This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          PHt5G+scdSxgyCb4/XzIdk/Ca3QDnM7AaPemxIcfKlU=
Subject key identifier:   23:43:5F:52:99:4B:CE:E8:ED:DA:A1:95:87:AA:C6:30:A0:3D:5B:03
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       019BF6F5EF5C96BE7407619896AB6369DD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0EA4
Signing time:             Sun 25 Jan 2026 21:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:11 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: aepfS6E9TO05z7cHzdZ4Vd6y4hG0oaUbxpiagJqIIJU=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:ef:5c:96:be:74:07:61:98:96:ab:63:69:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Jan 25 21:01:11 2026 GMT
            Not After : Jan 26 21:01:11 2026 GMT
        Subject: CN=23435f52994bcee8eddaa19587aac630a03d5b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:56:77:ca:9a:15:06:39:40:8c:73:8a:54:6d:
                    26:4e:b0:29:79:a9:90:3c:4d:d2:28:19:1a:e4:05:
                    08:e6:b0:e0:d2:7d:a0:5a:f4:93:0e:3e:9b:41:64:
                    92:7b:31:ff:12:41:21:62:80:91:27:73:23:94:d7:
                    8f:7a:04:f2:78:ad:ea:25:d7:6a:58:bc:04:a1:bc:
                    a0:3b:b8:45:24:ec:d1:f7:8a:45:a2:17:96:69:a7:
                    db:ef:c2:15:4b:4a:39:7c:5b:a9:d0:3f:c8:49:ad:
                    7c:ef:cd:7f:c7:e4:1b:c0:74:0a:6e:dd:cd:e0:44:
                    e2:cf:3b:26:65:b8:73:d0:86:4f:44:4d:be:47:37:
                    14:57:8b:87:40:fb:50:33:9a:a9:b1:9f:1c:2b:f9:
                    6d:cf:5c:9d:7f:ee:97:53:f5:50:66:5e:b5:5e:ec:
                    24:0a:15:c8:43:3f:c7:61:20:84:14:2a:11:2d:8f:
                    42:a4:ac:0e:68:1c:ba:3d:d5:9b:cd:ee:66:a8:79:
                    15:e9:ce:08:d4:db:48:8b:26:ed:4e:ca:64:77:07:
                    58:3f:be:b3:18:ce:c4:e7:59:9e:f0:04:54:5e:03:
                    ba:2d:85:77:2e:3c:4a:cb:82:35:38:8c:83:4b:a0:
                    37:af:a5:45:98:fc:ef:35:0b:4b:26:64:38:e7:f7:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:43:5F:52:99:4B:CE:E8:ED:DA:A1:95:87:AA:C6:30:A0:3D:5B:03
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:41:4d:eb:3c:ef:6f:60:a6:b7:e9:fa:ed:6e:89:d5:46:
         c8:ea:e4:bd:4a:4e:fd:01:4f:4c:bd:56:96:66:e4:81:ce:30:
         11:8e:88:63:37:e4:bc:4c:e5:a2:06:24:94:80:a6:2d:e7:0b:
         5c:b4:ca:a1:53:e2:d1:5e:46:4b:a1:03:d3:4a:3b:76:29:9e:
         9d:d8:e8:6a:c8:d7:66:4f:03:ca:4e:42:a3:25:5c:e9:30:43:
         8c:85:6a:7a:91:b2:9d:5a:22:18:9d:a5:90:96:63:2c:25:d6:
         7b:8d:a1:c9:c2:e4:fc:2a:e1:08:9c:82:d6:93:23:2e:44:63:
         60:86:22:a0:30:37:59:fd:9d:3d:d0:0d:19:07:b8:c6:8f:e2:
         e6:c2:7c:48:42:6a:30:10:61:25:e8:58:92:06:1a:30:b1:39:
         9a:de:53:3b:b4:4f:4b:38:c4:77:57:a0:2c:3b:37:0e:9c:85:
         20:ad:98:d7:d7:f1:0c:49:53:b4:fe:37:1f:60:b5:81:a3:5d:
         01:27:81:d0:d1:72:3d:08:c7:12:24:9f:00:93:34:90:65:ba:
         bc:6e:b8:ed:d1:a4:6f:7c:69:f5:b2:71:91:7e:3d:33:cd:b4:
         62:dd:e6:67:7f:b6:54:1c:c9:84:af:5e:dc:03:57:44:36:f9:
         b9:a2:58:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29e9clr50B2GYlqtjad0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWM4MDBhYTFiNzhhMTdhNDNlMTlmZDk5MzgzNTVkMDQx
MWU5NGEwHhcNMjYwMTI1MjEwMTExWhcNMjYwMTI2MjEwMTExWjAzMTEwLwYDVQQD
EygyMzQzNWY1Mjk5NGJjZWU4ZWRkYWExOTU4N2FhYzYzMGEwM2Q1YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VZ3ypoVBjlAjHOKVG0mTrApeamQ
PE3SKBka5AUI5rDg0n2gWvSTDj6bQWSSezH/EkEhYoCRJ3MjlNePegTyeK3qJddq
WLwEobygO7hFJOzR94pFoheWaafb78IVS0o5fFup0D/ISa18781/x+QbwHQKbt3N
4ETizzsmZbhz0IZPRE2+RzcUV4uHQPtQM5qpsZ8cK/ltz1ydf+6XU/VQZl61Xuwk
ChXIQz/HYSCEFCoRLY9CpKwOaBy6PdWbze5mqHkV6c4I1NtIiybtTspkdwdYP76z
GM7E51me8ARUXgO6LYV3LjxKy4I1OIyDS6A3r6VFmPzvNQtLJmQ45/eT0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNDX1KZS87o7dqhlYeqxjCgPVsDMB8GA1UdIwQY
MBaAFKscgAqht4oXpD4Z/Zk4NV0EEelKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMt
NTBjYmNiNWIxOWMyLzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8xYjFjYTAtYmJmMi00NDE5LThhMGMtNTBjYmNiNWIxOWMy
LzEvcXh5QUNxRzNpaGVrUGhuOW1UZzFYUVFSNlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4RBTes8
729gprfp+u1uidVGyOrkvUpO/QFPTL1Wlmbkgc4wEY6IYzfkvEzlogYklICmLecL
XLTKoVPi0V5GS6ED00o7dimendjoasjXZk8Dyk5CoyVc6TBDjIVqepGynVoiGJ2l
kJZjLCXWe42hycLk/CrhCJyC1pMjLkRjYIYioDA3Wf2dPdANGQe4xo/i5sJ8SEJq
MBBhJehYkgYaMLE5mt5TO7RPSzjEd1egLDs3DpyFIK2Y19fxDElTtP43H2C1gaNd
ASeB0NFyPQjHEiSfAJM0kGW6vG647dGkb3xp9bJxkX49M820Yt3mZ3+2VBzJhK9e
3ANXRDb5uaJYVw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:02:37 2026 by rpki-client