This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
File:                     q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json)
Hash identifier:          BkUsIW8FVoCCCP37PS1/reIsbOY8UTSMH0xWDFibHdc=
Subject key identifier:   5A:69:88:49:D2:8F:9C:D2:25:5D:59:5F:D7:EC:02:33:15:15:D5:82
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       019BF4D08F92BC906D99F8C7C1645AFBF3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
Manifest number:          14F7
Signing time:             Sun 25 Jan 2026 11:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:07 +0000
Files and hashes:         1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=)
                          2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=)
                          3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=)
                          4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=)
                          5: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=)
                          6: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=)
                          7: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=)
                          8: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=)
                          9: Q9Ww3Do89xMOQrPd5TKLAZBAvrg.roa (hash: hGe4aZ3em/P54+6JoLXuYwSoEpjVtG261LosCw0VpbI=)
                          10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=)
                          11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=)
                          12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=)
                          13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: GXt5ZQZCPneo66FzuyiEyK8pepLGpSZ7Pssbu82OSL0=)
                          14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=)
                          15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=)
                          16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=)
                          17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=)
                          18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:8f:92:bc:90:6d:99:f8:c7:c1:64:5a:fb:f3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan 25 11:01:07 2026 GMT
            Not After : Jan 26 11:01:07 2026 GMT
        Subject: CN=5a698849d28f9cd2255d595fd7ec02331515d582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:35:33:3b:a3:cd:86:ab:49:18:c8:84:56:
                    fc:e1:5b:c9:e8:c2:c8:54:5b:c5:27:cb:4f:23:15:
                    6d:f8:4a:f9:81:24:66:12:98:15:6d:e7:bc:20:ba:
                    cb:08:2c:56:2b:8b:ba:17:d3:f0:bf:7e:35:91:fe:
                    24:fc:09:c2:ef:fd:d8:f1:bb:0d:30:9a:72:52:f3:
                    49:63:ed:03:de:39:99:89:0c:cb:3c:1a:8f:71:b4:
                    63:76:5d:08:94:8d:9d:8c:1e:f2:f8:fa:85:3c:78:
                    c7:63:93:c6:02:01:bd:77:d5:f7:8a:02:aa:67:d9:
                    a7:c2:67:fe:ae:21:bf:ee:37:a6:2d:99:8b:83:43:
                    ab:f3:8d:bd:88:4d:66:ef:7b:1e:0c:f7:9c:3f:db:
                    c7:ef:aa:64:f7:2e:1b:fd:13:a2:81:6a:7d:7a:04:
                    ba:20:2a:6c:a3:d4:4b:d5:31:ca:5a:05:bf:d8:e7:
                    cd:9b:f5:2b:4d:13:cb:03:05:24:ca:09:27:53:02:
                    88:6b:ea:49:f8:e9:da:f5:25:ab:0d:af:60:85:ce:
                    3b:8f:fc:a6:2d:81:34:67:6b:3e:6c:ce:0d:7e:e8:
                    49:d4:f8:61:86:80:fc:75:11:aa:c5:73:c5:94:9c:
                    9d:1e:d7:ed:0a:1b:8b:47:b1:45:64:7f:05:80:9e:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:88:49:D2:8F:9C:D2:25:5D:59:5F:D7:EC:02:33:15:15:D5:82
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:f4:68:e7:82:2d:fb:39:53:f8:b2:82:0d:fb:d3:4e:16:
         eb:7b:fc:71:db:6a:3c:65:a7:0c:35:77:a8:af:57:30:08:9d:
         69:66:1c:ce:89:ae:61:4d:d2:b2:bc:0b:16:c2:bb:92:c2:70:
         3e:67:a1:e7:48:16:41:64:07:89:5b:d5:d6:5e:a3:5b:df:0e:
         e7:d7:50:72:42:38:74:7e:1f:41:13:f6:e9:b0:86:c5:7b:af:
         ab:45:5c:87:58:66:55:35:80:c2:5d:83:49:be:49:4f:7d:d4:
         68:fc:dc:e4:5a:7c:e1:a4:b2:a0:9a:a1:1f:c5:a1:4a:e9:3a:
         90:a2:35:43:9b:a6:b5:2f:58:05:e8:0b:fc:29:0d:4a:41:69:
         e7:da:1b:59:b6:de:64:bb:ca:82:9b:86:83:16:b9:bb:25:76:
         7f:5d:fc:46:d1:6c:56:f2:ea:85:b9:b1:10:7d:b9:1a:0e:91:
         52:5e:1b:84:d1:74:1a:d8:7e:77:b2:df:47:41:83:dc:c2:95:
         9d:e1:93:e3:b9:85:c1:da:f3:23:27:0c:39:9b:f0:e1:77:df:
         c7:d7:f0:61:04:10:5a:b3:69:46:86:69:a3:9b:e0:5b:b8:34:
         9d:a1:1c:94:72:6c:dc:89:55:bf:8e:89:c7:a2:fb:c9:32:34:
         8d:c5:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:08 2026 by rpki-client