This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          b7Fh/5cEOGzXs5P4u/+MdRqu/eVUXlefonaYVVGng1c=
Subject key identifier:   4F:BA:18:CF:20:F8:B2:14:1A:55:29:A0:54:64:2B:51:07:C6:C3:62
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       019BF350026305774F8A28CBF0E480B71935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          182B
Signing time:             Sun 25 Jan 2026 04:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:05 +0000
Files and hashes:         1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
                          2: KrNmRR4hrk8plssZBHDOJNr9Ryg.roa (hash: HDzmGWPUIRpUxMQHSK5rxjukfcM5P9MYRi+LIu0onOw=)
                          3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
                          4: dj4ZXghPaYir6X7JgZe9YTcMpRo.roa (hash: BucX8mubJ6q4sMyFgYhHUWCEzv7hjSRMk62tlks0oX4=)
                          5: imKnlCbG82nv79I7GIs-Cf3bI6Y.roa (hash: eCcCj1ficBtOTcxFVWC/9P3nMu8rE+7UYMnKQ2Ga9Os=)
                          6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: n3Y2Jj5hdkzqpMM+JE2MDz0U7DO9diYiqSwbd4Ub2Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:02:63:05:77:4f:8a:28:cb:f0:e4:80:b7:19:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Jan 25 04:01:05 2026 GMT
            Not After : Jan 26 04:01:05 2026 GMT
        Subject: CN=4fba18cf20f8b2141a5529a054642b5107c6c362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:00:31:1f:18:2a:79:df:07:a7:f6:e5:87:
                    96:f7:b4:6d:96:55:53:82:94:15:46:fd:69:47:f6:
                    1e:32:a4:80:81:69:e5:4c:07:8f:5f:f9:6a:08:e6:
                    53:82:91:67:1d:23:68:02:b5:54:3b:c4:68:c1:df:
                    70:0b:53:38:26:1e:df:83:05:42:8b:24:2a:32:40:
                    c0:78:ea:0c:a4:25:ff:fd:e0:cd:c7:6a:93:1f:0d:
                    dd:28:a7:a3:23:5f:9b:dc:8e:72:aa:6f:a8:e4:e6:
                    11:96:0d:7e:32:6d:87:e0:06:14:07:cb:43:3c:e6:
                    de:96:fd:4b:7d:48:82:bb:b8:47:54:8a:0d:bc:3d:
                    a1:5b:40:1c:d2:55:8e:af:97:89:3c:e1:b8:4b:a7:
                    e0:77:65:c4:47:44:da:b8:e9:be:1b:9a:94:4d:b1:
                    7b:1c:aa:2d:a2:9c:f8:1c:37:8b:98:42:9d:6d:35:
                    92:50:91:84:f6:66:6c:57:6b:ae:ac:e2:26:58:3e:
                    21:64:3d:4d:1b:1f:24:2c:c4:95:e1:1b:3c:c3:09:
                    bd:dd:51:ed:bd:59:d1:9b:02:47:1e:45:cc:7c:2a:
                    00:a6:54:4d:71:1b:0e:7a:fe:0e:ca:2e:e3:09:b9:
                    ea:d0:f2:07:5c:cb:25:2f:c6:39:59:80:2c:dd:6f:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:18:CF:20:F8:B2:14:1A:55:29:A0:54:64:2B:51:07:C6:C3:62
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:44:82:1c:ae:25:56:1d:9d:d2:8e:6b:0d:12:75:37:20:
         c2:d6:58:b5:1a:dc:8c:c9:0c:60:32:a1:d3:eb:45:89:a2:cd:
         52:95:e8:be:22:4c:f0:fd:87:a3:67:66:4c:1f:1a:6c:f3:ac:
         66:ab:d3:3a:ec:6c:53:7c:3e:a3:cc:a1:d5:c9:01:25:7a:1b:
         5c:c9:44:df:79:d7:52:67:04:72:de:2a:fb:5a:1f:9a:1c:20:
         fc:f6:b1:53:89:95:e8:42:df:76:00:12:eb:0b:55:0e:1a:32:
         ad:c9:60:3d:51:21:db:bc:9c:a2:60:42:63:81:0d:02:34:4b:
         08:d3:be:d8:38:35:02:0f:13:72:5c:1e:d5:40:d8:71:d4:30:
         e2:e2:9a:47:20:e9:3a:1d:04:ea:7d:95:74:c4:0f:a9:ad:87:
         63:c8:bf:84:73:dc:c9:e6:5e:0c:f6:4e:df:f2:7b:74:4c:6f:
         2e:d3:df:94:71:b0:36:21:7f:30:2f:4d:27:35:9f:47:2c:8a:
         db:b3:b1:ee:7c:e9:aa:9f:21:f7:76:cd:a0:dd:87:10:0b:14:
         b5:d6:43:de:4e:17:73:cf:aa:06:6c:c9:fc:81:00:5e:cf:78:
         22:43:b8:fe:ef:4c:f9:8d:57:1d:de:88:9c:fc:27:46:6c:12:
         75:0a:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:05 2026 by rpki-client