This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File:                     h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier:          fGfALSmEmjUq01GqgJWgnlA7uscHfOwBe4FPXXTWkWg=
Subject key identifier:   41:47:4F:F8:D0:14:CE:55:3F:0B:04:4C:55:64:72:0B:8F:AA:FE:95
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer:       /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial:       019C1CF1A39FD0388E51EA0BD01B07E1DB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number:          1801
Signing time:             Mon 02 Feb 2026 06:02:03 +0000
Manifest this update:     Mon 02 Feb 2026 06:02:03 +0000
Manifest next update:     Tue 03 Feb 2026 06:02:03 +0000
Files and hashes:         1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
                          2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
                          3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: qXhP9t4VKyYqoqU+/Myre+HMNYlPer867YmOFDRHwEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:a3:9f:d0:38:8e:51:ea:0b:d0:1b:07:e1:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
        Validity
            Not Before: Feb  2 06:02:03 2026 GMT
            Not After : Feb  3 06:02:03 2026 GMT
        Subject: CN=41474ff8d014ce553f0b044c5564720b8faafe95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:c6:a1:50:e7:df:3e:db:82:22:de:35:25:
                    24:74:6a:63:37:86:b1:c4:14:32:b0:82:1a:68:14:
                    94:54:7a:d2:7c:79:df:80:25:69:fe:0f:7b:26:82:
                    53:6e:74:f2:d6:9c:19:35:14:1c:0f:11:64:1b:71:
                    69:79:06:28:7f:75:60:c3:c9:12:b4:db:80:34:88:
                    7b:14:dd:00:75:48:90:42:5a:5f:75:40:be:37:37:
                    c1:4a:a1:4e:3e:a6:d8:fc:d7:67:e9:a4:f7:cc:79:
                    c7:1a:b4:e4:92:7d:d0:0a:ad:e5:4f:28:78:00:3b:
                    2e:2f:e6:5f:e0:cd:d5:81:81:34:6f:30:71:e3:76:
                    fb:0f:82:4b:96:f5:5a:fd:5a:3e:04:63:ea:c6:4a:
                    5d:24:d5:ea:25:97:46:33:71:27:3a:d0:1e:40:8b:
                    fe:b3:ac:2d:af:12:b6:76:58:11:11:c3:70:1b:05:
                    09:58:9c:9e:18:88:f9:37:e4:6e:c8:32:0e:a1:0c:
                    a0:ed:0d:a7:f3:f5:34:ec:49:70:c1:27:61:b6:f0:
                    b5:ad:1a:92:03:22:28:29:ea:a5:5c:9d:f5:82:b5:
                    ef:32:59:fe:ef:a6:5d:06:02:a4:a5:0c:8b:62:dc:
                    66:38:74:f0:67:f4:08:c5:7e:c7:99:5e:24:5c:fa:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:4F:F8:D0:14:CE:55:3F:0B:04:4C:55:64:72:0B:8F:AA:FE:95
            X509v3 Authority Key Identifier:
                keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:e8:66:09:75:3e:f7:ae:ec:36:40:ca:79:1a:7e:40:42:
         a8:2a:4d:d2:8c:ee:26:3a:b4:8c:65:f4:bb:51:e4:44:12:65:
         1a:f3:cb:5b:78:a6:1e:98:83:8b:fd:cb:f9:c5:b2:4f:23:e0:
         21:bb:16:2a:c3:cd:42:c9:2b:65:9b:90:12:3b:f7:06:42:73:
         10:df:68:c4:a9:04:59:87:d5:ef:be:2f:de:23:28:85:9f:b9:
         2d:29:34:2b:b7:60:45:2e:c2:e4:df:56:cb:aa:44:7e:17:13:
         40:a2:f8:cf:80:80:ae:01:b1:e2:64:a8:f9:69:d9:d9:fd:a6:
         44:cf:4e:86:6b:e1:e4:6c:06:f9:1e:36:da:13:37:f7:81:c3:
         b9:0e:04:11:7c:5e:da:57:e2:f2:cf:55:12:82:f5:9c:d1:1f:
         a3:7d:96:08:d3:1e:55:0e:d4:ff:ab:3f:ba:70:a4:46:d4:4e:
         2b:ea:e9:e3:06:72:8e:32:71:f9:be:61:b3:bc:b7:e7:66:76:
         bb:1b:8c:4b:eb:32:5b:2b:47:07:bf:d7:1f:e6:3f:cd:8e:c7:
         cf:82:42:43:b4:11:d4:7a:52:f8:cd:a4:c6:03:99:39:1f:3b:
         b4:c9:87:5b:ed:cb:70:12:9c:1d:cb:4e:4e:cf:c2:58:13:18:
         b6:0d:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:17 2026 by rpki-client