This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          G4pWdE01Lmn1rWjnsF6NgvIO6iHcbfa37JWUyDefmB0=
Subject key identifier:   85:72:A4:6C:00:42:C8:F6:C7:76:3E:49:55:0C:30:A6:F3:26:2A:CA
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       019BF53E8363E03190E3D5BA20B8D2E38CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 13:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:13 +0000
Files and hashes:         1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=)
                          2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=)
                          3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=)
                          4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=)
                          5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=)
                          6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=)
                          7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=)
                          8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=)
                          9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: nNHky5QyxJcrPO6uPUulyU9eV1HNOLd3+ODrrS6zryk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:83:63:e0:31:90:e3:d5:ba:20:b8:d2:e3:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jan 25 13:01:13 2026 GMT
            Not After : Jan 26 13:01:13 2026 GMT
        Subject: CN=8572a46c0042c8f6c7763e49550c30a6f3262aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:78:e5:81:ef:c6:5e:c6:3c:3d:14:25:90:
                    4b:ac:da:86:92:75:fb:3a:c2:71:00:43:46:5c:ef:
                    67:04:76:c6:0e:60:1a:10:72:a8:0f:63:91:46:7c:
                    12:00:b9:44:20:8d:d9:2e:ff:39:77:eb:09:cf:ad:
                    7c:f5:41:e3:7c:da:26:33:fc:5d:c2:59:a0:c8:e8:
                    5b:ac:e7:47:0f:7c:6c:79:e8:6b:96:84:26:5f:f7:
                    c5:f1:ac:b9:1b:64:28:c6:6a:b3:50:f5:fd:2d:b4:
                    c0:87:87:df:2d:14:da:5a:43:15:fa:dc:64:d3:f0:
                    95:66:87:ab:29:17:e5:41:4e:e6:c3:a3:e3:4d:be:
                    a4:ae:f9:cc:b0:c8:68:21:e1:e0:27:b2:57:4d:44:
                    a5:16:4c:54:17:e5:bd:5c:fc:fe:4e:64:2a:f1:3d:
                    8f:42:67:88:c7:7a:bc:8d:4e:fb:2b:62:74:41:a0:
                    d2:5a:e0:f5:d0:87:d2:f2:c5:99:ad:2c:10:07:60:
                    9e:b8:33:4b:e4:2b:14:f9:3d:28:99:59:58:23:76:
                    25:01:da:6d:59:44:49:8e:db:81:6c:64:c4:58:6a:
                    79:38:8d:b8:e8:df:58:cd:bd:bf:af:78:8d:0c:01:
                    5d:e7:a4:cc:c8:a9:de:18:8f:73:90:ab:fc:14:4c:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:A4:6C:00:42:C8:F6:C7:76:3E:49:55:0C:30:A6:F3:26:2A:CA
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:47:22:96:02:57:a8:02:a6:94:6b:08:fc:78:32:70:59:
         6e:e2:40:ec:42:23:5e:76:1e:ee:34:37:94:16:a7:56:0d:c8:
         cf:23:8f:b1:ee:31:26:88:47:55:b8:10:ee:56:25:99:f4:78:
         e9:cc:09:d7:cc:ca:f2:20:a0:a6:a1:63:c5:66:cc:94:ea:ff:
         ff:de:86:87:f7:3d:ca:59:f9:40:2d:fc:62:44:84:17:89:fb:
         0d:2b:a2:00:42:d9:99:16:1c:87:58:2a:69:8a:c0:3e:f2:e2:
         a3:ce:3c:c8:d5:d0:d0:f1:6d:94:25:e1:45:d1:01:ee:f5:5a:
         22:ed:38:cf:8e:21:23:82:10:ad:64:f5:9a:0e:da:de:be:fb:
         01:2d:26:e5:f7:d2:28:2d:16:b8:a9:ed:a7:5e:ec:5e:28:bc:
         89:e3:84:c7:bd:29:26:fb:d5:24:a2:b8:8e:ad:59:ab:6d:66:
         c6:b9:8d:e4:89:24:66:c2:82:c2:78:83:c3:d2:8b:91:f8:04:
         a3:25:28:87:22:be:f1:fc:98:87:92:bd:7b:b1:7b:48:e6:29:
         41:0f:af:e9:72:dd:b6:8e:71:9a:e0:50:ef:78:77:17:88:9f:
         64:49:24:e8:16:7e:5d:f3:ce:00:3a:e9:19:9c:5c:2d:81:6b:
         42:7f:a2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PoNj4DGQ49W6ILjS44zIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh
Zjk2M2EwHhcNMjYwMTI1MTMwMTEzWhcNMjYwMTI2MTMwMTEzWjAzMTEwLwYDVQQD
Eyg4NTcyYTQ2YzAwNDJjOGY2Yzc3NjNlNDk1NTBjMzBhNmYzMjYyYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R545YHvxl7GPD0UJZBLrNqGknX7
OsJxAENGXO9nBHbGDmAaEHKoD2ORRnwSALlEII3ZLv85d+sJz6189UHjfNomM/xd
wlmgyOhbrOdHD3xseehrloQmX/fF8ay5G2QoxmqzUPX9LbTAh4ffLRTaWkMV+txk
0/CVZoerKRflQU7mw6PjTb6krvnMsMhoIeHgJ7JXTUSlFkxUF+W9XPz+TmQq8T2P
QmeIx3q8jU77K2J0QaDSWuD10IfS8sWZrSwQB2CeuDNL5CsU+T0omVlYI3YlAdpt
WURJjtuBbGTEWGp5OI246N9Yzb2/r3iNDAFd56TMyKneGI9zkKv8FEyqMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVypGwAQsj2x3Y+SVUMMKbzJirKMB8GA1UdIwQY
MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt
OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5
LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4ZHIpYC
V6gCppRrCPx4MnBZbuJA7EIjXnYe7jQ3lBanVg3IzyOPse4xJohHVbgQ7lYlmfR4
6cwJ18zK8iCgpqFjxWbMlOr//96Gh/c9yln5QC38YkSEF4n7DSuiAELZmRYch1gq
aYrAPvLio848yNXQ0PFtlCXhRdEB7vVaIu04z44hI4IQrWT1mg7a3r77AS0m5ffS
KC0WuKntp17sXii8ieOEx70pJvvVJKK4jq1Zq21mxrmN5IkkZsKCwniDw9KLkfgE
oyUohyK+8fyYh5K9e7F7SOYpQQ+v6XLdto5xmuBQ73h3F4ifZEkk6BZ+XfPOADrp
GZxcLYFrQn+igg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:30 2026 by rpki-client