This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File:                     qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier:          DbroAwXsSWoo6PEofBlq1FWCBxPDn2Cnn3ryXFsgEf4=
Subject key identifier:   4B:28:D0:99:3B:E4:E1:F8:C0:7F:2D:7E:0F:16:4D:96:EE:C8:CE:CC
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer:       /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial:       019BF50768987CB6458E452FD40D9D79B835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number:          17E6
Signing time:             Sun 25 Jan 2026 12:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:01 +0000
Files and hashes:         1: fG6maQIYPuiZbXuoPZY5KDKmziI.roa (hash: 86O5JcN57k2/HbjQtBdb8xSuus/b5Khba3p8Ebd34wc=)
                          2: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: o5YpFxwaCgnNIVh1U7q97izycZXCeIzL1rCsOLDx6IY=)
                          3: upo56Z93ZuxfUzsBXT8Mop0ljfI.roa (hash: YhDFF8pQFZdnO5Ubp8t393cVmTF+JmT/Dc4jBewkDSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:68:98:7c:b6:45:8e:45:2f:d4:0d:9d:79:b8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
        Validity
            Not Before: Jan 25 12:01:01 2026 GMT
            Not After : Jan 26 12:01:01 2026 GMT
        Subject: CN=4b28d0993be4e1f8c07f2d7e0f164d96eec8cecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:ae:8b:df:07:ea:58:d6:42:99:e0:6b:e9:
                    47:56:b7:78:ed:45:59:54:c9:a9:0a:cb:c7:52:71:
                    0d:8d:68:73:f9:20:e1:b5:c7:a8:9f:ce:59:19:1c:
                    c2:b5:4d:43:46:f6:e9:cb:ef:91:1d:e3:ac:4a:fc:
                    84:06:c9:6b:9e:d3:45:db:85:c4:cc:a0:22:f7:34:
                    85:d4:a6:6e:dc:0d:52:81:fa:da:63:c1:a1:2f:7c:
                    ef:03:db:29:96:9f:cf:9a:7c:ad:22:96:2e:49:ca:
                    e2:90:ca:d0:ba:25:ea:6a:a8:81:cc:18:89:d2:94:
                    7d:ef:4f:9c:c7:3c:fe:ff:5d:32:1b:25:4a:ac:56:
                    64:5d:30:c1:fc:cc:b3:7c:01:ac:13:5f:1c:60:96:
                    de:45:1f:c1:ac:99:40:c7:ab:03:f3:3d:68:06:1f:
                    72:9c:a8:63:a3:e1:46:6f:63:a7:da:92:8d:31:01:
                    77:29:93:bc:ed:c4:45:16:7b:60:83:4a:73:53:1c:
                    c9:df:4e:ac:4e:4d:97:da:d7:83:86:6e:4d:75:b2:
                    53:d6:ec:19:d9:6c:da:a0:33:4a:00:76:79:52:40:
                    7b:7f:89:57:0e:13:9a:56:52:9c:fa:00:22:7a:77:
                    71:e6:7b:94:61:80:d9:4d:f3:67:d9:00:41:c9:6d:
                    e7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:D0:99:3B:E4:E1:F8:C0:7F:2D:7E:0F:16:4D:96:EE:C8:CE:CC
            X509v3 Authority Key Identifier:
                keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:b0:d3:18:30:7a:c4:7e:a3:a4:a6:e8:d8:38:d8:97:3d:
         e7:8c:b5:fc:94:ee:de:6f:b0:2d:bb:87:93:7c:a9:08:8e:c2:
         d4:07:09:41:75:95:e3:d0:2e:30:fb:e1:9a:19:15:a3:27:99:
         c6:7b:11:22:10:62:fc:5e:af:c4:fa:37:5a:5e:18:bf:93:20:
         0c:47:f9:93:f8:e3:98:74:9a:a4:d9:8d:70:42:98:ad:c6:d4:
         6a:59:dc:a5:fc:bf:55:32:53:42:8a:c9:e2:06:18:b0:09:18:
         64:3c:67:53:eb:c0:56:9c:5f:17:96:24:2c:68:3c:0a:07:fd:
         59:41:4a:b4:f7:3d:f9:4b:53:d9:52:3d:c9:cf:67:eb:8d:4a:
         57:38:7f:c2:3c:a1:da:a1:2a:84:e3:4b:93:09:59:db:12:e7:
         b1:e0:f2:0b:ce:29:f5:19:67:5c:88:9e:f1:dd:d4:e9:f9:83:
         cc:03:6e:72:53:04:d3:3e:ba:2e:90:1d:75:74:99:ec:93:a3:
         b6:2d:4a:33:3c:e7:95:e6:ea:e4:5b:5c:6b:2f:67:c0:7b:61:
         e1:d6:65:8e:db:ab:32:5d:f6:a2:8c:4a:52:df:ac:df:04:c2:
         d6:df:0c:66:33:e1:c7:07:fe:5b:7b:3c:3d:c7:e8:a1:1e:ad:
         ed:1a:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:38:07 2026 by rpki-client