This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
File:                     dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft (raw, json)
Hash identifier:          AUU6syntKIacuZk1l+ljE+Pk4fAKHvJSwz2bFk/9Ots=
Subject key identifier:   BA:F4:22:1B:07:B2:EE:61:32:CC:74:88:8B:32:2D:C8:F2:89:A7:1E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019BF499100DF29D4420A142D36C7A4140AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
Manifest number:          1068
Signing time:             Sun 25 Jan 2026 10:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:30 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:30 +0000
Files and hashes:         1: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (hash: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg=)
                          2: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (hash: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4=)
                          3: 1Waoar8xJafvNKM98KbPPpZpO10.roa (hash: FVUFHFwDvFIi/NS+ywIKrLhu+WhKWGoQsTo08Z+OPm0=)
                          4: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (hash: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU=)
                          5: 3bMwKPGkCpUYdK3M6gxRPzbeOlE.roa (hash: 79Ubn1LP4gtqzeIby6w27GXFentkt53aRIvCQoznPKw=)
                          6: 4Hry2GHWIQNsyjQrTIx9fQN6gB4.roa (hash: gzVtaF4oZV0YS7EVbW+xgNO11PuUAiMDYx+s9V8pZcs=)
                          7: 4T3IbnYh4saIcnPZM7_bM8SrdUk.roa (hash: bQElEoR/i/ETSq5yQpPm2JLHUn2xQq3oHlgi8Prxj7o=)
                          8: 7-kZwIf-1CZXDB44xUuaCP_Yybc.roa (hash: lHpoHnKawYdj1fXu/RtDDjT+nd/iV6bmYgCdfSCr1vU=)
                          9: 7ZDTLwuc17GtsZsMN1ExkVk2x9U.roa (hash: bN7rx+fuzGGRqgrRx4HiLqHFyL7jp2FUiYn5hgrI+gI=)
                          10: Cg5-4-MPHdR8rHLYCSeMDcuN3WA.roa (hash: Cib4HxTsrIRtaj55BTF6+WAR6MahtZRAFeprgaqN1EU=)
                          11: DbHsIS1wsGD5VENgKaURW87eGBM.roa (hash: Pg7LFkTLHIS+tij3rt6g9Emn9DJ6nvCMWnQoCISIDpo=)
                          12: DpKOrE_cvDpYUUmh7MvwmGOWBPk.roa (hash: HH9fYr3P6DqXc1+m5cKoAOtNDzmk8tYbfKtERsO0Vok=)
                          13: En94w1aoQT2Df-plLIO5o_mJDiE.roa (hash: T1Z8KGa2hhTOXx23lLVrR7iImIAiFGfiumitd/czjbE=)
                          14: G1copBYS9CmMlX2FVwkbhIhbgBo.roa (hash: iiTpPKuQy+sIvxdb8BIjv61/rd0bo75wTrkKcwU7rb4=)
                          15: GfvrudqQtadcfEHpprwynTfNYIA.roa (hash: ReY30DmSZMs/0/wYnNlZrGqTcQIT5Z9nTZMHFV2s+iY=)
                          16: HEEBNvj21luiVf4won7bq4ZQmKE.roa (hash: udPIy2ibL7Vj2lt8/UkNkqdezAjsD65iSObaDZOKY84=)
                          17: HSTLkhClz6LRADHXHrCQqqSC04s.roa (hash: s8VSLrC5qvSowdJpecSp5doTo7LDHBtmqawdvNkdw/I=)
                          18: J5hS-MwRa0Pp1Ax-eXmJXTFPUAI.roa (hash: 0OShF4FaS2H4QHgvZ8CoH/llz34UbR5B713YVNSs1JE=)
                          19: JHqDa2vRI-wqNg_Y5rLnrSHRvVI.roa (hash: lz//lyPSLWsPEiRIqlog1rZYWW/jlzMOrQAdZj8R60c=)
                          20: JxkpyyP7d_E-0Cii8CW-5t4BsM0.roa (hash: djpZA96AI3V3aNYhwLJeVpkRf9KyT2JvxMUQr+bsTOg=)
                          21: KBQCvdZ1Fih2U9PEnXZaHYZQKaQ.roa (hash: aJ2vN0uyC0Hga0lux0w4oAz9DV1ub2HSd8DIya7fmtI=)
                          22: LnnTovLuI750TfHC0xewXl7THNU.roa (hash: gnERhSsWK3S4zKeNtNnqJoJ8yYwpR1CtZ/z7wQ+Xm1A=)
                          23: Mo6sIY942w2mOqA6gHPZH1sJxvo.roa (hash: 9P+/MkpETdsVTSW8OwDRt3drUzJjpiPwqRoL7GY/yIg=)
                          24: NWx-3VRYiVj3rInpt0GC-j6Bk1w.roa (hash: aPMqHiIhFTors8hWctYIEhCCvjVaLha58IZgbJT4DOs=)
                          25: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (hash: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4=)
                          26: QwXJQ-gW-nj7udxCnL15rUHQAAk.roa (hash: 4JkftfFeA+8MJJ74ERDuye4yAiHABdPHlYQTJhofoC8=)
                          27: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (hash: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw=)
                          28: SFMYlN0Z7j7jTfVInMfOAfp757A.roa (hash: 61Le/u2BZHTj8JLBDMpSTN47fQq6QVqFLHjwtsxh4go=)
                          29: SQTK66WzLAK8TXDSG7HMSsqFAn8.roa (hash: 1jt/Bil6UdOScDCfuLlT86C9WZy4s6/vQGzui9lZXx4=)
                          30: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (hash: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM=)
                          31: Ub75tOZdOg2xdvFErJ88k7KaSUs.roa (hash: AsFVQQMMcv5/BxrT0qGoB9Hl+vwn3+3VyS/clSKWb8w=)
                          32: WzVSfSCn9MA71szaeG3UuHYtodU.roa (hash: kWQzLXCD3ayRG08QODIsJik0zppGZ5zBgdeluY209BY=)
                          33: Xf46Pw2tgmQ6pve1qLg9BZ7i_dI.roa (hash: D+T6tWOFOaWIc3tUG494jBawlfeKBbjhnuioC/+eLKw=)
                          34: XpKA71gUP1e7UUjZfSVd57bX570.roa (hash: 6PtbKEpVQwlUQzyUCiZ3HIGqzJT0phPeJKaGDFOYcU4=)
                          35: Z_byLoGDwDVZ1uuZ26kOsOZN0HY.roa (hash: bKumZUvmKCZ3xxOhEBADxpM32rg2Z2evEh7LsRdeEbk=)
                          36: aU79596Umtw5a2Y_Rg03LRPN1BA.roa (hash: Bph1g6U7CLK3f0xOwmuRbjpNfRPSDtTfRbBVZmBYogI=)
                          37: b3obsj7bhISGV2ic8E0aogm2GNk.roa (hash: HS7Xi+YLjjvjjAzScsRz2J0IByu2Q4w1qMjo4TBFOow=)
                          38: cK89N5HfyZS7jF6HhZwkXV8Y2Bo.roa (hash: JcqlClpjnKH1fpiTqdXi9LCmWrDRy3adS44+Dzy+IYc=)
                          39: dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl (hash: X/3D5INBotU9Aor1DzOb1rdM/WVqIqzu3vVvrvRY2yg=)
                          40: dwnSi6hIkl-B0bCu7DnKPlNZzLg.roa (hash: sXUyQ4gvIeZM16LhUWSfjJwXhynuc9X7oDXpD7bSzjI=)
                          41: hOBQ2pkA-0KSRD9W7HYv7T_EUBs.roa (hash: WyYXRQPNi7imcTjkFnUupixWz7zRkOa+LoRgnw8jDP0=)
                          42: hSaax3PNMqT-lY0FA2NBN-L2Y6k.roa (hash: TL8+SkkJk80gm8fQRrJdTYhaB9ZhdsTEkaDJpoXwUDg=)
                          43: hdJu7f4kSdt-uKkfr1zrXBPa9Ks.roa (hash: GG98Q1bl7OyANKUpp9Wym8WZdgAzVgCTFjDl+3fraHo=)
                          44: hs7UjWv_36Zyjiol2fhZVpdxnrw.roa (hash: I5NbXUDF0WgFjA2XZZ6Uzv6rmmNPNQowTBKmtDFFOHc=)
                          45: iuklIzN3cd1myy3SDGqaIIPCfVQ.roa (hash: 3qfnX7bi5LJVGXxA1CUbsRAXKqiE2M+t9Nh2aQQGCqc=)
                          46: jypXh21hN7YdEpy4dXX0h1grdhA.roa (hash: 2PCWogNS3NDeaLLtCqO6S4RyV1g0zZ01LBa4NOA2iZI=)
                          47: oFcv4p7EMaZn_-HTYsk7xa8PwmQ.roa (hash: MzH0iIY/I1hIFF9okU9QCTKwly5r1itDctKvuw+/5AM=)
                          48: o_xmKrPL1_AoZs8GvOPm1dKIyhY.roa (hash: bZaaKprcnpy1yZ3w1Gq+0Y+GwujtgYnOL+MJw5ekemQ=)
                          49: qeIYeI4kLeYu7uLRbJocCx_1loA.roa (hash: KvfJJDGtnxUjjU8tM6px0TBivGi+lJc09QKLwJtVPXE=)
                          50: rby-gGvDas1Xa9334DJTczkmtYc.roa (hash: h/3pkwNZ0gwBP4ba5gjKhseXzTn04Qnwy4D9dTEdSQ8=)
                          51: voN8vwWvhtrarGbETBOSasXNWSI.roa (hash: ceFvyVvNqry/EnDK9LeHP842A/ozch+GOGZX3poJEIE=)
                          52: wwKe_5nbJkCZEay725-TDTyy8Og.roa (hash: pMdRZjm2+fkkArj9Ia/EQLb5RslFHxVSqKZVI19kX04=)
                          53: xSlSopVrA7ar-AzHU43kvDoRkZo.roa (hash: EIL/MjiMscFzU/GPSjw2hRcZh5VxPz7Q7L9p0rCpFC0=)
                          54: xtsdMsyk002qfF3jIDsOOIwPf58.roa (hash: OcuaPeFEZzFGGp0t/Q7RlUFdkUOuvpjJGoKZbeYJ8m8=)
                          55: z3gn7O2ArUfbRH7IibkSmLe4aaQ.roa (hash: OBFHoWbMgkm2Gitpb2oBEMkW3r4uU6S8dgFs2hCVQO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:10:0d:f2:9d:44:20:a1:42:d3:6c:7a:41:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jan 25 10:00:30 2026 GMT
            Not After : Jan 26 10:00:30 2026 GMT
        Subject: CN=baf4221b07b2ee6132cc74888b322dc8f289a71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:73:33:a7:25:eb:19:a2:63:43:1e:41:a2:d9:
                    5a:5e:bf:87:60:ab:5b:dc:8c:33:b5:a8:61:78:71:
                    2c:9a:bf:0d:e4:34:3c:f7:7b:05:41:6f:af:0b:7f:
                    c3:88:c2:f1:e6:96:86:52:b3:df:6d:fa:a7:db:13:
                    4b:9f:2c:00:f0:98:b7:de:94:3c:3e:e6:65:45:9e:
                    8e:5a:1f:7c:72:3a:9d:e4:e7:ca:1d:e1:22:85:67:
                    44:ab:da:8f:32:28:66:d6:ba:b8:6f:d2:5d:9d:12:
                    5c:78:20:a3:da:8b:65:69:f3:34:60:78:db:71:c1:
                    e1:e0:b2:94:7b:e2:89:8e:b6:27:a4:0d:db:91:78:
                    41:7e:2e:cc:22:77:a9:aa:32:50:29:fa:3d:e1:ed:
                    bb:bc:e9:35:17:86:ed:e9:da:2c:ae:68:db:e7:44:
                    9c:9f:c3:1b:cc:e5:f3:a3:c9:e0:9f:e8:f8:43:bb:
                    70:4d:fe:db:53:10:9e:17:59:21:7c:9c:3a:98:b2:
                    d4:f6:e8:d5:d0:4b:6a:2c:a0:d7:ef:8d:93:13:b4:
                    eb:e5:b5:2f:45:4e:78:e8:5d:6f:e2:37:64:5d:75:
                    92:6f:45:c3:6b:52:4e:2b:49:28:cf:25:4e:4d:36:
                    ac:35:38:83:8b:63:48:c7:34:96:33:d0:35:77:fe:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:22:1B:07:B2:EE:61:32:CC:74:88:8B:32:2D:C8:F2:89:A7:1E
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:1f:eb:12:46:14:99:ae:85:9c:f4:4f:96:c4:51:eb:c7:
         f7:8c:b9:77:4d:a0:83:ac:6a:ed:ab:c6:fc:0f:25:a7:a7:88:
         09:5b:bb:2c:54:e9:fb:ec:9e:cc:0e:52:b8:b4:4f:a4:a2:bc:
         02:2c:6b:20:12:25:e3:33:70:d9:63:90:2e:32:9e:de:26:71:
         24:3f:9f:5e:29:dc:41:ee:68:c9:d1:18:8c:1c:ee:53:54:bd:
         29:64:6a:4a:94:58:50:e5:7c:3a:ed:8c:8c:89:8a:10:13:b8:
         a4:c5:ef:74:ed:57:fa:af:f3:d7:8e:b5:70:6f:a8:7a:2c:c4:
         57:0e:51:3b:d4:5b:f3:c9:fb:e3:7d:d5:41:7e:48:39:f8:ef:
         14:de:c1:5a:4f:db:1c:fe:91:ce:b4:27:a6:5f:9c:eb:f7:18:
         bf:b1:37:10:4d:d9:58:8b:58:68:97:88:2e:7c:85:00:8c:a3:
         5b:09:63:e6:a5:98:4c:be:b2:f8:a9:85:c5:64:d2:38:68:fc:
         3e:42:ba:da:9e:aa:ff:16:f6:c5:9e:38:b2:97:b5:4e:49:31:
         98:f9:f9:63:7a:34:c9:ff:cf:cf:42:36:ee:02:82:1b:e4:14:
         54:62:fb:6c:ec:ee:1c:80:a6:41:2a:e6:e1:e9:f2:1e:14:f5:
         e2:7a:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:35 2026 by rpki-client