This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          Qu9nKyJmlsfsCsVzOsAWPrhc3OqE8d8dQ33HAmbtRl4=
Subject key identifier:   F0:D7:71:C9:1B:BF:11:96:0E:65:5F:0E:6A:34:0E:C8:DD:F5:C4:33
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       019BF42BD1BA3E3D231ADD43D64BF487A272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          0875
Signing time:             Sun 25 Jan 2026 08:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:10 +0000
Files and hashes:         1: 1--6A0fn2NhA1NZd62Q5I9zcdB1E.roa (hash: EH25i1o06YPHiAuJedj6ere5DhO1CqohFt6zhHaGS9w=)
                          2: 2RIVIVRmKa9CYW5k__SxCIzxcbs.roa (hash: apx4M/r9KIdrqVQzUwO8eSTnnpWWMdiMzrL0URB2p44=)
                          3: o0acl1IMBRy-qakTt2GSZVwrwDI.roa (hash: 1tnc5sj5TuvETHTQfBD3EgeqyOIRseKaxeMhRgmvYMQ=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: ZHIVa9CnKSc4AidhUJAOF4J1K6y3q9oxSvItu+rOSIg=)
                          5: sef3oIWVUvY_zvFY7Q-dmEYwMeM.roa (hash: KUYDRoZPtUS/Sglg5oZKEXcSGG037brQKOBSD2zs9MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:d1:ba:3e:3d:23:1a:dd:43:d6:4b:f4:87:a2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Jan 25 08:01:10 2026 GMT
            Not After : Jan 26 08:01:10 2026 GMT
        Subject: CN=f0d771c91bbf11960e655f0e6a340ec8ddf5c433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:ed:66:d0:2e:1a:91:c1:98:b7:43:cd:9b:
                    7a:de:cb:8c:01:bf:d2:6d:d9:e2:90:a0:9c:66:7e:
                    95:cb:46:a5:bd:40:28:50:ed:8d:43:bd:3f:5a:bf:
                    8d:81:aa:7b:0b:0f:c9:ac:2e:44:d5:64:95:51:44:
                    51:7b:0c:c3:66:db:33:84:61:e4:d5:d7:a2:44:07:
                    d1:60:d9:db:55:be:8c:40:b3:16:2c:10:2e:b8:05:
                    b4:18:03:d3:d9:ad:34:d5:9d:de:0f:56:ca:e1:cc:
                    1d:8a:e3:52:e4:bf:01:1b:5c:7d:1f:e7:41:9a:0c:
                    1f:f9:4c:0f:f6:bd:f8:16:c5:18:11:fd:81:ad:a3:
                    a4:86:1e:79:d0:a9:04:06:33:d3:5a:49:3e:54:2e:
                    34:d3:fd:a9:68:81:f7:a5:6f:e2:2f:a6:e7:6a:62:
                    c4:f1:61:01:79:8b:c4:ae:eb:99:97:3a:01:12:1a:
                    61:f1:f5:36:b6:0f:0f:29:bd:bb:a3:64:bd:c3:f4:
                    cc:e2:5a:46:da:ab:9d:e6:09:a8:53:b2:07:89:b0:
                    37:f2:c7:85:5a:29:df:7c:bc:cc:a0:ec:f4:7f:98:
                    13:dc:53:ec:3f:d5:6e:8b:c8:d0:75:44:2c:2f:0e:
                    f3:26:73:81:07:28:7b:cc:29:ef:fd:47:65:80:d1:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:71:C9:1B:BF:11:96:0E:65:5F:0E:6A:34:0E:C8:DD:F5:C4:33
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:68:ee:51:e8:2b:b8:71:e9:51:df:cf:e3:39:b5:e2:6c:6c:
         8e:a7:a7:59:3f:30:ad:46:63:2c:8f:2f:45:71:eb:13:35:3b:
         20:ac:2c:d9:8f:84:5b:68:40:ae:d2:3a:00:26:f2:51:3f:b5:
         7b:aa:09:e3:63:e4:27:11:25:84:ed:c2:7f:e5:a9:3a:5d:26:
         64:37:0e:39:a3:0c:98:74:35:ad:c2:f1:c4:08:59:e2:e2:a8:
         c1:8a:c4:4d:a4:81:26:7e:d6:10:7d:5f:a8:04:63:85:d2:fc:
         f8:b8:97:3c:71:e6:98:9e:b9:b2:3c:cd:eb:38:18:91:9d:cd:
         31:1e:6f:8a:01:46:fa:0f:db:bb:d3:00:ea:d2:a1:fd:80:a1:
         e7:3f:33:83:8d:59:3f:17:07:74:09:e8:bf:f2:c5:97:8d:72:
         36:64:1d:80:dd:76:8b:57:10:1a:16:64:f0:60:7a:f3:8f:f3:
         7d:80:2b:44:4f:2f:d4:fc:6e:e9:b5:da:a1:9f:80:20:9a:d3:
         7b:c0:35:d5:6d:96:da:de:f6:8c:0d:9e:18:20:46:6e:ca:2b:
         92:90:bc:42:ed:03:a0:0f:8d:ba:ed:73:76:eb:7e:b4:ff:79:
         ba:d1:56:80:57:bf:69:fa:0d:ae:96:92:75:33:33:48:bf:f5:
         fa:85:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:45 2026 by rpki-client