This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File:                     q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier:          M1GaidOhs5VwVf3032unEeVotiwUWowlTXwvtocc/4o=
Subject key identifier:   FD:65:DB:9E:B5:AB:34:D8:D2:CC:AC:D4:D9:C4:17:09:24:DB:9E:F0
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer:       /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial:       019BF42C00555D921E3DAE5101DE791BA17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number:          0D50
Signing time:             Sun 25 Jan 2026 08:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:22 +0000
Files and hashes:         1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
                          2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
                          3: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
                          4: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (hash: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U=)
                          5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
                          6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: DQutyeNOivtcqG8Lx2XXk3QrqrKQwHTdUyTwkdcxzgE=)
                          7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:00:55:5d:92:1e:3d:ae:51:01:de:79:1b:a1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
        Validity
            Not Before: Jan 25 08:01:22 2026 GMT
            Not After : Jan 26 08:01:22 2026 GMT
        Subject: CN=fd65db9eb5ab34d8d2ccacd4d9c4170924db9ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:35:ae:2e:54:fe:50:59:c7:38:ec:d5:05:
                    ad:16:53:66:f5:4e:e5:44:1a:87:58:a5:99:eb:f6:
                    eb:06:74:ef:4f:13:90:1a:8b:d2:5a:1d:93:6e:90:
                    44:08:cd:f4:fa:61:1f:90:8b:ad:d8:c3:4a:5c:40:
                    22:2d:52:36:0c:a8:de:d8:24:08:f8:5f:7c:21:0d:
                    e5:7a:40:29:b6:4d:90:78:8f:98:a2:5a:8f:4a:a5:
                    b5:64:00:1e:da:9e:4f:3e:42:08:3c:d4:5a:a5:38:
                    92:59:2e:57:62:d0:6c:fe:c5:9c:cb:a4:72:d2:c2:
                    72:34:02:76:05:d3:40:e5:97:f5:2c:ee:e6:a2:e7:
                    ad:39:0e:96:e4:98:bf:c3:38:54:f1:7f:ae:e5:50:
                    f3:b0:e0:80:2d:e5:f5:15:3d:85:4e:68:9d:85:27:
                    e2:fb:80:de:9b:6c:6d:68:b4:74:82:55:64:eb:5d:
                    f9:b0:3b:04:ec:c2:4c:25:1d:87:c9:48:f1:dc:cd:
                    a7:a8:d1:87:35:77:0f:38:28:b9:da:9c:a8:a6:2e:
                    50:4b:22:d3:22:b9:96:55:04:2f:83:99:6b:d6:27:
                    c6:5e:a9:5b:20:ae:75:7e:2b:74:ff:ba:89:dd:3c:
                    d2:29:30:a7:cf:61:4b:95:98:ac:35:43:93:77:e1:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:65:DB:9E:B5:AB:34:D8:D2:CC:AC:D4:D9:C4:17:09:24:DB:9E:F0
            X509v3 Authority Key Identifier:
                keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:7a:4d:1d:32:2e:1b:96:33:30:37:e5:c1:d4:be:8b:f7:
         37:5d:a2:93:14:dc:b1:4d:b3:d5:f6:9b:52:5c:71:bf:8c:24:
         d8:ab:d1:82:68:ff:22:b1:5e:93:e1:ea:a4:3a:32:74:f9:c6:
         25:69:c9:87:42:9f:a0:0f:62:eb:59:0d:da:1a:d8:28:7d:58:
         a4:73:8a:1c:d3:aa:27:2d:6a:a6:af:20:d2:88:df:d5:62:e2:
         bb:da:62:17:54:81:51:55:ab:f5:7d:30:d2:83:15:f4:c5:18:
         59:b6:58:6d:a7:07:91:44:43:dd:25:95:d9:ab:d6:b2:7e:36:
         0c:8f:8c:29:0f:16:4c:44:ae:ce:82:dd:5c:0a:36:ec:51:9e:
         23:cd:0e:a5:67:07:ac:85:a6:2f:79:da:d4:ec:a9:3f:cd:3f:
         f3:cb:a3:d5:7e:4d:f6:d1:43:7e:5d:1b:bc:ce:c3:59:0e:24:
         c7:2b:eb:c5:69:67:bb:eb:34:70:7b:0a:33:86:3f:3e:9c:c2:
         4e:8f:39:a8:5e:62:5a:32:21:3c:9d:e5:d1:d5:30:ff:5a:6e:
         55:e9:3f:e7:4b:af:76:39:eb:17:dc:58:f3:b6:e2:98:a8:2c:
         8e:24:bf:3c:47:6f:93:71:f1:ec:05:90:67:44:73:03:38:71:
         54:15:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:18 2026 by rpki-client