This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File:                     8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier:          fvfWLlWnWwgsNQA9cXZImlbzMDLRATZ4BbtL6QD9nqw=
Subject key identifier:   2D:A3:2E:ED:D3:6B:1D:46:26:51:7C:9E:BC:5E:9C:92:15:FF:DD:CB
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer:       /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial:       019B7DF01D79D2B0080080801F3609D8FFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number:          103C
Signing time:             Fri 02 Jan 2026 09:00:46 +0000
Manifest this update:     Fri 02 Jan 2026 09:00:46 +0000
Manifest next update:     Sat 03 Jan 2026 09:00:46 +0000
Files and hashes:         1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 6kGBW4LIoJY0tUKTPykxm2wGyZU0HzzpAtqDAnwNJVU=)
                          2: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (hash: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k=)
                          3: Q8cZP7Mw_-w6-Le7I_oZBELBZgo.roa (hash: JsbdMsgNcpZtlFUpehZGZOmDsBEuV8h9IP/Mq8FrzkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:f0:1d:79:d2:b0:08:00:80:80:1f:36:09:d8:ff:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
        Validity
            Not Before: Jan  2 09:00:46 2026 GMT
            Not After : Jan  3 09:00:46 2026 GMT
        Subject: CN=2da32eedd36b1d4626517c9ebc5e9c9215ffddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7f:19:0f:af:a5:e9:28:f5:1d:36:de:9e:2b:
                    28:70:9e:e0:2a:0b:9b:7a:84:89:81:08:23:69:2b:
                    a2:61:f1:b8:ce:f5:ae:3d:18:9f:0f:05:84:6d:65:
                    ce:4a:a1:ac:04:7f:95:c6:29:69:17:0d:d0:53:b0:
                    0c:1c:45:59:70:88:28:7b:ce:0a:09:36:9b:bb:6c:
                    05:4a:db:d6:46:a0:ae:41:fa:3f:19:b1:05:c8:fb:
                    2f:af:c7:b1:ab:45:b3:69:a3:a8:31:29:4e:34:c3:
                    85:8f:e6:a9:b5:7d:03:13:f7:08:c2:1d:d8:38:b3:
                    de:11:d9:ae:dd:5a:b0:6c:57:3d:37:7a:aa:2b:4b:
                    7f:a5:90:bd:49:fe:b4:16:1e:49:8a:69:72:a1:51:
                    4e:b4:e8:a9:b9:dd:02:33:e5:91:5a:ce:ef:ec:75:
                    e3:3b:55:7c:84:97:87:11:4d:e6:23:09:6b:d4:5f:
                    2a:ca:01:d6:04:0d:f0:74:16:e8:4d:d5:9c:66:c1:
                    1f:24:13:70:c3:54:16:50:f5:4e:1e:23:25:d9:7b:
                    d5:33:84:04:c6:d4:95:ea:09:10:cd:96:ea:bc:c8:
                    14:82:b1:34:2c:9b:07:da:55:81:57:8e:68:74:ae:
                    17:e5:03:11:b4:eb:f7:eb:80:43:90:db:20:37:06:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:2E:ED:D3:6B:1D:46:26:51:7C:9E:BC:5E:9C:92:15:FF:DD:CB
            X509v3 Authority Key Identifier:
                keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:0a:46:da:ff:3e:c9:16:79:11:55:da:c0:42:9e:55:fe:
         f4:9b:90:9a:46:8d:a0:0d:69:30:98:33:5c:48:bd:42:58:e3:
         9a:1e:3a:39:b5:b3:f8:46:4a:6a:4a:fc:2c:4f:d3:6d:29:9e:
         cd:66:58:00:1c:31:f3:da:ea:85:82:4c:80:35:ec:20:83:50:
         bd:bd:39:5e:00:0c:73:fa:72:cf:f9:cc:97:b4:9d:10:78:b2:
         57:df:b0:4f:2e:26:bb:db:64:91:03:6d:b0:0b:36:2d:d1:c7:
         d4:61:7d:7c:bc:ff:a2:4f:4a:93:1c:88:98:d9:85:6f:08:58:
         8c:d9:61:07:c5:cb:ef:ea:cb:a4:ff:4e:d9:55:80:0d:98:1f:
         d3:e8:23:6a:27:f3:86:9d:84:33:a3:7e:51:ba:b8:b7:14:f8:
         37:a8:d6:0b:59:8c:41:b9:4c:99:13:7d:5f:81:0f:17:23:ae:
         6b:89:96:17:4a:2a:6a:22:37:d3:3a:34:40:fa:ee:23:4a:74:
         f5:2b:3d:32:f0:32:3e:44:ac:3d:74:ea:b4:f7:50:31:36:41:
         a8:ca:06:e6:37:48:7f:94:c0:e9:73:1f:b5:77:23:42:67:8e:
         f0:92:58:5b:93:8b:22:6d:69:3d:05:09:3b:e0:d3:8a:92:a0:
         eb:ca:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:28:55 2026 by rpki-client