This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          p3ZGdIQ1UBybDkaf2Q5zXz2aKZSCX2Y58nxtEAUqAwE=
Subject key identifier:   EE:29:95:83:FC:34:63:74:D1:68:27:38:68:D1:97:73:B4:F5:75:55
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       019BF68779BA9E9DD6BF1B31B5A1107C0555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          0D46
Signing time:             Sun 25 Jan 2026 19:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:32 +0000
Files and hashes:         1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: MMaq4mw4U4b/821P85b2ySAtUZsEK0UGwgli9seBtbQ=)
                          3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
                          4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:79:ba:9e:9d:d6:bf:1b:31:b5:a1:10:7c:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Jan 25 19:00:32 2026 GMT
            Not After : Jan 26 19:00:32 2026 GMT
        Subject: CN=ee299583fc346374d168273868d19773b4f57555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:82:b4:a9:a1:04:f0:ed:dc:7f:d2:f8:8a:
                    10:4c:05:e5:b0:09:86:ee:12:aa:f2:d2:c9:36:32:
                    dc:2a:aa:45:92:cf:05:88:db:0d:36:2b:df:50:4a:
                    d2:ce:98:c4:dc:b2:cc:82:63:7f:58:12:20:9c:c3:
                    cf:27:49:ba:8b:b0:65:5e:6f:a9:b6:c1:c7:d4:19:
                    63:4d:8d:20:e4:a8:d2:72:c4:3b:a1:7f:93:f5:93:
                    8f:29:12:c2:a1:de:3f:33:ae:ce:e2:2a:1c:f4:20:
                    54:3d:56:48:00:aa:a1:d9:d3:9c:09:51:0b:e0:4d:
                    68:a5:33:7c:7e:6b:e0:b8:73:f5:4f:52:af:b4:19:
                    56:05:da:52:32:d9:40:42:ec:a6:5f:f3:c0:6e:bc:
                    3a:02:73:f6:f0:30:47:11:d2:5d:1c:82:18:d4:11:
                    45:3d:b3:6f:2a:ec:f0:6f:a2:c4:9e:0c:ec:35:af:
                    cb:d2:71:5b:ef:45:62:29:ee:b5:0b:4a:c4:6c:95:
                    80:8e:5e:0c:c5:16:ea:d3:0a:8f:30:f2:3b:f2:a8:
                    3d:ad:d9:eb:fc:11:d1:a1:25:79:93:9b:b8:a5:98:
                    51:5a:88:75:7c:87:f7:28:e4:75:4a:40:6a:c2:1a:
                    c1:b8:e6:7d:d7:c6:1b:cf:56:14:18:ce:0f:d2:e7:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:95:83:FC:34:63:74:D1:68:27:38:68:D1:97:73:B4:F5:75:55
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:79:f0:8a:c7:af:a4:13:07:90:b6:fc:70:0b:ee:84:6e:
         01:e7:11:3c:b9:ea:46:be:b4:e3:05:06:fa:a9:a2:c0:bd:24:
         fe:34:e7:b9:bd:a2:3f:97:ae:54:18:db:f3:5a:9a:eb:11:87:
         5c:32:14:f8:65:df:b3:f7:f1:63:b7:66:9b:59:d0:1f:8e:bc:
         3c:28:2c:c7:a5:ae:91:67:6d:02:93:1e:90:18:4d:08:63:43:
         0a:0f:01:06:29:a0:84:5a:19:19:4f:51:cd:ca:91:b5:d5:f0:
         0d:39:c0:a4:5b:d3:48:a1:0a:91:e8:02:19:bb:00:6c:88:35:
         c0:73:2c:bd:7f:74:8d:76:25:8d:8b:6a:8d:e2:b4:17:3c:2b:
         64:40:fd:cc:ce:97:ac:f6:b7:3d:42:88:bb:f5:95:02:7d:3f:
         91:f4:cd:f9:01:fd:3f:79:45:d2:1d:bf:b0:d5:5f:62:75:56:
         68:87:b5:d6:53:c6:5e:10:b1:8e:f0:3a:e2:d5:b1:3c:17:0a:
         0a:5a:ed:3f:fa:59:03:ac:2b:75:8d:ed:cd:cf:65:25:7a:3e:
         d3:1a:b7:f3:29:b2:f5:8a:09:c5:af:b7:3d:91:1c:1f:69:42:
         fd:23:a6:95:0d:c8:09:e4:87:b2:5e:76:a3:e0:68:f0:91:40:
         84:5d:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:51:51 2026 by rpki-client