This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          pAWc009ssf+9VhiRHl9KtJVd6Ah2eGPjY1Cv6w8ICLw=
Subject key identifier:   7E:DC:12:08:1A:4F:14:EB:16:82:B0:07:D9:54:09:7B:C3:55:37:5A
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019BF4D06C1A5F8BB9D6A12F8ABEFFB0DC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1811
Signing time:             Sun 25 Jan 2026 11:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:58 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: QUy22Hji16ApvxGRT4jzc+AQMOEzsdbFGTzneE/5ttU=)
                          5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
                          9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:6c:1a:5f:8b:b9:d6:a1:2f:8a:be:ff:b0:dc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Jan 25 11:00:58 2026 GMT
            Not After : Jan 26 11:00:58 2026 GMT
        Subject: CN=7edc12081a4f14eb1682b007d954097bc355375a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:71:e0:29:13:25:0a:9b:3b:dd:4d:30:29:1d:
                    5c:50:26:cb:90:a7:02:30:9c:40:e2:db:ef:8d:67:
                    e1:d3:f8:1b:9d:69:54:90:0d:cd:32:24:2f:5f:e0:
                    9b:91:33:ca:d7:fc:56:02:a0:89:2f:6d:1e:1e:22:
                    ec:0e:26:0f:12:e1:6f:86:c5:23:6e:de:48:65:d6:
                    21:00:69:c4:c3:b9:b8:a9:ed:56:83:a1:9a:30:8c:
                    63:b6:48:35:7c:d9:a1:d4:2f:b3:b5:25:36:15:49:
                    95:6e:14:e0:f8:4f:79:d6:5e:d8:e7:0c:e7:db:1c:
                    98:9c:a7:d4:58:db:f0:8a:39:84:bf:ab:30:e4:b9:
                    44:0b:30:11:e6:bb:b9:bd:b7:cf:66:23:f5:d3:7f:
                    09:f0:27:3a:b4:bd:24:82:97:3a:7a:94:5e:ba:ab:
                    c7:53:7d:c8:39:1e:bc:a3:c5:b0:bf:8d:d2:8d:94:
                    44:91:b9:dc:1c:1d:02:88:d7:d0:93:4f:2e:2e:de:
                    59:13:85:7c:a6:7b:44:82:4d:0d:03:70:62:91:53:
                    fe:3e:7b:ee:38:3c:34:bb:a5:91:1c:11:09:81:78:
                    05:7d:5f:0a:0f:b1:71:bd:01:9c:ed:ba:5d:f4:a7:
                    ba:f5:d2:d1:ca:ca:73:2c:a5:d0:bd:df:8d:b1:d4:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:12:08:1A:4F:14:EB:16:82:B0:07:D9:54:09:7B:C3:55:37:5A
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:12:25:e1:75:3e:da:2a:d0:01:e5:e0:94:6f:47:57:1e:d3:
         af:a4:61:e0:79:b8:8e:69:8d:c6:85:49:46:ce:95:09:e1:ac:
         e0:3d:53:94:d1:42:5f:3f:cf:ca:4e:b7:1e:60:43:1e:7a:1f:
         84:4b:9b:d6:ef:c6:bf:ad:c7:ef:0b:23:d2:ef:d1:16:9d:0f:
         ec:b9:9e:c5:4e:01:2b:b7:c9:d2:d5:6c:57:4a:9f:9b:81:90:
         5c:49:07:fc:e2:7d:d1:6c:56:20:6f:a4:64:e7:62:fe:f8:84:
         23:53:ab:e5:62:ee:66:44:11:65:04:f1:51:6b:43:17:07:f2:
         35:9b:88:d1:12:ee:8d:ae:ff:c7:41:59:fe:93:88:07:4c:d8:
         5d:1d:a2:a5:29:df:fc:a1:4d:39:bc:0a:a1:8c:b2:42:8d:31:
         8f:3d:c0:c1:d4:b9:91:33:50:87:2b:12:1d:07:22:b6:9f:e6:
         57:e9:da:9e:c0:bc:06:fd:ad:5c:45:d3:a0:78:f8:bc:0e:09:
         53:b6:16:a5:ab:bb:ea:4c:da:f3:d7:57:d0:ca:c7:e3:2c:d5:
         7e:c4:d4:a5:b1:8c:8f:b3:a0:ac:c0:b0:5d:2a:e4:d1:86:cb:
         9a:45:7a:a4:7b:fb:ae:e5:dd:6e:80:08:2f:25:89:46:ff:ef:
         15:df:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:06:23 2026 by rpki-client