This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File:                     uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier:          bDbFOqvyFgy/QxjqS/ef87Ji7VRDO1YeXRPPE05r27E=
Subject key identifier:   C0:E2:19:64:43:AD:A6:9B:29:8B:DB:0E:F4:2F:01:5D:C1:8B:AF:55
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer:       /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial:       019BF42BC6C6B795C3B96ED3D9CC006BA7A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number:          091E
Signing time:             Sun 25 Jan 2026 08:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:08 +0000
Files and hashes:         1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
                          2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
                          3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
                          4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
                          5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
                          6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
                          7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
                          8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
                          9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: lbvfyfYyCatzcYlbeR2IukXL8KtxdFHSkt9qUB5ZhSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:c6:c6:b7:95:c3:b9:6e:d3:d9:cc:00:6b:a7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
        Validity
            Not Before: Jan 25 08:01:08 2026 GMT
            Not After : Jan 26 08:01:08 2026 GMT
        Subject: CN=c0e2196443ada69b298bdb0ef42f015dc18baf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:5c:31:8f:24:e6:fd:5c:b2:f9:67:68:e8:
                    26:41:8f:81:4a:21:6a:23:cf:40:21:04:39:22:ee:
                    ae:46:30:47:f8:5e:68:ef:a8:25:02:7d:9b:86:04:
                    83:83:9f:12:c6:14:67:d5:03:8b:45:1e:40:08:e4:
                    24:9a:42:2d:2e:ce:46:a3:d6:f7:08:dd:39:d4:7d:
                    2d:a0:a8:e6:78:26:38:2e:6d:6a:f3:d2:cb:54:6c:
                    ca:ba:3c:37:16:80:ee:42:e3:58:f3:d3:bd:01:02:
                    7a:bf:21:d4:36:7c:64:59:fa:9d:48:99:f1:46:4c:
                    34:61:f6:65:8f:f3:e6:58:1c:64:6c:12:18:e3:e6:
                    b4:44:70:7d:13:f8:98:17:5d:b2:f7:02:c9:7c:f4:
                    27:32:86:6e:14:bd:92:a1:a5:3c:58:c8:34:63:34:
                    06:c2:1a:27:3a:cf:e1:7e:d9:93:4a:a8:75:34:bd:
                    0a:6e:ed:a8:bc:de:dc:de:33:26:11:f3:c0:5d:39:
                    7f:f5:bc:f8:11:c5:97:62:66:24:eb:83:33:7a:c9:
                    33:a8:cd:ae:51:b6:fb:b1:21:b0:99:21:63:24:25:
                    a2:42:db:ea:2f:e7:fe:a7:a8:91:3e:8d:bf:96:81:
                    b4:8c:fb:2f:17:c8:88:54:0f:0c:28:0d:dc:2e:5b:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:19:64:43:AD:A6:9B:29:8B:DB:0E:F4:2F:01:5D:C1:8B:AF:55
            X509v3 Authority Key Identifier:
                keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:19:58:da:87:e5:82:1c:fe:f0:6c:e3:d1:33:6b:44:d8:
         ee:9e:2b:8c:58:e2:7d:a8:da:4f:2e:e2:cb:30:86:76:30:62:
         fa:16:f4:69:ad:05:40:35:9a:f2:92:d5:7c:02:db:f2:17:4c:
         e8:cb:9b:2c:6b:8e:f7:d3:69:90:e5:56:91:8e:0c:de:c2:47:
         94:91:6e:35:05:7c:d6:34:86:28:f6:b9:bd:58:be:80:07:f4:
         ed:b1:91:4c:da:49:0e:bb:d8:40:75:02:fb:e0:9d:f6:ae:2d:
         69:28:95:3e:a5:ba:9f:bb:81:34:e5:91:e9:56:54:cc:28:85:
         f1:38:e7:92:8e:eb:74:e9:89:fb:19:18:01:11:e6:7d:8a:80:
         a3:ed:57:a7:d6:3c:fc:34:fc:1c:3a:3b:d7:d9:fe:db:22:03:
         45:d5:c4:7e:20:c6:0b:a2:f0:b5:58:00:01:8e:a9:31:77:3c:
         c0:81:56:c6:5d:5a:6b:b0:7f:fa:d5:f2:d0:22:0f:a7:4c:f4:
         a9:5d:56:c0:9f:28:9e:0c:4f:d4:d3:6d:12:5f:0e:98:a8:d2:
         c6:d9:bc:5f:3e:6b:a0:c5:d4:0c:2e:04:0c:34:a5:93:9d:be:
         9e:38:f8:ca:b8:7a:11:20:f8:4f:1e:21:fa:7b:82:f9:cc:a3:
         51:c2:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:58 2026 by rpki-client