This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
File:                     rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json)
Hash identifier:          u8RbNVBUVcOhHW9Jt7kL/5jjbYCUXdux38qhosddQTI=
Subject key identifier:   78:45:C5:DC:E6:92:59:2B:39:E9:DB:50:0A:3A:77:5A:C1:4B:5D:9E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       019BF4D0ECDA2B28FD78B48723EF02AACEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
Manifest number:          1832
Signing time:             Sun 25 Jan 2026 11:01:31 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:31 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:31 +0000
Files and hashes:         1: 6rl9pxoMmUQpPP2eQ3Do4fMG-lE.roa (hash: o4FN53RDpAXUNhoW3sb4VAO0VRQ9liUUBpHijBIfQ8U=)
                          2: AdzOgeWlUtmYaTonB2c5IBwaPls.roa (hash: aw2r5oEHfzTNQGoJBf1uD5gPLejQUcUMLKJrBTyN7J4=)
                          3: Cen5PHWd9mIOhy3lRCqJ9Uzoftk.roa (hash: INSlpZiHnf2RhIQl8wtz0KMxYJ1QXkBaL3no7hsopVE=)
                          4: IO4uIW0UIpJOr_RrZ7FJv-NSiAg.roa (hash: 56B95Qp7N2Mi/chLAavTbgyoP/5p8XnoFgB+sRTHGCg=)
                          5: Mq1u4qOomlUhefV0SWNzTRUmwps.roa (hash: +L1VEPPNNBt0OXhwf9f0heC994bRdJErni2gxksz1MM=)
                          6: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=)
                          7: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=)
                          8: VwzSagLMRrSaFchjxg93CUcui_Q.roa (hash: MqEAW7c1jYEir/Z5MPRgPBizS4wC0n5TOsrHPegsEX0=)
                          9: dJMaiK8yGg6KlcWx0LEaKvEQdBk.roa (hash: O0jveRym6VZpPje/Kb/PD73BXm0mXLB3Kv7qRMR7Lq0=)
                          10: f36wSuri4isgGvRNSVH6JQhVoXQ.roa (hash: yoPRFfkeY6wwCb2HhFYtsNc5bsYeGXcwftlwYv52l3Q=)
                          11: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=)
                          12: pAv-Bsp8tidiNV-X89wHnk4J7js.roa (hash: SkRXdDYNgYanVKpb7YSvEL/nLU57SXdHKNIkFI/MAvc=)
                          13: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=)
                          14: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=)
                          15: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: fhH4dAvZcUelxzeB9NzZZoIy8i50NyhToFh2HCvGXgc=)
                          16: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=)
                          17: wUNwGf3weme7_N7kG1xP9AeAxJE.roa (hash: RTXJNRv1wo+Ygeoep6YXJ3IS+lidvBNwP9G7ge528y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:ec:da:2b:28:fd:78:b4:87:23:ef:02:aa:ce:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Jan 25 11:01:31 2026 GMT
            Not After : Jan 26 11:01:31 2026 GMT
        Subject: CN=7845c5dce692592b39e9db500a3a775ac14b5d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:a9:dd:3d:39:cb:65:cb:67:18:04:af:b0:
                    18:a3:4c:85:d7:16:8d:64:dc:54:f8:5a:30:0a:93:
                    45:46:1b:f6:8a:25:72:72:e9:ad:64:02:b2:54:ec:
                    2c:33:08:b5:08:9e:eb:e4:85:d5:8a:f3:c7:8a:b8:
                    04:ff:43:be:b2:8a:08:5a:b4:bc:59:28:eb:ad:0f:
                    3f:80:d5:1c:93:97:5e:7a:52:ab:3c:d6:75:0e:63:
                    f5:8f:1c:2d:54:e9:05:9a:18:53:03:b7:55:12:8d:
                    be:da:bf:e2:f7:28:14:66:b8:97:a1:69:4f:0c:96:
                    ee:f1:45:c6:a2:83:e2:91:bd:20:d5:6d:53:1d:3d:
                    06:2e:b8:26:79:b8:3f:38:fa:16:7f:39:64:59:e1:
                    db:48:d2:0e:0e:01:b9:ab:f6:bf:23:f4:8a:d6:a9:
                    63:87:45:0d:42:c7:af:bd:b1:7f:30:bb:a6:7f:5a:
                    73:26:46:49:17:26:40:4d:5b:1c:fd:1e:60:6d:63:
                    2d:1a:f7:55:7d:5e:73:c9:f0:fa:28:45:45:4b:45:
                    14:f2:5a:fe:c2:0d:22:07:a5:04:be:dc:3c:1b:47:
                    89:85:b7:ed:23:8b:b3:51:1d:3f:b7:b4:6e:35:4b:
                    6e:75:e7:96:66:bb:ee:f7:ae:fb:d8:77:8f:8b:22:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:45:C5:DC:E6:92:59:2B:39:E9:DB:50:0A:3A:77:5A:C1:4B:5D:9E
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:06:a7:4e:cb:e7:2b:34:c4:23:36:56:17:9b:1e:5b:7f:
         14:b1:61:e6:1e:63:96:e4:70:ac:d3:2a:d2:da:ec:21:71:ca:
         21:98:0c:5b:9a:bf:7f:01:3e:c7:1a:b7:cb:bf:dd:05:d1:a8:
         2b:05:b0:e2:f3:60:88:46:7a:b0:0c:b8:5b:b8:c3:a9:70:d5:
         ce:87:0d:f5:83:68:3f:d3:1f:26:dc:60:4a:b0:5c:d0:a0:a7:
         09:df:6a:e3:ee:6e:dc:5a:50:d0:29:0c:b3:6f:f8:75:d8:4b:
         fc:71:36:15:c7:90:8d:8f:2e:d1:66:ca:9c:ac:c1:40:7e:c5:
         f9:f3:cd:32:a1:8f:61:a1:f2:47:39:4e:a3:e9:16:ff:30:7f:
         dc:99:37:65:5a:c7:39:f0:7e:dd:e4:30:b9:8a:07:fa:28:1f:
         05:5a:51:3a:b8:42:cf:d5:3c:c3:94:3d:93:1a:2b:20:cc:87:
         74:8e:9a:b6:b9:8d:f0:d7:5d:50:42:44:1a:5f:4c:a5:17:3f:
         0b:ce:f0:69:99:4f:3e:b3:25:57:0c:4c:d8:f8:95:f9:a5:97:
         04:0d:a4:21:8e:af:91:88:07:8e:f2:2f:22:f8:09:9b:c6:cd:
         c6:b1:bc:99:9d:bd:53:c1:44:d1:85:32:6b:99:9e:b5:32:2b:
         db:0d:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:09 2026 by rpki-client