This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          r5xG8zxdEJe47GCBBm9hYjobZs4KzRgY0C5KNOE8F2k=
Subject key identifier:   64:8C:79:2E:EC:73:95:2D:29:49:5B:1D:0A:6D:B6:B2:AD:18:BA:6F
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019BF5AC483E8B30B2DA0A91FB11D2D27D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          1803
Signing time:             Sun 25 Jan 2026 15:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:06 +0000
Files and hashes:         1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
                          2: 8Z2E2Cqzk4y0-GvrjpUMoQrCJZQ.roa (hash: 3IGS/Th+5XuXfhPqqj6fRqktsHtiN3hRa/vgu2EjrnY=)
                          3: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          4: Q8YjH-KEhi0YFPFlzjh9_cDbreg.roa (hash: ix52vy5xhi9iMoksxTf+YBtBRpAwBJgV0/wqlHCo1Yk=)
                          5: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          6: XLK6rvPCrTiHJxhhke2BXfXKHZ4.roa (hash: wVBhMIUqJK/ATDLTX876CNHfRKj1peU1SKo+/YZpCjE=)
                          7: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          8: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
                          9: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: dihlyHsm0YT196t+ryJvfrX3YJan00bpkzry9ieT5x0=)
                          10: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:48:3e:8b:30:b2:da:0a:91:fb:11:d2:d2:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jan 25 15:01:06 2026 GMT
            Not After : Jan 26 15:01:06 2026 GMT
        Subject: CN=648c792eec73952d29495b1d0a6db6b2ad18ba6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:13:dd:ae:b0:3f:1f:02:59:ce:18:1c:05:
                    05:b4:72:d8:1a:a2:25:57:cc:4a:ee:f6:06:ad:b7:
                    65:a1:f4:7d:3b:e0:69:3b:4f:9c:7c:f0:65:f3:fc:
                    79:26:27:6a:4b:81:96:bd:4c:ea:e5:09:89:59:c9:
                    4e:1d:ae:a6:5e:b3:54:4d:3f:a5:65:34:af:32:91:
                    e4:f0:1e:a7:9c:a2:34:14:6b:fd:2c:38:93:6b:d2:
                    c9:de:81:46:70:e3:c6:1a:2a:61:a9:9c:7a:c8:e4:
                    ee:99:90:70:7c:c5:41:4b:cf:af:73:54:6e:67:fe:
                    26:82:96:14:1c:98:80:df:25:b9:5c:8b:5d:4e:28:
                    7f:77:98:87:28:c5:76:bf:93:42:27:90:cd:c3:99:
                    a6:e2:96:8e:26:a0:20:49:6d:59:8a:63:c3:b2:bd:
                    4e:3e:d3:b1:1d:56:7b:b8:00:d9:49:60:69:20:97:
                    69:c8:0b:08:55:32:62:4c:ab:2b:29:10:31:1a:20:
                    cd:ea:13:9a:6b:c0:6e:30:d1:7d:f0:b2:aa:0f:eb:
                    b2:a1:d1:b4:80:d5:d2:75:0e:ae:9c:c5:3c:40:b8:
                    7c:a0:d4:92:31:3d:69:0d:d4:3c:bf:e5:bf:02:0e:
                    73:88:f3:c6:23:bc:ec:17:b4:dc:25:f3:4d:cb:7e:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:79:2E:EC:73:95:2D:29:49:5B:1D:0A:6D:B6:B2:AD:18:BA:6F
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:70:f8:95:08:27:1f:38:5e:d9:3e:00:a3:92:91:b6:6a:
         f6:f6:86:9a:71:f7:e1:22:00:31:97:32:40:3a:64:b2:10:b1:
         f1:dc:67:a7:4b:99:43:ae:fb:4f:4a:a6:9f:86:47:88:2d:e6:
         76:19:ba:50:35:05:1c:a3:2f:e2:f5:3a:ea:de:68:ca:0f:76:
         2f:7e:b7:be:9c:77:f4:03:c6:ec:19:b1:f6:1e:84:e8:5d:99:
         61:64:b1:ba:6a:f4:36:bc:59:59:d0:92:cf:6c:24:c0:62:c1:
         e2:c8:d6:29:32:b6:24:60:34:31:0f:b1:91:b8:54:b7:9d:14:
         df:c9:37:dc:4b:ba:68:fb:6b:6e:b4:28:59:cd:52:36:05:3f:
         d6:65:8d:84:51:08:e6:f6:b4:29:31:b1:7c:87:88:88:88:bf:
         9b:d2:46:88:44:1d:bd:90:f2:e3:91:ba:69:93:3d:b3:12:da:
         ac:37:33:48:c0:f7:39:a6:a2:87:a6:4d:a3:46:2b:54:4a:09:
         77:26:53:91:c6:8b:2c:ae:ef:fc:5b:94:08:e3:e1:26:02:c6:
         09:05:77:dc:1a:e3:40:f7:3e:bd:19:9d:91:79:fa:58:dc:dc:
         90:10:c0:b7:6c:c1:bf:0a:da:2a:cb:1a:a4:3d:c7:0f:7a:f1:
         24:f6:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:51 2026 by rpki-client