c:17:84:e6:5c:72:f3:
                    20:90:fd:4f:98:f1:07:9e:2c:6a:2d:45:d6:40:92:
                    57:4e:56:14:fd:f7:df:7b:97:53:b9:f6:28:ec:83:
                    96:25:5d:71:90:fd:f5:c4:21:06:1d:3a:3f:7e:7c:
                    7e:06:12:63:11:b8:c9:24:0e:76:4a:3d:12:7d:14:
                    48:a0:91:55:5a:5e:b1:34:4f:3f:1f:8c:2e:e1:43:
                    c9:09:53:9b:56:1f:04:c4:1f:32:aa:06:29:19:cf:
                    a5:22:a9:90:83:c7:ec:8d:61:6b:6c:ba:31:f2:63:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:3F:30:4C:A7:0F:8A:21:8F:57:08:E6:A9:56:6C:BF:25:9E:CC
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:84:d1:18:87:1c:23:ea:6c:59:dd:ff:97:89:b7:01:27:
         77:47:8b:4f:40:f7:30:53:7f:4f:30:cd:8d:04:5c:01:81:b9:
         0c:6e:81:41:e6:d5:a0:32:8d:c7:b8:02:5d:67:0f:e2:3c:a0:
         78:db:26:33:d5:90:80:4c:5c:7e:5b:ec:98:41:6d:fe:4a:86:
         3a:62:47:e5:4c:28:5a:45:5e:63:31:88:d5:ec:22:ab:9d:f2:
         72:ba:af:bb:22:9e:d6:46:fa:b2:98:ac:f3:9e:9a:9f:1b:88:
         5d:6a:89:a7:ff:fa:62:a6:ba:fd:fd:eb:a7:65:e7:2c:11:c3:
         5b:ef:e3:18:48:c3:c0:21:7c:6b:8f:cd:21:e9:cd:ac:b4:53:
         2d:32:e3:f9:82:a6:b6:0f:6b:8d:67:cb:86:86:1b:69:90:21:
         9b:b1:79:2d:9f:00:b6:2f:89:0e:3a:68:c7:6d:07:12:9c:17:
         79:c4:7b:be:0d:74:ab:84:09:14:c7:e9:80:36:cf:82:b0:ad:
         81:df:6b:dd:82:9e:56:bc:95:dd:1d:15:e1:b3:ef:cb:ae:bc:
         51:2f:5b:ef:9b:40:52:ae:f3:c4:4c:6c:dc:58:79:b8:57:f3:
         29:4e:9b:d6:3a:fa:86:52:3a:f1:9b:71:1d:51:9d:f0:48:c6:
         fb:e5:c8:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvDB/npjz9u1cTigvUez0J8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwMTE1MTkwMDM4WhcNMjYwMTE2MTkwMDM4WjAzMTEwLwYDVQQD
EygwZTc0M2YzMDRjYTcwZjhhMjE4ZjU3MDhlNmE5NTY2Y2JmMjU5ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5hkzl414fV/IMtrcSA5yj7pVTZm
1wCLpPklMqzk5YoYVuwc8LkfeHrGpYdZLEo2AX5ZfpypxSFN4/j9phBP8rL3iejJ
si4z3/esHz6Kz90iSrVI63T7ixeXltr14IQjHmPTUCalUQp10GQs/X01nGaGxCyL
o1fD/vc3qAukhkWXw7GcNKMEBf73j558hgwXhOZccvMgkP1PmPEHnixqLUXWQJJX
TlYU/fffe5dTufYo7IOWJV1xkP31xCEGHTo/fnx+BhJjEbjJJA52Sj0SfRRIoJFV
Wl6xNE8/H4wu4UPJCVObVh8ExB8yqgYpGc+lIqmQg8fsjWFrbLox8mNBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA50PzBMpw+KIY9XCOapVmy/JZ7MMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7+E0RiH
HCPqbFnd/5eJtwEnd0eLT0D3MFN/TzDNjQRcAYG5DG6BQebVoDKNx7gCXWcP4jyg
eNsmM9WQgExcflvsmEFt/kqGOmJH5UwoWkVeYzGI1ewiq53ycrqvuyKe1kb6spis
856anxuIXWqJp//6Yqa6/f3rp2XnLBHDW+/jGEjDwCF8a4/NIenNrLRTLTLj+YKm
tg9rjWfLhoYbaZAhm7F5LZ8Ati+JDjpox20HEpwXecR7vg10q4QJFMfpgDbPgrCt
gd9r3YKeVryV3R0V4bPvy668US9b75tAUq7zxExs3Fh5uFfzKU6b1jr6hlI68Ztx
HVGd8EjG++XIsA==
-----END CERTIFICATE-----
Generated at Fri Jan 16 03:30:00 2026 by rpki-client