This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          CX1/MMrjrqX3RoL7NvvrhFi1fTVfMJ1SGX9kei4CHVQ=
Subject key identifier:   1F:4D:61:ED:DB:22:2A:31:79:72:5F:AB:B0:28:4D:EC:06:96:3E:33
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019BE3DD147E58A32A91F701C19D945AA975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1801
Signing time:             Thu 22 Jan 2026 04:01:15 +0000
Manifest this update:     Thu 22 Jan 2026 04:01:15 +0000
Manifest next update:     Fri 23 Jan 2026 04:01:15 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: JajlwbChQfx062zm99IHkmSBQFD07J/scJ3oaJ9FXvo=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e3:dd:14:7e:58:a3:2a:91:f7:01:c1:9d:94:5a:a9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jan 22 04:01:15 2026 GMT
            Not After : Jan 23 04:01:15 2026 GMT
        Subject: CN=1f4d61eddb222a3179725fabb0284dec06963e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:5a:e7:0d:bb:6c:94:ff:a2:cd:d1:2d:9f:
                    fa:53:42:da:d0:63:bb:25:a2:20:43:96:41:e2:67:
                    7b:15:bf:0f:56:f4:f6:e3:18:bb:eb:5c:8b:74:82:
                    22:6b:b0:15:7b:8f:3f:53:ac:ad:8b:f5:38:25:b9:
                    11:19:26:7d:b4:07:76:f6:be:58:ec:3d:b1:56:f0:
                    95:66:ab:b6:18:81:40:8e:37:95:fd:e2:ae:7b:57:
                    ec:81:2a:22:41:b5:e6:d2:93:30:b9:18:d9:68:06:
                    6b:95:27:95:48:85:89:68:51:34:82:04:c7:5f:13:
                    47:df:61:30:66:b8:2d:97:3e:92:3f:2a:1d:b7:bd:
                    04:45:1a:4a:1d:69:11:75:ca:98:5e:33:87:bb:a5:
                    8d:f0:5a:7b:06:10:c1:73:c1:a4:83:15:c8:28:e9:
                    3c:86:25:d4:7a:94:88:89:74:26:5d:9a:4b:75:b3:
                    a9:1d:c6:91:cf:1d:7b:9d:61:6a:83:5c:5f:41:bd:
                    34:bd:78:23:a8:f1:3a:04:6c:41:58:15:74:af:4b:
                    19:db:2f:b8:f6:3e:7c:0b:2d:0d:dc:44:73:5d:f1:
                    10:f6:c7:23:bf:e0:04:4e:73:3a:77:16:15:40:e0:
                    59:a5:73:c0:5c:6e:86:f5:18:df:08:ca:9f:4c:00:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4D:61:ED:DB:22:2A:31:79:72:5F:AB:B0:28:4D:EC:06:96:3E:33
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:26:4e:d1:ac:51:a1:31:66:e3:a1:02:80:af:47:e8:89:3d:
         da:f4:40:7c:b6:cd:70:a7:fc:cc:c5:cb:6f:dd:33:fc:07:b8:
         5a:37:65:dd:91:05:14:01:d1:fd:df:d9:fd:d5:04:91:dc:b0:
         14:38:01:ff:b5:6d:3f:d3:18:15:b0:1c:b4:97:aa:fd:76:ad:
         4b:4f:cf:a6:7c:fc:83:80:0a:15:d8:ee:2b:71:e7:e7:12:81:
         6c:d5:6d:63:e4:e4:39:7f:ef:50:95:62:fb:5e:63:42:5e:b5:
         ad:fd:37:ed:0c:8b:cc:c7:ce:b1:92:12:06:e8:79:3e:fc:2a:
         01:3e:ef:89:71:85:99:7d:59:72:0d:73:24:04:2b:7c:46:19:
         31:b0:fe:68:9d:6f:14:94:3e:e2:2f:d9:e4:73:68:cc:03:c8:
         19:1d:6d:e9:ed:7c:d6:0f:7c:df:66:74:72:10:fc:aa:14:b7:
         39:03:97:14:5a:f0:27:58:ec:e5:0a:15:4b:07:d9:b2:d8:be:
         13:fb:d1:d2:c9:d5:57:76:59:95:ee:d2:f2:75:a5:da:98:f6:
         aa:59:30:11:65:82:2d:1f:e3:f1:d7:02:01:85:4c:cc:e9:f3:
         a8:37:b4:b5:62:08:81:dc:23:e9:67:74:e3:fa:e7:e7:19:48:
         9e:91:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 06:20:29 2026 by rpki-client