This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          ElGNJOXNNo7ZE5wQAgXn9ldXNMtYQ7pUOP/CUHqNXKQ=
Subject key identifier:   F0:6A:46:07:94:04:CD:B7:20:86:B4:95:7A:BE:8B:01:65:DB:CD:0E
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       019BF988E177D4963229D159EA4D7D396873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          1848
Signing time:             Mon 26 Jan 2026 09:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 09:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 09:00:55 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: nMwpSpLE9+MrDjpjPpANd7hBk+Px5K+6/yV5ZB25PtQ=)
                          2: Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa (hash: 4LzaB4uHCD+cW4z7Pu5qioLqpA0LrFeMNw2vl3XMFVY=)
                          3: KnXx4eRAhlkrUCFooVuR-QOHDzg.roa (hash: eQaKQbGKGJhfyanmW7IOS9a+2NUI2J5OUm83ZGzmaqI=)
                          4: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
                          5: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
                          6: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
                          7: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
                          8: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:88:e1:77:d4:96:32:29:d1:59:ea:4d:7d:39:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jan 26 09:00:55 2026 GMT
            Not After : Jan 27 09:00:55 2026 GMT
        Subject: CN=f06a46079404cdb72086b4957abe8b0165dbcd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:75:f6:94:ce:94:68:21:e3:2b:3b:d2:2d:
                    f2:40:28:20:3e:a6:93:75:50:78:cc:16:30:02:c2:
                    e9:5a:be:c1:4a:bd:17:65:e0:fb:3d:a2:b5:64:19:
                    36:b5:d7:0b:7a:35:cd:ec:82:82:f8:44:57:f9:a0:
                    ac:03:cd:41:f1:a5:04:24:a1:2e:a5:8c:c9:75:4c:
                    2c:34:b3:2e:44:2b:e0:52:c9:2d:b4:2d:47:2b:35:
                    c2:71:45:9e:b0:7f:51:d1:61:44:a9:7a:09:90:ef:
                    1e:8f:79:ef:f2:a1:18:e4:83:e6:4e:5e:e2:1f:e0:
                    68:e9:e1:91:7a:a6:cb:2c:0b:48:d2:af:58:f5:4a:
                    b1:1b:05:f5:49:ab:a2:71:d9:e7:da:bd:49:c0:00:
                    ac:d5:89:64:3f:53:d4:f7:5f:bb:03:b3:1d:f4:51:
                    7b:67:82:fb:cb:2b:b2:2f:93:8b:e4:36:53:24:75:
                    4c:04:d4:1b:48:f5:41:2e:fa:b1:26:13:ab:13:a0:
                    83:4b:28:5a:9d:ba:9a:42:93:fc:cc:fe:e4:ef:16:
                    dc:ec:5d:5a:4d:03:55:01:c1:b3:b0:2b:08:05:9a:
                    e4:4a:9e:93:87:68:89:f2:bd:a9:65:4a:0f:51:59:
                    bc:a9:e0:5d:48:f3:46:af:5b:05:fb:b8:dc:c2:96:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:46:07:94:04:CD:B7:20:86:B4:95:7A:BE:8B:01:65:DB:CD:0E
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:d0:c2:3d:cf:06:34:50:3f:26:de:5d:ab:f1:b6:29:f0:
         41:fe:66:4f:22:04:db:66:68:a7:a8:b6:60:2d:9c:82:62:0f:
         a5:af:77:ab:c6:7f:db:fe:cb:97:96:4c:31:b6:c8:d8:4a:0c:
         39:72:45:42:b0:40:97:c2:be:31:fd:11:46:09:9b:60:26:5d:
         f3:80:c6:d2:d8:eb:59:2a:be:e3:da:f1:fd:5d:9c:13:76:2f:
         7c:e4:d2:da:f0:92:73:e0:e3:e2:8a:71:89:d3:68:17:57:24:
         d3:f9:fe:4e:5a:b4:97:89:dc:51:91:82:2c:67:ff:a3:e7:5f:
         40:c8:4d:6f:c1:56:04:55:1a:80:11:a2:48:78:ca:c3:0c:ce:
         a2:fe:1d:20:77:15:2d:df:5c:a8:eb:7d:0b:94:34:13:0d:4f:
         9a:9c:57:c1:85:38:fd:db:be:5a:7b:5e:48:1e:45:17:ac:d4:
         4b:d2:e6:ea:40:30:24:93:80:3f:21:f0:1f:88:ed:32:39:f8:
         e3:ff:64:65:74:d1:2a:1d:bc:ae:2e:77:8d:7b:03:c2:98:ed:
         ac:91:f3:2d:ce:99:6f:92:90:59:4f:68:9f:d0:c3:d4:73:c9:
         bc:34:d0:71:97:52:8a:93:a6:2e:c8:33:d4:e0:1f:0d:fb:dc:
         2a:ea:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:51 2026 by rpki-client