This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          t0S9u4Y1jmk9a3Y7VtPD2nGVs9stTdyDofsSrq2B76U=
Subject key identifier:   53:AB:E6:74:34:82:71:A2:C6:43:19:79:5E:24:F4:01:20:4B:4A:31
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       019BF463018451201C6AC9883472F083E0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 09:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:27 +0000
Files and hashes:         1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
                          2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
                          3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: SmmiYQTE5HUzEHKeJyAb3fULCYsmerwpeFaAutk5ncU=)
                          4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:01:84:51:20:1c:6a:c9:88:34:72:f0:83:e0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Jan 25 09:01:27 2026 GMT
            Not After : Jan 26 09:01:27 2026 GMT
        Subject: CN=53abe674348271a2c64319795e24f401204b4a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:8e:b9:32:23:90:01:2a:1a:7b:f7:dd:51:
                    9b:7e:bd:d3:8b:32:83:9d:7f:12:cf:5d:75:9d:c1:
                    13:b4:74:1a:b8:d7:34:dc:c8:e5:1c:d7:1c:31:ea:
                    e0:1e:71:8a:08:36:b8:f9:4c:d1:a6:e1:d8:0b:08:
                    13:6f:61:c5:ad:a7:cf:5f:87:05:96:58:fa:d1:69:
                    ed:81:1e:a2:bf:64:48:66:f3:0a:a0:d0:d5:b5:1d:
                    df:79:97:97:46:f9:bb:1f:66:a5:6f:4c:52:53:22:
                    27:a1:38:d3:f5:3a:8d:18:62:6d:f7:68:bf:0b:df:
                    18:eb:88:43:ec:ca:d5:54:2a:71:0a:14:3d:42:b0:
                    68:51:4f:02:06:79:de:0e:c7:30:ee:dd:b8:44:a7:
                    ea:4b:74:0f:71:b3:e7:01:c2:96:0b:cf:71:0e:24:
                    58:40:6a:04:9e:a7:59:4c:5f:bc:08:f6:86:51:9f:
                    24:09:cc:d6:05:46:b4:c5:cf:ff:25:81:e4:88:6f:
                    78:f9:b4:fe:91:72:75:25:5e:0a:72:fd:df:c7:32:
                    77:5c:20:64:b0:85:dc:41:99:39:8a:90:44:15:1f:
                    72:d6:41:86:5f:48:97:1c:6e:ea:65:97:c6:3b:8e:
                    2e:2f:d3:36:34:a0:9f:13:d8:b4:48:5a:e0:10:8c:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AB:E6:74:34:82:71:A2:C6:43:19:79:5E:24:F4:01:20:4B:4A:31
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7a:e4:5a:9b:25:01:8a:e1:f0:de:a0:65:c3:84:fc:87:a9:
         63:bc:71:2b:8d:95:53:8a:39:16:97:51:85:1f:12:aa:b8:05:
         7e:78:ea:9a:d5:b4:3d:ca:6a:da:04:c0:1d:56:fc:51:6b:ef:
         5e:2c:d4:4f:4e:7e:7f:f6:56:57:2a:e1:bd:57:ee:f1:ad:8b:
         cb:40:d5:4a:26:bd:46:d5:99:7e:18:e7:6e:b3:94:2b:8d:c2:
         4a:bb:93:df:84:d6:58:30:2b:68:a4:1a:c8:9c:66:82:29:04:
         81:de:10:67:0e:ed:60:da:ee:6d:65:df:a5:4b:bc:98:7b:1a:
         de:ff:37:b3:4b:04:6b:91:a1:89:28:34:17:5f:69:08:49:57:
         89:83:ae:56:f0:cb:b3:85:11:7a:f1:8f:4f:b8:b2:76:19:12:
         21:95:bb:0e:7f:57:f4:6d:5d:2a:9e:2a:fe:fa:a0:8f:10:ae:
         e4:fc:3b:5a:c0:8b:92:a1:ae:33:ee:00:33:20:ec:aa:19:fb:
         99:bb:d2:d8:67:f3:02:df:26:68:e6:9a:79:cd:8b:41:e4:93:
         2f:c3:c3:b3:13:5d:4a:05:29:fa:ba:3f:04:ab:62:f5:fb:09:
         fa:ef:66:a9:77:6a:9c:b2:9c:b4:02:b2:44:13:80:4a:3f:bc:
         45:f6:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:43 2026 by rpki-client