This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File:                     8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier:          FAQLSRusocJzLlVn2cdCx/oejLpWXaTnKCpS1uEJHHs=
Subject key identifier:   ED:63:E3:1A:96:F1:5B:BD:C3:D7:BA:85:88:86:39:FF:8D:B3:32:1D
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer:       /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial:       019C1C4C30024D672D53BD88FAC8BD5E5F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number:          108E
Signing time:             Mon 02 Feb 2026 03:01:20 +0000
Manifest this update:     Mon 02 Feb 2026 03:01:20 +0000
Manifest next update:     Tue 03 Feb 2026 03:01:20 +0000
Files and hashes:         1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: F26xbkiWlnH6iT76ADMX9Tkeiw5dHXswEnPGkypEEY8=)
                          2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
                          3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4c:30:02:4d:67:2d:53:bd:88:fa:c8:bd:5e:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
        Validity
            Not Before: Feb  2 03:01:20 2026 GMT
            Not After : Feb  3 03:01:20 2026 GMT
        Subject: CN=ed63e31a96f15bbdc3d7ba85888639ff8db3321d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:2b:07:12:a8:da:97:63:6b:ff:2e:0d:07:
                    8d:2d:f8:99:ce:41:08:4e:ed:6f:3b:b8:f8:45:5f:
                    b5:84:8f:17:f5:d5:f9:5b:53:b4:60:94:97:dd:63:
                    64:65:25:a9:c1:c5:19:22:b2:ea:d8:12:30:5f:9a:
                    76:9a:39:33:5d:b1:6b:9e:0c:eb:e0:96:37:2c:e8:
                    1e:9c:3d:96:f1:7c:d9:7f:8f:7e:70:f5:85:98:9f:
                    1a:2d:6a:05:1c:17:71:aa:8e:30:68:ed:21:88:14:
                    41:a6:1f:ed:53:10:3b:b4:c2:3e:06:2f:c5:f3:c0:
                    7a:ce:31:cb:bd:12:47:23:25:54:56:51:4e:c1:cb:
                    fd:76:d5:85:5e:3d:9f:1d:30:51:2d:20:e5:77:b3:
                    c1:aa:fe:87:17:7a:61:2b:58:ef:5b:dc:67:c6:8d:
                    0f:c2:08:f5:3d:df:bb:22:d8:1d:fa:20:f3:d9:c2:
                    53:04:34:0d:62:13:c1:46:df:8a:f6:1a:f6:d1:79:
                    77:19:2f:ea:6e:d8:89:dd:29:7d:27:a5:0f:06:37:
                    34:a6:67:4b:ac:57:7c:d1:f6:9f:ab:49:9f:e4:51:
                    f7:5e:a9:35:97:36:c8:06:3c:b1:f8:f4:e6:ff:fb:
                    de:47:ef:5d:01:08:db:1d:5e:f0:55:c1:18:82:a4:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:E3:1A:96:F1:5B:BD:C3:D7:BA:85:88:86:39:FF:8D:B3:32:1D
            X509v3 Authority Key Identifier:
                keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:d0:41:3a:ce:4e:91:68:d2:c2:b7:d7:d5:c0:60:65:a7:
         e2:ae:59:bb:92:c4:f9:06:73:29:38:1b:88:93:8a:93:a0:d8:
         24:f6:a5:25:f7:3b:f9:5f:24:17:2c:45:93:1b:02:74:22:59:
         a6:44:13:30:98:e0:5f:12:d3:66:ee:d8:05:56:c6:68:d3:7b:
         c6:0a:9c:f4:d8:eb:12:f4:89:2d:63:03:e0:48:c3:89:12:d1:
         8b:63:66:4f:6f:71:01:ee:f4:79:a6:22:6f:cf:d9:d1:4f:3d:
         fb:3c:52:02:e5:bc:c9:65:5d:e6:7c:91:93:c6:c1:1e:0d:1d:
         a3:b1:00:5b:05:f3:9b:04:ca:cc:03:8d:cb:5b:ac:2a:01:24:
         9e:4b:ed:1e:01:6d:01:da:61:b0:2d:91:20:b3:a5:ee:b7:d1:
         5f:32:c3:18:d9:75:33:49:89:b5:49:0d:c2:63:a4:96:c7:ae:
         98:dc:34:b1:74:75:64:2b:d1:9b:60:3a:67:a0:80:47:7f:e7:
         71:e4:2a:64:cb:8f:49:40:cf:e7:d6:aa:3d:26:44:16:d5:b2:
         fd:fa:dd:0e:ef:3c:53:66:ab:3b:d0:9b:53:4a:4d:70:7e:72:
         42:f5:89:c5:98:02:d1:5e:c2:de:57:ab:9a:c7:13:dd:a4:7a:
         19:58:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:19 2026 by rpki-client