This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
File:                     qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json)
Hash identifier:          RrVDyJRsn7EMoAGzM6ttInXn2KXkLZJZvubIXYhuctI=
Subject key identifier:   AF:4F:ED:2D:94:04:EE:FC:C4:4D:B1:6E:67:E2:63:DF:3B:31:73:4C
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Certificate issuer:       /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial:       019BFC1BD6C88B6ED7D7390AE097ACA85749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
Manifest number:          1047
Signing time:             Mon 26 Jan 2026 21:00:41 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:41 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:41 +0000
Files and hashes:         1: RraYMVrCuJixNGbRQ0z9NDKek1E.roa (hash: AsevObrrGX9qqWXcQtZtj+F6pyw1NJ4ndfCznJ1rbmc=)
                          2: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: Y18DenLvMg2q/sfmdaa+0rdP00UrmeFLagJhQr1eMVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1b:d6:c8:8b:6e:d7:d7:39:0a:e0:97:ac:a8:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
        Validity
            Not Before: Jan 26 21:00:41 2026 GMT
            Not After : Jan 27 21:00:41 2026 GMT
        Subject: CN=af4fed2d9404eefcc44db16e67e263df3b31734c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:67:09:5c:b8:15:82:2d:36:ff:37:99:22:
                    16:6b:50:df:bf:93:cf:da:33:1b:66:6d:0f:e8:26:
                    e5:f9:70:a6:9c:c3:ee:b4:29:39:89:d3:52:a2:1e:
                    36:8d:04:e3:6c:17:c8:f5:82:30:c6:1d:e8:83:19:
                    15:69:79:20:84:e1:f3:a6:36:08:61:cd:9b:e7:26:
                    54:ce:2e:a8:68:ff:75:8d:cc:32:dc:f6:ea:c1:0b:
                    59:06:9e:d2:17:03:31:51:9e:56:8c:7f:fb:45:4c:
                    ee:79:25:79:fb:ee:8e:25:87:bc:76:f8:99:68:7d:
                    bb:87:6d:63:0b:27:1b:5a:f9:70:e5:e6:50:5a:34:
                    b8:ec:43:5a:ed:99:d6:4d:42:31:54:7f:45:4c:ec:
                    dd:cb:37:d6:9c:b3:7a:93:bd:09:a1:aa:c3:70:5b:
                    7e:d2:e9:d9:f7:5e:41:8b:fc:28:29:5b:91:26:b1:
                    3a:30:ca:a7:bb:e8:da:86:d8:d5:6a:a0:04:16:a7:
                    ac:42:89:3c:a2:9c:8a:d9:e4:4e:1d:4f:6b:d6:7d:
                    16:cb:46:75:f0:e2:44:a9:ad:1e:79:2b:2c:51:13:
                    f7:f6:f3:f0:40:34:30:3f:0d:e1:bd:47:78:48:09:
                    5a:56:e1:d0:05:b9:cb:e6:84:39:0f:64:8d:a5:11:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4F:ED:2D:94:04:EE:FC:C4:4D:B1:6E:67:E2:63:DF:3B:31:73:4C
            X509v3 Authority Key Identifier:
                keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:2d:9e:11:9b:a1:18:23:6c:17:20:7c:81:91:24:6f:89:
         66:3c:22:52:83:a7:e9:87:f3:7c:59:2d:85:c5:18:e5:63:2c:
         45:b7:ce:47:43:f6:0f:73:3b:d0:b4:93:95:17:0c:e5:b2:45:
         41:de:89:46:d5:f4:40:b7:b2:7d:20:f5:61:40:76:b6:46:2c:
         e3:26:05:16:77:4f:34:da:c5:d9:b5:0f:90:fb:1f:c0:2c:96:
         c8:97:7c:19:47:77:42:52:4d:b3:f2:31:32:b8:93:f2:00:53:
         4d:04:0b:d8:7a:d2:91:ff:5a:06:08:2e:49:cd:2f:38:b4:22:
         e1:8b:d5:af:d9:b6:82:8f:5f:84:9f:af:93:f2:13:87:3e:f0:
         77:df:49:21:99:7a:cf:64:66:c1:36:e6:83:49:38:11:2f:e4:
         72:3f:7f:fe:27:7e:f3:be:64:9f:5f:39:78:5f:e2:dc:b1:5c:
         20:fa:84:7a:9a:9b:fa:ce:23:5e:28:f4:f3:3e:4e:fe:34:1c:
         67:63:85:a2:7c:4b:f9:1e:30:e3:29:8f:64:8f:c2:2b:03:0f:
         aa:65:c8:c6:b2:8c:91:7a:22:fa:62:87:5e:d2:eb:67:97:db:
         b0:2f:14:8a:27:34:74:f8:4b:3e:ab:8c:c5:ec:c3:a5:09:f8:
         62:b7:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:35 2026 by rpki-client