This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File:                     AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier:          YDqAKUs2Mpim1m3rw7WzHr34Mcl3WvalNUlFlUhxuN0=
Subject key identifier:   FA:77:9B:E2:3D:6B:C1:50:C8:23:B9:03:8A:73:10:EF:8E:37:21:44
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer:       /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial:       019BF9C067E7668D842B6AFA279920CBAF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number:          1806
Signing time:             Mon 26 Jan 2026 10:01:34 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:34 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:34 +0000
Files and hashes:         1: 0CvIXoHsvIs1B_YOF4uDh9JpSxE.roa (hash: 91sFZp4Lna3qg8mUoA4c/ZNk5BvTimCG0r/38G4vor4=)
                          2: 0mnkoAs85-mIhHxZL8fHwKRjWRc.roa (hash: eichc48YsRBfEc1NE+QI5LUu3kO43L633dCSshf5yAM=)
                          3: 5bPw81P_kxJyPAHehBzr4HJ5wlg.roa (hash: 4Hmum3YbvhBsvoDqD6ymCevyNK6B2cZ0Ry/48HKcZ6M=)
                          4: 6xtEtECX1hmiBfg2kCnuxEarwpg.roa (hash: 0EDHjBKP1TdEoYGKNKuRsh3vtzapWrWAjD4dmjk8Vc0=)
                          5: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: rmpPZwodfhmh1QAS/ugJH2GEUNl7RnzIX2i/tftH3zg=)
                          6: FyvKrQlLQZ08OBN_anf4pBjOJb4.roa (hash: +pZffx5xsLckndXmwboiF/Rz+edr9+ScKLx8uBSEPfQ=)
                          7: Jfl2HZOv0aOpTlrzfTjwSjaabBA.roa (hash: 627r3CnYmsat7UpuE0Fbc/64Tgy4fFvd4NcmRN9aPno=)
                          8: yugxSbIwGxz1NU3UI7VHskkezds.roa (hash: SVtVdrynk9VJBORSgvdr3639uF3/kw+eYctyJwd4PmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:67:e7:66:8d:84:2b:6a:fa:27:99:20:cb:af:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
        Validity
            Not Before: Jan 26 10:01:34 2026 GMT
            Not After : Jan 27 10:01:34 2026 GMT
        Subject: CN=fa779be23d6bc150c823b9038a7310ef8e372144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:0a:e1:7a:1f:f0:d5:4e:ec:12:c4:7c:75:
                    e5:e8:af:8d:e6:c9:d0:89:c3:0f:a8:e5:7a:53:56:
                    63:9f:8b:0d:81:33:6f:78:11:8a:84:fe:58:e0:66:
                    ad:51:3a:5c:34:20:a3:af:e8:65:7b:79:80:3f:ef:
                    25:4f:db:33:29:7e:f2:5e:a9:3c:25:b2:f7:ea:2a:
                    99:53:a5:d6:e3:8b:bd:2f:d1:9d:cb:14:ce:6f:fb:
                    aa:fd:b5:cb:47:f0:cd:cc:fb:7d:a1:b1:ce:2b:65:
                    38:b9:0f:a0:7a:a0:20:7b:fc:c0:6c:bc:d0:7b:32:
                    e2:96:c1:cd:0d:5f:8a:c9:01:49:67:46:11:93:df:
                    7b:ea:e1:93:be:92:f1:6f:b3:f6:35:6e:f1:2d:a7:
                    ce:f7:3a:1b:29:43:dc:ff:fc:db:e0:66:6d:2c:f5:
                    15:bf:f7:1c:31:89:95:a6:08:dc:d5:dc:96:fa:4c:
                    a9:ed:fd:05:dd:f3:e7:3e:9f:f1:03:65:75:32:a8:
                    05:1c:9f:2c:d3:38:23:a7:15:05:bb:41:5c:8c:5a:
                    13:41:9e:7d:09:49:d5:f0:02:97:17:a9:f5:7c:36:
                    10:7c:97:d2:b9:d7:22:ac:68:d3:ba:69:68:39:5d:
                    22:fa:6a:e1:6e:82:50:d4:9b:9b:13:4f:a5:fc:5a:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:9B:E2:3D:6B:C1:50:C8:23:B9:03:8A:73:10:EF:8E:37:21:44
            X509v3 Authority Key Identifier:
                keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:8a:9c:e2:24:84:59:8c:ea:1e:9b:ea:dd:36:87:a2:76:
         35:20:8f:c8:08:42:2f:14:bf:bb:3b:cd:2d:80:97:35:b6:a1:
         a0:18:06:5d:6f:a0:5a:46:48:e5:1a:65:07:5b:c0:03:8a:2a:
         0f:09:32:1c:ee:e7:fd:63:21:ae:7a:5d:a1:f0:fd:0d:48:49:
         b7:6e:4d:ca:d9:b1:71:34:fa:24:e7:59:c6:35:3d:c0:98:42:
         b9:bd:4b:1a:ea:6a:19:53:00:63:37:9f:69:cb:d8:a3:a6:1d:
         fc:f9:4d:5b:20:8d:ce:29:ae:cd:b9:a3:84:a7:5f:d8:84:21:
         a7:3e:56:22:7f:9b:d8:d2:ae:fa:fd:dc:f5:54:da:ef:42:62:
         91:16:f0:cb:cb:3f:5f:a2:0a:ca:33:ce:1c:dc:f2:89:7e:85:
         6d:2c:64:23:52:54:fe:7f:d8:74:f5:fb:42:36:e5:dd:de:a8:
         83:af:5b:9e:a4:5b:d7:22:7b:0d:43:e1:d2:47:77:42:a5:96:
         4b:4a:c1:ae:a7:21:91:2e:82:7e:0b:84:76:7e:1a:f6:07:63:
         45:3e:27:0f:7b:45:7a:a7:76:6b:75:08:0d:a1:f6:21:44:3b:
         ae:b7:ad:39:18:c7:49:26:aa:f4:73:ab:16:98:21:d7:87:3e:
         fa:d4:2b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:38:34 2026 by rpki-client