This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File:                     qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier:          oGXoegUI14rJskV/K4dImxwEuKjpNv0LVRMFpDoCrfo=
Subject key identifier:   84:09:A7:EB:B3:03:71:9C:8E:7D:A9:38:17:92:20:29:0C:29:FF:6A
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer:       /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial:       019BF3508F25589344BDBE3428B538DA9CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number:          1458
Signing time:             Sun 25 Jan 2026 04:01:41 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:41 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:41 +0000
Files and hashes:         1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
                          2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
                          3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: kJ+ENMO3TeknedEGQb4miQF4+7J3WhX2lHd0Bjwz+V0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:8f:25:58:93:44:bd:be:34:28:b5:38:da:9c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
        Validity
            Not Before: Jan 25 04:01:41 2026 GMT
            Not After : Jan 26 04:01:41 2026 GMT
        Subject: CN=8409a7ebb303719c8e7da938179220290c29ff6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:cc:5a:5c:6c:18:ce:74:60:3d:71:75:45:
                    b9:ea:0d:6d:c9:a8:89:08:51:99:41:25:76:1b:7b:
                    35:a0:5d:6a:29:68:34:2b:be:b0:7e:07:8d:54:42:
                    74:bd:34:62:9c:dc:3f:76:e2:22:df:e1:6d:84:f4:
                    ed:3f:80:f9:c8:54:5c:0b:a2:7b:39:b8:09:db:99:
                    af:4d:61:d5:55:58:79:83:b5:40:2b:ca:d7:4a:2d:
                    d4:e1:96:7e:36:d5:0e:51:2b:54:7d:26:74:a4:ca:
                    f7:0a:45:13:a7:22:d1:99:e6:e4:2e:81:dd:b1:75:
                    5c:31:75:07:4e:45:8b:bd:05:94:f3:bf:e9:d7:b7:
                    7c:e3:e9:c4:c3:97:a9:0e:19:e6:15:73:e6:dd:b8:
                    c6:db:f0:9c:81:4b:8f:e5:f6:ed:4d:f9:5f:ca:af:
                    f2:65:ff:bd:e8:90:d6:ff:01:15:bf:ee:06:4e:32:
                    b7:8b:b1:ed:84:88:d8:90:96:b0:9e:f7:79:c2:d8:
                    4e:38:26:75:dd:96:ec:9e:7e:97:0c:85:b1:c8:2b:
                    6e:4f:82:4e:43:f1:b9:d7:ab:ee:98:cd:12:bd:32:
                    dc:6f:3d:25:dc:fa:0d:49:e1:c5:75:b6:90:ca:71:
                    9a:bf:a6:f6:d4:c2:c9:51:e9:f5:a4:39:74:9b:d9:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:09:A7:EB:B3:03:71:9C:8E:7D:A9:38:17:92:20:29:0C:29:FF:6A
            X509v3 Authority Key Identifier:
                keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:55:96:36:6f:7b:f3:0b:30:3f:b1:1e:0c:23:46:47:bd:dc:
         e9:ef:a5:4a:b4:55:bc:8e:53:22:ee:ce:e4:7e:ce:3e:75:ee:
         dc:a3:5c:f8:9b:02:a1:75:61:2f:bb:1a:9b:ec:ff:12:78:38:
         31:2f:0d:d4:87:70:11:93:df:40:cb:b1:4c:18:33:23:b6:f8:
         35:7d:42:bb:63:23:00:1c:3e:e5:7b:50:ac:b3:9f:a3:f9:56:
         ad:c3:5a:7e:be:f4:13:9b:71:b5:c6:5a:25:07:de:f8:50:39:
         39:03:c8:35:fc:bc:59:d8:02:96:03:9e:0d:59:38:8d:54:45:
         59:94:5c:ce:ef:ca:18:a7:4c:e9:3f:c2:7e:03:a1:9c:19:45:
         a5:c7:20:1e:93:c1:b5:4a:f8:37:ed:79:3a:37:63:75:12:5d:
         51:fc:42:57:9f:59:08:1a:8e:2c:60:9d:f7:ee:c7:15:b2:ca:
         41:75:f8:f9:18:92:15:95:1c:8f:b3:51:55:b3:c1:ad:a5:f9:
         b0:b6:21:d9:b8:71:2b:70:9a:da:1f:c2:fb:fb:f4:ff:fe:79:
         97:91:a8:dc:40:f5:a8:bc:d0:fa:d8:9a:7d:4b:8e:e7:94:8f:
         8e:15:a0:81:f4:47:68:8e:fd:24:32:db:12:31:df:41:5c:d8:
         a9:94:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:21 2026 by rpki-client