This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
File:                     uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json)
Hash identifier:          Lg8hXGA4NkQN/RHd/z529ZBT/Oavvt6sjBXeIBR63/E=
Subject key identifier:   88:98:86:EF:D5:EE:80:F2:A3:7F:F0:E7:92:C2:3A:AF:3B:A4:71:9E
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Certificate issuer:       /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial:       019BF318C866E7A786D053712265C9DD929F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
Manifest number:          1064
Signing time:             Sun 25 Jan 2026 03:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:46 +0000
Files and hashes:         1: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (hash: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no=)
                          2: DiGtvUzmZAjH_XRU7fEE9dtFAko.roa (hash: VN3eL01e4plHrv0UjJUEXbnazkjQUDK4S/f50F+hnyA=)
                          3: MXOis4gKQU6T3fl9u9emfKn1I0g.roa (hash: J1k882H86FIPdqzqztH19RHHRsts9XhSK+QsDtFdrlA=)
                          4: PP9oA_E391BIuSGTuqgWVwQAMqM.roa (hash: 9n4A9VESg3N8stGG4GCkTD8TQyZX/jvYGa+MvIUmNaE=)
                          5: PxYDGFFeIMnR3R8ylA8SbuIB6xI.roa (hash: B8FamIOBKJ45rwoZ7RLg7M2fC1zz0YHW8ls9Ia37tyM=)
                          6: YbeGTIIokJMHl8QEnhR1xFC_ito.roa (hash: HgRFonCxtpdWKTM6rOV0crS0CJsk7MECWgrxxnYsFJU=)
                          7: jLSzdmpt6mZmgqvhH7NETi0wAYA.roa (hash: txBTBvHgOk8b8SenBZIk3YFAcUyYo3TaX05F0Mt13EA=)
                          8: mLqJvMc3MqTE99dcKgalJ1ySRfQ.roa (hash: a5WjFx/pe+eZo9TTWVHbhlSmGqGor+/PHYnJbWo/eU8=)
                          9: myEKyS0ln_CS39qAu-1GdjmG9R0.roa (hash: aW1PpyHp9Pdui/hT7n4EmATj8R60gaAAQo+Y1BQJBTw=)
                          10: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: ietgL/ykiLmtLHqKX/oy1iDVvmBLq4pTdqiwykLheGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:c8:66:e7:a7:86:d0:53:71:22:65:c9:dd:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
        Validity
            Not Before: Jan 25 03:00:46 2026 GMT
            Not After : Jan 26 03:00:46 2026 GMT
        Subject: CN=889886efd5ee80f2a37ff0e792c23aaf3ba4719e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:9a:d4:b2:5a:73:a7:4d:74:69:b1:b1:4b:
                    d2:68:ac:41:7f:f3:e9:35:04:70:0c:2f:cc:81:42:
                    3a:7a:86:47:15:71:42:f6:6f:12:75:13:01:00:7d:
                    3a:25:e1:93:17:58:cb:30:5d:15:55:aa:48:88:f2:
                    d6:7d:e1:b7:18:46:e9:83:92:57:d0:b9:78:dd:20:
                    3c:42:b0:2e:db:f5:01:83:ed:df:44:1f:0c:c6:fd:
                    89:1d:f5:24:2a:8c:f0:bb:9d:26:71:a4:7b:fe:b4:
                    c3:94:1f:71:9c:35:3c:9e:d8:12:86:7f:7e:5a:9d:
                    8d:be:d4:46:c2:81:34:f4:a6:c6:a2:ee:85:b3:49:
                    88:ef:f5:7f:b1:4b:31:5c:43:93:10:ec:ae:9c:64:
                    2d:d8:4e:d5:00:bf:f4:dd:42:2a:a9:ec:03:99:cd:
                    0a:98:3d:75:c9:bd:b5:d0:7c:93:96:46:d7:e2:6b:
                    f4:e2:96:04:d1:db:87:6f:77:a6:8d:b5:03:2a:69:
                    61:1f:aa:49:13:5e:41:eb:87:08:88:f4:88:37:e8:
                    7e:ed:fc:2c:9d:83:74:85:a0:34:83:40:79:05:c1:
                    e6:81:6a:d4:2a:a6:bb:30:fe:e7:12:d2:30:e9:23:
                    82:81:0f:38:6a:da:f9:d0:c9:4a:3c:10:cc:78:3d:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:86:EF:D5:EE:80:F2:A3:7F:F0:E7:92:C2:3A:AF:3B:A4:71:9E
            X509v3 Authority Key Identifier:
                keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:93:6e:4d:f2:81:0a:65:ab:45:2f:44:7d:c8:77:ad:79:
         36:6b:d8:3d:d2:7a:c8:16:e4:88:ed:b5:33:46:4c:b9:9c:2e:
         a2:21:88:a4:a7:fd:6c:a4:8f:96:80:e9:a9:31:94:41:7d:e5:
         39:d9:ae:85:72:27:b8:e4:7c:1b:ee:d7:83:e9:a1:25:8f:c5:
         23:ad:bb:f7:e1:e8:f1:af:b4:fc:4f:68:2c:e0:1f:bb:d7:46:
         b1:19:08:14:c6:e6:9a:aa:11:2b:5c:07:fe:e2:47:ca:7c:17:
         83:34:2e:87:18:fa:1c:43:88:32:6a:47:13:45:d3:09:6f:23:
         95:14:02:10:48:bf:41:a4:df:c5:d5:33:86:f4:a7:b1:34:ed:
         ee:37:c0:16:10:00:77:cc:2a:da:f8:70:0d:4c:94:28:00:06:
         02:f4:1f:d1:cb:be:fb:9b:1f:56:40:57:7d:cd:8d:d2:41:95:
         c3:98:b6:80:32:88:b7:73:0c:2a:a7:02:37:1c:2e:e8:47:64:
         57:11:4f:91:44:54:d4:ba:1e:97:72:a8:3a:93:89:b1:90:61:
         2c:41:21:b6:0c:c8:7f:ae:2c:9e:28:4e:37:08:f0:6b:2c:a4:
         af:71:a7:b1:39:69:5e:74:66:0d:96:eb:3b:12:8c:7d:11:e4:
         06:14:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:40 2026 by rpki-client