This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          lQ2y/WhLQFMPcPtFCphwX3Mh7nMPsqbcNglgcv+nQIk=
Subject key identifier:   9C:3D:86:77:27:B9:2F:32:7A:AC:63:3B:98:F0:EC:EB:88:CE:CF:8A
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       019BF12AC71C5C59326E5E77B732A17E636A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          075D
Signing time:             Sat 24 Jan 2026 18:01:11 +0000
Manifest this update:     Sat 24 Jan 2026 18:01:11 +0000
Manifest next update:     Sun 25 Jan 2026 18:01:11 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: y5Gp4gZipQxW7e8gNbLiJBQKpaV+2V7CKkEj48WCmHw=)
                          2: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          3: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          4: 9V3Bc5x26_CKqw7Ae_9X_KqyiVU.roa (hash: Z95UhtYJCDS8JPYEVtM0IffpK2/NPQigmX2/dl4ICsc=)
                          5: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          6: BP6hDr2uQ2nYgOlG8tY0NOwSNg8.roa (hash: YmBSe4wnLWaAt8Ujjj5LQW3vZDohUUE8Kn3s005g3yE=)
                          7: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          8: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          9: K67tfvE4FRSPvLt2l542G0220Hc.roa (hash: b1V/he+PINE8CRmplDLJWQIH+333uWnJMPhoYbftnuE=)
                          10: McFNnzpHzhpmoFZdbzkuosTAsvk.roa (hash: OMKMsdmX4c62QJZWxfllC0dx5TGYtcJXjJaSNIruMhg=)
                          11: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          12: Uy-rnzQ6mVt2jObDgw1OwZPVVlU.roa (hash: tbpO9oX0q67YKRckB09eHJh094tYPyClZhXcLSCboOs=)
                          13: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          14: ZXlNAqhAdXoAODdj2Pl5VkWkVMA.roa (hash: Jb/RiN3sZU7ByrB3NqqPfx86LK/qi2BVbBlBTIG/hmI=)
                          15: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          16: iI7TWndbSJkqALhMzY5VrM0SnWU.roa (hash: uf9YpwQnFfqPIEQIEociQbPinIckaNM2usGoD08ovcI=)
                          17: jThJ8zyPfDON0l1aonw1ID8g1mg.roa (hash: jThi472vhZRzgny5FoiQHNxN0cWcyfPRCG/AaRi78ZE=)
                          18: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          19: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          20: rVy7-T9XXFy0dlyjjLD39cGeNQo.roa (hash: 6jdPPeXKPJmhgA9epTnDfg7qji/7fpVqZOYRPYOWQww=)
                          21: uHeEvudtI10gXPZp_At1Rn0HFFo.roa (hash: g0kiDI0eo7iYfpSxTP76fUJ8Afyuru8rKk/sGNtho80=)
                          22: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          23: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:2a:c7:1c:5c:59:32:6e:5e:77:b7:32:a1:7e:63:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Jan 24 18:01:11 2026 GMT
            Not After : Jan 25 18:01:11 2026 GMT
        Subject: CN=9c3d867727b92f327aac633b98f0eceb88cecf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:f7:11:0d:f4:2c:11:3e:e4:14:fb:c7:3f:
                    51:58:f3:19:ea:0f:ae:c9:08:a9:37:70:1a:41:21:
                    b2:59:d8:77:bb:ee:d4:70:3d:db:b0:8c:e5:51:1a:
                    81:b6:37:6e:6c:4a:8f:94:38:b9:32:89:47:46:12:
                    83:d9:7f:fa:4d:dc:f7:49:39:9c:b5:76:19:d0:0f:
                    6b:26:d7:92:89:1e:cb:fe:eb:c1:4e:d4:8e:a5:bd:
                    a3:2c:26:66:e8:4c:3b:9f:80:7e:c9:d0:fb:4d:a1:
                    ef:5f:42:e1:5c:0d:d3:01:24:c8:61:80:b9:58:68:
                    23:de:92:ca:07:ab:6b:2b:80:e9:16:a5:bf:19:af:
                    6d:c0:85:f2:ef:de:ee:7d:5c:53:ba:13:45:63:83:
                    b7:4e:0a:2a:07:2c:93:ac:dc:bf:0e:52:a4:22:3b:
                    e4:36:6b:d1:b3:e9:f3:3a:ec:72:24:03:32:a8:52:
                    1a:80:79:87:ac:6a:57:aa:f8:e2:f4:2e:39:cd:88:
                    7b:0e:28:e1:c7:dd:3b:43:e1:39:1c:c1:76:5a:04:
                    02:29:73:91:5d:43:a4:8d:5d:b9:95:92:15:cc:9d:
                    41:be:7d:74:dd:1b:b7:ba:61:e7:cd:53:d3:e1:15:
                    be:e8:18:12:56:e3:f3:61:be:28:87:24:4e:a4:c2:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:86:77:27:B9:2F:32:7A:AC:63:3B:98:F0:EC:EB:88:CE:CF:8A
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:ac:5a:49:f7:e6:9d:b3:c3:b7:60:51:4d:78:2b:0b:0c:
         59:9f:fc:cc:42:2a:b2:db:c9:48:94:c7:ea:bc:23:18:77:22:
         7b:b0:bf:69:83:5b:b3:b2:85:73:61:4d:da:5f:ba:15:e7:13:
         24:0b:8f:55:3a:9d:86:81:bd:fa:0c:f4:61:66:b5:fb:d8:32:
         dc:e8:55:a0:87:ac:b8:23:e9:07:4b:b2:61:f4:e0:d6:fe:27:
         8e:38:89:f2:75:47:33:16:42:08:1f:7d:61:71:9f:67:e3:72:
         ce:0c:6a:20:62:00:f8:68:2d:27:c0:9e:86:8f:09:05:ff:40:
         3a:28:4a:e6:04:ad:a0:4d:99:a3:15:97:18:b5:c4:1b:da:71:
         93:07:60:c4:93:a0:4f:ba:8a:1e:ae:55:2f:62:b6:5f:ce:f0:
         3f:a8:4b:21:9d:d2:bd:c0:8e:84:b1:be:d8:26:29:c2:02:d6:
         35:58:ba:e8:35:1b:af:25:4c:18:81:82:54:24:56:2f:13:7e:
         36:4a:8a:5e:57:00:30:0a:6d:f2:46:3b:00:3d:7e:2c:6d:16:
         5c:83:cc:99:58:35:c3:7f:ce:24:25:ba:0f:28:2d:23:71:45:
         14:a2:a5:6e:e0:36:9c:21:1d:b5:a6:3e:c3:6a:8e:b2:a3:e6:
         99:8b:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:42 2026 by rpki-client