This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          vHZS0ydG3AR5LSk6Ug2aYabyjbYtu5Ur5hGscdfU5I8=
Subject key identifier:   BA:EB:90:C7:E3:CB:D4:EB:C1:54:77:E9:82:C9:3B:F1:8E:7F:09:DD
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       019C213B441CD6C649C498EA7F0EC9AAF99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          1473
Signing time:             Tue 03 Feb 2026 02:00:57 +0000
Manifest this update:     Tue 03 Feb 2026 02:00:57 +0000
Manifest next update:     Wed 04 Feb 2026 02:00:57 +0000
Files and hashes:         1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: PmRRY3KifsRhjnfrBiS++6Iq23seUGNotM4/V0KPAOM=)
                          2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:21:3b:44:1c:d6:c6:49:c4:98:ea:7f:0e:c9:aa:f9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: Feb  3 02:00:57 2026 GMT
            Not After : Feb  4 02:00:57 2026 GMT
        Subject: CN=baeb90c7e3cbd4ebc15477e982c93bf18e7f09dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:81:cb:d1:fb:84:ef:93:7d:16:3c:d4:fa:
                    49:89:8d:49:92:a2:c0:ed:34:f3:e8:ab:7f:3b:20:
                    5e:3d:93:f5:95:6b:11:57:3a:14:ff:fc:8d:06:ca:
                    77:0d:f0:b6:4f:56:c9:87:2f:e7:52:1b:5a:2b:58:
                    cd:42:67:70:49:c6:b3:5a:53:45:4b:18:17:60:78:
                    62:81:5d:fb:34:0e:f5:33:fe:54:28:ee:77:63:be:
                    45:ce:b2:83:4f:ae:be:13:6f:a8:91:5e:21:0c:e6:
                    32:19:92:f9:4b:5d:7b:2e:16:29:56:96:d6:54:10:
                    a3:b1:b6:82:14:d1:df:ec:64:ed:c6:e7:9b:b2:d2:
                    73:c7:4a:85:8c:36:77:e1:ca:e9:ac:a2:f8:08:bd:
                    35:4c:6d:0f:35:e5:76:fb:18:ae:c9:24:b1:29:3a:
                    50:40:ea:1d:d9:fe:02:e0:12:14:8e:84:8f:85:7d:
                    07:fc:1d:5a:43:5a:be:e9:57:53:cf:8c:80:13:e9:
                    21:f3:bf:68:55:e3:58:fe:1d:ae:d6:92:ff:2a:18:
                    30:7b:0f:c2:5f:0d:46:26:4f:b2:49:07:84:86:74:
                    27:c6:31:ec:8c:82:38:f8:c2:48:c2:f0:26:19:be:
                    c3:5b:86:8a:c3:e2:cd:10:f2:28:0b:78:ed:72:35:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:90:C7:E3:CB:D4:EB:C1:54:77:E9:82:C9:3B:F1:8E:7F:09:DD
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f3:71:df:46:a2:e9:a0:28:bc:3a:f5:e1:6a:dd:3b:4b:8c:
         19:d7:2d:07:bd:a5:e8:90:41:c1:d2:dd:8d:11:4d:a5:90:29:
         a4:4f:23:05:2a:76:d3:35:a6:1a:de:e9:09:24:5d:24:7b:ea:
         bf:05:34:9b:31:25:53:5a:20:1d:2c:2d:84:18:bc:b3:5d:e9:
         a1:5c:17:2c:a8:b5:16:3d:71:93:ce:bc:76:ee:56:06:d0:cf:
         91:35:3f:34:63:54:5d:ac:86:c1:67:b2:5c:03:fd:0f:4b:8d:
         f5:3e:9d:1f:2f:58:f7:17:e4:be:9a:c6:3e:62:93:ed:05:76:
         d6:c6:64:3b:b2:d3:c2:72:e1:1b:4a:eb:53:1b:fc:d7:a8:ce:
         4c:99:de:6b:fd:e0:f0:de:ac:f7:5a:fe:fc:d3:e2:98:cf:e8:
         44:32:8e:e3:9a:b1:3e:44:c2:00:d1:d1:b2:82:2d:7d:70:c3:
         46:04:e7:f6:5a:c0:b9:e1:5b:10:60:7a:70:17:7b:64:1a:8f:
         19:3f:05:8c:70:70:07:81:e1:56:a8:28:ef:91:a6:ca:27:bb:
         b1:80:9c:f9:68:78:55:73:be:79:e4:e9:e8:55:9b:13:4c:34:
         3d:8b:df:c4:1c:a8:33:9e:73:71:53:a6:34:9a:62:13:8c:ba:
         7b:9a:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 08:16:22 2026 by rpki-client