This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File:                     uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier:          mQgnh2lGePmYErQKhBWkGpm26T++YofacW3JR8Ahwy4=
Subject key identifier:   89:52:8B:E2:37:63:59:AF:2B:16:80:E8:1C:DD:97:18:7A:35:05:26
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer:       /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial:       019BF619E3EED24FEF809AAE8555F0A561E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number:          091F
Signing time:             Sun 25 Jan 2026 17:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:50 +0000
Files and hashes:         1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
                          2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
                          3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
                          4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
                          5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
                          6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
                          7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
                          8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
                          9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: Hq/kM5V0mU78DWaA4N7ax+5U/cMytBHdy1W1RVW/SPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:e3:ee:d2:4f:ef:80:9a:ae:85:55:f0:a5:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
        Validity
            Not Before: Jan 25 17:00:50 2026 GMT
            Not After : Jan 26 17:00:50 2026 GMT
        Subject: CN=89528be2376359af2b1680e81cdd97187a350526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:e1:e7:a6:7a:5a:5b:c9:47:53:82:bc:95:
                    02:7b:d0:82:c5:52:74:bd:98:ad:a4:7f:ff:b3:c0:
                    96:b3:ca:29:3f:26:0b:62:23:4c:46:0a:f2:df:62:
                    e8:8e:2a:b0:98:dd:d1:d0:13:f4:e1:2e:85:61:01:
                    d9:09:05:0d:c8:32:d2:77:12:27:03:27:e4:11:90:
                    15:8a:0e:72:ef:88:c0:dd:77:95:45:c8:ed:da:f6:
                    ac:89:81:0e:0c:bb:cf:6b:91:01:7d:b7:a6:6f:28:
                    4a:c9:5c:10:22:54:3c:1d:49:9b:2f:ae:ed:22:18:
                    40:a0:c1:d7:01:e5:ea:ca:36:48:d7:e8:f1:4e:37:
                    81:a3:6a:c0:5b:d0:bb:34:48:c5:64:1e:fc:d0:11:
                    0d:0d:9d:d8:5b:50:0c:d9:77:f3:49:4f:b4:1e:44:
                    2c:9b:68:9a:7d:19:2b:80:e2:34:d0:48:80:16:83:
                    6b:aa:64:9f:8a:48:25:07:0a:5b:e1:d8:0b:a0:53:
                    65:e4:7e:aa:86:bb:39:1b:14:59:77:31:1a:d3:3b:
                    e9:55:73:1e:17:0a:d0:d7:75:67:9b:5e:49:52:6a:
                    8c:a9:0e:c4:b5:e5:94:6f:81:80:db:51:5d:3e:ae:
                    96:72:fa:1a:1b:08:3d:03:b1:77:07:b5:bc:72:f7:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:8B:E2:37:63:59:AF:2B:16:80:E8:1C:DD:97:18:7A:35:05:26
            X509v3 Authority Key Identifier:
                keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8c:be:cc:a2:64:73:66:34:60:90:16:4b:b8:35:a4:72:ec:
         76:ce:3d:fd:7d:9f:00:de:e0:8d:7d:ad:2f:5d:ae:86:63:23:
         b8:5f:a3:e6:fc:8d:03:4b:69:8f:ec:e9:59:a3:61:81:7f:96:
         75:d4:99:f6:95:f7:b4:44:fb:4a:76:08:00:43:5c:86:fa:ce:
         33:a5:d1:20:d7:6a:73:7a:6e:a9:8e:e9:4f:c4:c4:47:27:d2:
         0c:e6:91:dd:92:56:c7:02:a0:7d:3d:c3:c4:cd:19:d7:74:8a:
         3b:5c:0e:87:ed:38:ef:d5:df:aa:94:e1:c5:7e:2f:85:49:81:
         28:5a:df:b3:50:4a:10:e4:c2:57:3b:fa:a3:08:55:5e:cc:26:
         09:0a:80:d3:0a:9c:6d:75:6c:dd:76:21:63:de:9d:0c:64:36:
         ab:03:30:fa:22:44:d9:18:f0:a8:f3:02:7a:91:f3:68:e9:a6:
         66:dd:aa:b9:c0:37:75:04:b1:98:77:96:46:bb:e3:d5:ed:10:
         dd:0d:18:cc:6d:b6:b0:57:d5:e0:ff:af:b8:da:bc:0c:3f:3a:
         5e:92:e8:ba:6a:51:1d:9a:5f:3b:a7:9e:63:16:3c:a3:09:31:
         51:67:5e:46:5d:10:51:39:51:d7:d6:cd:22:73:51:de:7e:79:
         5c:cc:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:54:19 2026 by rpki-client