This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          Bd3S5MCapnmozW7w96CCey4osF5kzgdNgm/yLTitW2Q=
Subject key identifier:   DC:6A:D7:77:25:B7:10:C5:DD:A2:84:40:41:82:C5:27:16:89:E9:CF
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       019BF6509DE22377DACEAC12BB13BFE64543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          173D
Signing time:             Sun 25 Jan 2026 18:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:36 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: dbbzixib6zPvuzFXmFly4R5Nha9YmxO5fs0TEDOSbX8=)
                          2: vUZltBKcGS-PyNExw351SsPo8f0.roa (hash: R88L+/UM9Ub6dUxPG9JUIXyMGiUf8ahmjgxxPz1xB4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:9d:e2:23:77:da:ce:ac:12:bb:13:bf:e6:45:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Jan 25 18:00:36 2026 GMT
            Not After : Jan 26 18:00:36 2026 GMT
        Subject: CN=dc6ad77725b710c5dda284404182c5271689e9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:a0:5e:0f:7a:e2:d3:63:8c:9c:fc:c2:a4:
                    ac:80:a6:35:ef:31:4e:4a:f9:49:ae:d9:a6:89:b9:
                    1e:4f:0b:fb:64:f4:0b:47:36:08:3c:f1:f9:57:a2:
                    f4:2a:a4:de:71:a2:7d:c9:20:96:a6:4f:06:7d:09:
                    ad:32:8e:5c:9f:04:18:82:c6:e6:c1:0a:6c:9d:ca:
                    2e:2e:0c:2d:a2:64:86:92:3e:76:c1:63:65:9c:51:
                    d7:8b:4c:4a:78:e7:26:13:ab:b5:a6:f8:20:e1:5f:
                    13:1e:07:24:2b:2c:4f:75:a6:03:ac:66:14:c1:56:
                    77:33:64:4d:31:03:79:57:fb:d3:ca:9b:ef:6b:47:
                    ca:17:e8:b8:2e:ee:ca:1e:1e:4d:97:4c:8b:9c:5c:
                    89:49:22:1c:1c:d1:26:8f:d9:14:01:51:b7:6e:a9:
                    d5:a2:f8:90:ef:ff:d1:b6:9c:4d:b7:13:8f:1c:cf:
                    c7:45:40:da:1c:f6:fc:6f:74:42:62:08:8c:2a:a1:
                    02:ea:47:20:f0:98:9a:3b:cf:20:ad:c5:35:ff:07:
                    8a:3b:46:e7:a1:38:aa:20:74:ff:79:94:a5:ac:06:
                    5c:cc:59:ec:3e:68:cd:eb:20:eb:1e:e7:bf:7f:66:
                    9e:a9:fe:4b:ac:66:28:dc:39:7b:25:95:93:bd:02:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:D7:77:25:B7:10:C5:DD:A2:84:40:41:82:C5:27:16:89:E9:CF
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:9b:17:f3:b2:d5:ed:6c:b2:de:66:41:28:34:b6:8a:a2:
         39:50:ed:fb:48:77:02:32:6c:61:e2:03:7c:1d:77:41:6d:2b:
         f1:9b:6b:07:1d:6e:5f:6f:ed:f1:c9:be:87:c3:ab:fa:cc:fd:
         8b:fb:f8:05:b1:af:23:55:d7:2b:87:c9:06:ba:28:9f:f3:e0:
         89:64:b9:d7:4c:92:b3:81:0b:0c:58:4b:90:e4:04:e3:9c:77:
         5b:41:7c:c3:29:a8:8b:6d:c0:17:b2:18:2b:bf:4a:da:da:d2:
         f2:50:d2:d2:33:b2:a0:e2:d0:01:b2:11:77:8f:e4:f7:dd:c7:
         3e:5e:b5:1c:b2:84:5e:8a:1c:ad:bf:59:90:7c:95:e3:ee:0f:
         f1:4a:ae:b7:77:50:02:8e:e4:b1:5e:b9:10:4f:fd:b6:08:ae:
         dc:f6:8f:7a:99:06:09:35:3f:38:4f:fb:7d:a7:6f:e8:c2:6f:
         09:a3:69:99:b4:fa:77:49:7a:5e:f9:98:10:94:98:cc:4b:41:
         c4:27:02:99:eb:a8:31:ce:ca:7d:5b:1e:e3:f7:78:f0:26:64:
         8c:b0:d1:ed:35:b1:d9:cc:6a:4e:dc:40:78:62:6b:c1:12:a0:
         6d:e7:1f:80:06:c1:28:55:6a:1c:26:e7:45:a7:97:ef:b1:41:
         91:84:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:53 2026 by rpki-client