This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          Hg2zWR8slVDdWKfiLv1BG4p6Vl/Awy+nLHfWnASqA10=
Subject key identifier:   0A:D9:C5:E7:7A:A7:37:B8:9E:BD:32:9B:E6:52:91:6F:22:02:1B:A2
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019BF6BF2490EEB8A45D7B42DAD082BF89D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          1812
Signing time:             Sun 25 Jan 2026 20:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:20 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: JpM6D1eNv9jz/FYyxoXcr4f5C6K7yWBhhSMag5n9T1U=)
                          5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
                          9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:24:90:ee:b8:a4:5d:7b:42:da:d0:82:bf:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Jan 25 20:01:20 2026 GMT
            Not After : Jan 26 20:01:20 2026 GMT
        Subject: CN=0ad9c5e77aa737b89ebd329be652916f22021ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:fb:84:47:ce:16:91:77:f3:a1:43:f8:47:
                    6b:d7:9a:eb:66:0e:19:33:ef:16:6b:dd:d5:8f:74:
                    3f:03:e3:1b:ce:d4:20:ac:8e:08:e3:38:f7:d3:29:
                    4c:b7:3b:53:42:7a:6a:ca:77:cc:5d:b7:d8:99:68:
                    0d:45:e8:65:e9:3b:59:86:24:05:04:c9:8e:e1:da:
                    12:e3:ae:26:b1:0b:98:f0:31:aa:aa:20:5c:54:f4:
                    91:d8:0b:ba:8b:e5:b3:39:b3:b3:bc:9d:7e:66:a8:
                    9e:a2:ce:d5:e2:d1:87:b1:66:cc:a8:66:21:b8:28:
                    4b:97:19:bc:17:4d:74:c1:0b:84:3c:13:16:da:08:
                    d0:90:33:6b:36:2b:fd:54:04:63:97:c7:b9:14:37:
                    ac:ab:d2:72:b8:2f:0b:09:9f:83:2d:95:62:5e:5d:
                    6e:29:d5:e9:fc:53:1b:85:a5:08:40:0d:d4:f3:bc:
                    91:06:73:55:84:17:08:db:f6:10:2e:75:7c:21:80:
                    e2:79:23:d4:27:11:5d:1e:41:49:a6:8d:3a:f6:7f:
                    ba:08:3d:7d:c3:8f:05:ce:9a:78:db:77:5e:28:84:
                    4a:9c:64:c1:5c:dc:93:82:8a:0b:a9:d0:b3:26:23:
                    b4:c4:cf:f6:b2:71:34:ce:d1:fa:8b:e8:0b:8d:a1:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:C5:E7:7A:A7:37:B8:9E:BD:32:9B:E6:52:91:6F:22:02:1B:A2
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:9e:a7:df:f1:01:b9:ab:93:87:81:2a:2d:23:2b:c7:e3:
         ac:0e:4f:f8:72:90:95:f5:69:d5:9c:d3:ec:c3:f1:54:e2:d6:
         dd:a4:fa:89:cb:fc:e5:41:2a:d9:bc:f7:8e:10:7a:14:3c:ae:
         b5:df:24:0c:1e:cf:0d:1e:c1:01:8c:ca:26:2c:4d:77:0a:ac:
         40:62:2e:3a:ae:c0:12:29:fa:ef:f6:49:b3:9c:01:84:63:eb:
         25:3c:63:26:f2:a9:bf:b1:62:2f:4a:bc:4d:0d:20:07:30:59:
         4c:1c:89:76:2f:b5:ca:70:f2:e4:b0:4c:14:74:92:5e:af:a9:
         22:24:92:fc:92:eb:a5:37:dc:95:ff:d8:e6:8c:ef:b9:12:79:
         e2:b8:e0:6c:56:05:79:d2:90:c6:95:32:bb:86:9e:9d:00:28:
         68:78:3b:a6:34:59:b0:66:02:22:18:a1:d6:d4:1b:e9:29:4b:
         28:8b:fa:fc:47:b7:e5:43:0e:4f:a4:23:dd:e6:be:78:8c:d1:
         4a:72:87:8f:7a:a7:02:f1:84:35:ca:5d:d3:b2:de:6c:eb:27:
         57:8d:6f:96:48:cc:82:e1:5c:bc:6f:21:5d:64:e2:26:8b:7e:
         86:27:84:5b:21:d1:ff:8a:6d:88:b3:49:28:f0:a2:e0:b0:46:
         85:97:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:52:52 2026 by rpki-client