This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          wcOoCvObxTqmhPHqkBTipV5ruz0ePWGeLrcTAdaDoVs=
Subject key identifier:   6F:08:EB:9D:98:7E:43:47:DE:50:80:E5:D3:23:EA:C9:CC:34:C2:93
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       019BF42BB453D6F093D92F99DE883C5B2D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1808
Signing time:             Sun 25 Jan 2026 08:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:03 +0000
Files and hashes:         1: 1EIOosMYuD73h9CRUOVLrDf2lBk.roa (hash: BJYCiLgwQZEOXx4/ggwCHkEwe20mmZnB00Jyo+D3/6k=)
                          2: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          3: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          4: 7pIMIhuGxXcE3W7zciFIP5BEo_k.roa (hash: mE/zLPchlQyoVv0rtLgnlONfnqRwLmeY7eY7SowuKF8=)
                          5: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          6: FfL73uShzwqZVNoRtUTTUlqkYtA.roa (hash: fZCZHAPoxQlmosPyGQ71gASDy0FXd3AMU+JCShnhFxI=)
                          7: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          8: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          9: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          10: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          11: S6Hd3FrMpHr5gvirr8r2mfbNpH0.roa (hash: 4FAbzOC5Rxxuxqqf2z3xB7vLnXd0RHMz4zlLK9WWbfU=)
                          12: V35GfWnaB7P9WFAGfej3egVtdLc.roa (hash: jVs3XnWjkIkaNHtOAb33xGPFvncaOX/lvX3i2amHLDQ=)
                          13: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          14: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: mzqncvF83muI7nSOutwkr9Lv7LxrmHQip6c8PYX21fA=)
                          15: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          16: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:b4:53:d6:f0:93:d9:2f:99:de:88:3c:5b:2d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Jan 25 08:01:03 2026 GMT
            Not After : Jan 26 08:01:03 2026 GMT
        Subject: CN=6f08eb9d987e4347de5080e5d323eac9cc34c293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:88:f1:dc:68:a7:63:17:54:10:f7:91:38:
                    df:b1:db:73:c2:47:91:6f:c5:f7:4e:df:ab:98:8d:
                    06:40:2b:37:f9:50:7e:10:7d:5b:86:01:1c:3d:43:
                    01:94:ed:83:8f:a4:02:d6:63:0f:15:f8:b8:ea:6d:
                    1c:e4:9b:8e:a4:d2:57:78:fe:a5:b1:d6:75:d6:44:
                    40:cb:37:f7:76:63:f8:6a:53:a7:e5:1d:71:0a:42:
                    82:0b:f2:6a:3b:1c:e7:8b:36:d2:ec:44:85:3b:1e:
                    fb:10:0a:6c:02:09:75:df:ab:03:e2:f0:94:51:90:
                    60:48:80:d6:56:26:5f:0c:06:3f:16:b4:ee:4e:f2:
                    66:47:12:03:8c:b8:be:fc:33:51:f3:70:d7:13:93:
                    a4:e6:ae:60:45:69:97:ee:fb:1f:fe:64:90:b2:1a:
                    f4:ea:c6:44:ca:bb:f1:d5:2f:ec:90:e1:00:cc:11:
                    58:98:01:10:c4:25:d8:bb:6f:28:7e:79:bc:8f:a6:
                    46:54:8b:a0:9d:69:01:5d:a3:6d:89:bb:3e:bf:2a:
                    36:3a:80:2c:97:a8:ec:87:e7:ec:3a:b9:18:57:43:
                    78:d2:17:2b:5d:f9:73:36:68:88:6a:2c:69:f2:02:
                    ef:09:b8:db:0b:65:c7:09:1e:37:cc:ff:fb:6e:ca:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:08:EB:9D:98:7E:43:47:DE:50:80:E5:D3:23:EA:C9:CC:34:C2:93
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:ff:45:11:ff:df:85:59:dd:23:5d:d3:44:2d:8e:97:38:
         3a:7c:a6:d9:fc:5e:3e:96:0e:70:a4:21:06:53:4d:ac:6c:27:
         f4:1e:24:c0:34:9f:9f:34:02:b0:cc:50:0d:7f:58:78:00:4a:
         0f:04:cf:33:b0:0e:6a:52:4e:eb:85:cd:f9:2b:8e:bf:27:d8:
         d4:90:87:30:ca:7a:58:2c:97:75:8d:48:9c:da:c1:a0:40:aa:
         ac:e1:ef:ff:9c:33:d5:94:51:ef:29:8a:ac:e9:bb:86:53:fd:
         ec:21:0e:b3:4e:da:9b:89:a7:2d:87:a8:12:41:68:ec:f0:d9:
         b2:38:22:d2:59:0a:a4:44:62:60:38:b6:be:f1:ee:2b:64:24:
         d9:44:e3:08:3c:37:2c:f1:7a:00:61:83:f4:37:5b:7b:12:b1:
         87:3b:9a:36:3a:19:1a:ad:a6:42:40:f1:fd:03:9b:83:26:2e:
         ae:a2:5f:13:4f:4d:b4:56:1b:4a:eb:12:c7:9c:4b:79:04:de:
         ab:f5:d7:6b:ba:86:f0:56:8e:db:24:a7:6e:69:14:7a:6e:49:
         5f:fe:23:cd:21:12:dc:49:00:c8:ee:1e:d7:f5:6e:61:82:6c:
         77:80:e0:51:98:21:88:f4:24:ed:96:5b:8d:6e:b0:4b:7d:51:
         be:9d:82:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:26 2026 by rpki-client