This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File:                     1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier:          xcixlFB1FihLVqGFzrFHUFKegfiMeAgCv/tjLzwWvts=
Subject key identifier:   6A:52:BA:2C:A6:37:C0:05:7E:16:9F:DF:61:35:28:F2:CB:8B:F9:33
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer:       /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial:       019BF91BF2248803BAAD1E9CB6D6E1BB6437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number:          177E
Signing time:             Mon 26 Jan 2026 07:01:56 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:56 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:56 +0000
Files and hashes:         1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: IDyRfrHXcdQCmdRmfGdocp3re5utmxlhpqprlkLpmdM=)
                          2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:f2:24:88:03:ba:ad:1e:9c:b6:d6:e1:bb:64:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
        Validity
            Not Before: Jan 26 07:01:56 2026 GMT
            Not After : Jan 27 07:01:56 2026 GMT
        Subject: CN=6a52ba2ca637c0057e169fdf613528f2cb8bf933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:32:41:2b:74:f0:63:b8:b5:f5:ef:6b:77:4e:
                    00:a3:ab:05:83:6a:74:84:fc:03:7f:14:52:a7:41:
                    a6:b5:1b:e5:69:8c:04:32:8a:cd:67:61:93:bd:df:
                    93:8b:74:54:fe:4c:61:6a:5a:67:0d:a2:61:e7:72:
                    bc:9e:34:75:ef:6d:cd:06:33:fd:f8:c7:a7:a8:94:
                    1c:ae:0d:ec:19:e8:6c:e0:18:51:18:8b:7d:fe:11:
                    10:05:69:59:99:b0:a3:a9:22:dc:36:27:7b:ee:30:
                    4f:03:6d:ba:01:c3:f4:d6:53:4e:6c:88:d9:8a:22:
                    4d:ed:76:85:27:ac:af:61:fb:f1:05:84:ef:0c:63:
                    53:89:03:ff:7c:c5:92:62:e6:6d:73:e0:ef:11:08:
                    73:8c:0d:cb:6b:52:6b:be:99:80:a8:7c:64:1e:b8:
                    c5:23:4c:b4:50:88:44:33:95:8a:c6:0b:d5:fd:cb:
                    8c:db:8c:75:21:07:16:91:e6:83:97:bc:f8:f7:2d:
                    04:15:e6:1f:16:31:01:09:ef:44:ea:dd:f4:4b:6a:
                    75:40:c6:97:78:fa:1e:5a:2a:03:0a:6f:4b:fe:da:
                    7e:9c:da:cc:82:11:39:08:a9:d4:78:68:e8:16:0a:
                    77:75:3a:87:d3:97:51:d0:85:23:55:08:ab:64:bc:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:52:BA:2C:A6:37:C0:05:7E:16:9F:DF:61:35:28:F2:CB:8B:F9:33
            X509v3 Authority Key Identifier:
                keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b6:25:65:e0:92:d3:34:55:52:ce:c7:49:54:44:80:88:59:
         30:5d:39:7c:40:f3:c0:74:cb:6a:55:05:b2:f2:c3:5e:49:b0:
         e5:27:12:91:c3:b4:07:0f:f1:fa:b0:3e:f0:81:67:dc:1e:2b:
         32:f3:76:74:23:d0:b1:54:9a:a8:0f:3d:73:b7:e0:5e:24:d4:
         1c:41:58:e7:9d:ac:27:3a:d4:ce:f8:b3:eb:73:2c:7c:18:7a:
         ad:4f:07:5a:f2:97:27:09:0e:3d:8e:09:6f:d9:7b:e4:da:81:
         72:db:18:1f:8e:33:4c:8e:cc:12:a1:ba:a8:ba:92:c5:96:86:
         e7:38:77:19:c3:47:6e:e4:24:ae:fb:72:21:6d:7c:8c:35:e9:
         1d:27:6f:a4:41:63:ef:95:ea:67:0f:6d:02:55:a8:f5:fe:11:
         5d:ed:10:fb:e1:5f:1f:5a:d3:a7:33:ca:43:bc:e9:ed:93:24:
         97:78:88:2b:22:08:ed:de:0d:24:6d:22:c7:1d:2e:99:80:2d:
         9f:af:c6:19:10:3a:c8:da:d5:67:d2:e5:a7:78:45:ab:4c:bd:
         a0:ab:3c:1a:d5:93:03:05:ed:a4:dd:ce:16:83:9b:cc:5e:dc:
         90:bd:b9:fd:b6:8f:d6:69:e3:39:3c:67:52:0b:1e:83:95:13:
         e6:25:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:12 2026 by rpki-client