This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File:                     qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier:          3++0j4xTh4N21tXFq1bV7isW5SMMnJ8PQdIvp49Ifes=
Subject key identifier:   80:C6:6C:42:B5:61:B6:D1:CE:CE:4E:9B:8D:27:88:4E:57:C3:13:B9
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer:       /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial:       019BF6F584B47BC6E443C71B5AF9653ADDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number:          1384
Signing time:             Sun 25 Jan 2026 21:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:43 +0000
Files and hashes:         1: H1XFtGY48S7NyteGq9ocooB_ktM.roa (hash: G8R1I1DIiHdtoDh1kdx5LxjS3FgXMSW8e+KxtmIhmMk=)
                          2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
                          3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: 4vLEVA5UgdmP9wVatx67H8V8chm7y7rCO6TgzqLUxKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:84:b4:7b:c6:e4:43:c7:1b:5a:f9:65:3a:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
        Validity
            Not Before: Jan 25 21:00:43 2026 GMT
            Not After : Jan 26 21:00:43 2026 GMT
        Subject: CN=80c66c42b561b6d1cece4e9b8d27884e57c313b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:08:32:7b:c6:12:aa:a6:06:ed:27:fb:4f:
                    46:67:a1:16:6a:c9:f9:6f:f2:3f:73:a7:36:78:79:
                    18:d4:4e:c7:1a:de:98:fc:ca:79:6a:47:33:7e:4d:
                    a5:ce:c0:14:c3:47:70:84:c8:8c:d4:f7:69:33:15:
                    d0:2d:d6:59:a9:35:65:50:a8:30:d5:b2:63:d8:19:
                    e5:24:d5:77:19:16:e6:9c:65:47:a4:35:8d:81:6a:
                    f4:7b:8d:92:bf:f4:38:2b:19:2e:f0:84:e9:b4:42:
                    14:eb:68:d5:a4:5d:e0:b3:b9:65:5b:51:aa:fe:54:
                    18:11:84:d5:5f:47:73:d0:89:e6:ea:5e:a1:eb:66:
                    cb:ed:1d:7c:ee:9a:4b:44:85:be:e2:e6:dd:a8:c9:
                    22:60:b1:87:7c:49:34:dd:92:57:9e:34:80:b0:c5:
                    4d:27:23:7c:7c:6f:28:a9:63:5b:3f:1c:18:bd:b8:
                    6a:d3:dc:67:76:c1:63:ba:81:f3:f5:8f:0a:dd:f9:
                    52:a1:e4:1b:92:c8:07:d3:cd:90:da:c6:bb:48:67:
                    3e:34:f5:c8:e6:d5:87:90:c7:32:b5:b3:9e:fb:63:
                    11:b4:74:60:d3:ab:b9:43:1f:f1:5c:e8:df:92:ee:
                    4c:9c:af:69:96:19:de:01:67:b1:3a:b7:79:70:b3:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C6:6C:42:B5:61:B6:D1:CE:CE:4E:9B:8D:27:88:4E:57:C3:13:B9
            X509v3 Authority Key Identifier:
                keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:66:3d:dd:2c:e1:2b:dd:10:a6:84:02:d2:5e:bb:df:cd:ac:
         ff:84:0a:d4:77:3b:ec:c6:62:7d:d4:d6:a9:79:b9:ca:cf:f2:
         73:2d:db:5a:04:f0:29:43:9f:f3:d8:dc:c5:7e:2d:61:1c:f5:
         e7:ed:39:28:a1:50:cf:08:72:00:90:d7:b9:7f:7f:5b:c9:be:
         cc:c3:a1:4b:63:26:c5:7a:29:cf:5d:8e:f1:a3:de:2f:33:20:
         fe:90:6f:6d:0e:48:b3:5a:ea:7f:29:19:ec:eb:9c:80:4c:5b:
         24:c1:d1:d4:5d:06:0f:c4:d7:36:12:ad:62:95:9e:47:04:ad:
         c3:06:3f:a9:7f:64:7e:40:9e:c7:86:01:d9:2c:1f:23:ee:ef:
         f7:54:e1:26:41:d1:bb:57:1d:81:e7:94:d3:7b:4e:c2:cc:47:
         08:ab:60:89:37:c7:83:ad:f7:af:d3:82:ea:24:b7:ab:81:de:
         9f:2c:3f:92:c4:51:b0:09:44:10:f7:b8:56:6f:9d:46:c9:b2:
         b2:5a:11:5d:49:a5:4c:c9:5a:79:6f:35:ec:c4:7f:ee:f1:70:
         6c:85:de:ad:5a:60:c2:85:ba:89:a7:5d:09:33:f6:59:9f:20:
         e6:c4:9c:f9:57:21:03:60:39:c1:0f:78:14:50:97:b8:ec:e1:
         e1:e8:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:01 2026 by rpki-client