This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
File:                     ArmAwQ1xEPkf_54OzrY52edbNeI.mft (raw, json)
Hash identifier:          SbUv+dfOtxnmGQPPOvfpL9UTH5+8z32REHKirZLjxPA=
Subject key identifier:   45:C0:18:03:EE:95:0B:58:61:2E:6F:78:FC:8E:B2:9A:70:A8:74:71
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Certificate issuer:       /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial:       019BA4C6E6A64361DDD83C988531F3E67476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
Manifest number:          12F8
Signing time:             Fri 09 Jan 2026 22:00:57 +0000
Manifest this update:     Fri 09 Jan 2026 22:00:57 +0000
Manifest next update:     Sat 10 Jan 2026 22:00:57 +0000
Files and hashes:         1: 4g_7lRDjAVMNiTiBKsoqJXwuTxg.roa (hash: 7dKVR0uk4d/gBAzlWRdP6bb5gbdbBFTJu4AI+V/kyVQ=)
                          2: ArmAwQ1xEPkf_54OzrY52edbNeI.crl (hash: GS9TonYl37wfwpDDu5G9MVpc1fwFYorbUI0kjxriolA=)
                          3: bMlXKcrpw0hAr8yOAEfamyznAm4.roa (hash: iYHtY1OHYePNt2uPM0XhPZrRDhJ0dgyEMWL61dDMqN0=)
                          4: rbqy0clmqI55jleoqbDhNl2Cihg.roa (hash: 9mmN8R4c+u54HhYaMWLkg9F/Yl2W8b7Mo8bfHqLdKTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a4:c6:e6:a6:43:61:dd:d8:3c:98:85:31:f3:e6:74:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
        Validity
            Not Before: Jan  9 22:00:57 2026 GMT
            Not After : Jan 10 22:00:57 2026 GMT
        Subject: CN=45c01803ee950b58612e6f78fc8eb29a70a87471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:4b:5f:1d:66:f3:a0:fb:86:bb:54:55:81:
                    6d:90:86:e3:85:44:b4:46:91:11:42:83:7e:4c:a2:
                    f9:2c:45:f2:02:4b:f9:c5:bb:48:5f:08:59:03:36:
                    e4:41:e8:dc:ed:84:54:d8:c4:00:e7:bc:c7:35:ea:
                    3d:95:e9:d4:96:1a:dd:60:8e:bd:14:f3:a6:03:38:
                    37:12:01:78:8c:7a:ca:bb:af:d6:8d:52:ef:49:5e:
                    4d:b1:af:db:88:04:d2:46:d7:e2:f9:97:50:3a:db:
                    54:37:f8:c8:6a:ae:96:15:10:b6:50:6f:1b:d9:e4:
                    0b:f4:0f:52:ea:10:d0:0e:f0:02:a2:d6:d7:05:ed:
                    85:85:19:4b:40:fa:57:7b:d3:a6:e9:ff:fc:07:47:
                    fc:78:f7:7c:ba:10:61:01:b3:e7:f6:1f:d2:20:1c:
                    dd:e9:a5:5a:14:08:9f:04:cb:c9:87:d8:56:47:22:
                    a0:f1:b0:30:e2:39:5b:06:a4:96:04:f9:fe:73:cb:
                    48:28:15:ab:45:4e:46:04:c5:33:ef:11:5b:5f:4c:
                    23:e3:42:af:c2:66:35:d8:6c:bf:00:52:6d:eb:ae:
                    c0:51:38:65:be:98:5b:df:5c:e3:7c:29:ef:ea:d0:
                    29:74:70:2a:25:2f:ae:79:0c:9b:ca:97:41:e9:e5:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:18:03:EE:95:0B:58:61:2E:6F:78:FC:8E:B2:9A:70:A8:74:71
            X509v3 Authority Key Identifier:
                keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:7f:87:a6:62:8c:bc:67:e9:b3:6b:d9:64:c6:3c:44:6a:
         88:04:84:20:3e:c7:df:03:f2:66:27:1b:63:3b:5d:bf:88:9e:
         f4:72:c0:e1:2f:5e:db:85:9c:9c:77:6e:7d:f1:70:09:54:24:
         ad:0a:79:80:19:2f:fe:4b:2c:1b:a2:f3:ab:8a:99:26:03:c8:
         1a:be:d6:ca:09:cb:b5:cf:76:5a:15:68:8c:b1:8f:e4:0c:25:
         ed:77:78:cd:83:90:39:eb:79:a0:3a:ea:de:a1:c6:13:f6:8f:
         5e:06:89:a2:ad:d0:de:bf:4a:fa:ba:b7:6d:12:96:d3:33:e3:
         2e:cc:af:a6:d2:a4:ba:f4:46:84:22:e4:f5:d5:f8:29:c3:75:
         0f:9c:2d:bf:dc:86:43:af:84:f5:97:84:0e:b4:35:bc:df:e7:
         67:74:9e:9f:51:33:0e:8a:2d:05:ad:14:ce:f3:cf:14:7f:f8:
         d0:46:db:c6:cf:ba:06:ff:68:6d:fe:06:e8:38:c6:6f:35:23:
         9e:63:3f:55:ea:d2:aa:5f:e2:0f:6c:8e:af:8d:37:93:7c:a0:
         35:77:c8:42:c1:74:6a:f2:1d:2c:51:aa:0f:f9:ee:a3:d9:69:
         8e:a2:d3:41:69:1e:01:76:3e:9a:6e:87:7d:30:2a:50:0d:e9:
         6c:ff:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:51:16 2026 by rpki-client