This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File:                     QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier:          ywBEN2T2N8YF7rLJ5BMEbDNs69gtQArQ3zYxD+jP7xI=
Subject key identifier:   07:B3:13:50:10:33:58:97:75:43:3E:63:C4:9F:3E:05:F4:CF:C1:A1
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer:       /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial:       019BF8086155C53BCDB599697E88AD955601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 02:00:57 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:57 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:57 +0000
Files and hashes:         1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
                          2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: AoSnnMzaaCLpiYnyVSAEfIQShklkH8dtmp48smsmRdw=)
                          3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:61:55:c5:3b:cd:b5:99:69:7e:88:ad:95:56:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
        Validity
            Not Before: Jan 26 02:00:57 2026 GMT
            Not After : Jan 27 02:00:57 2026 GMT
        Subject: CN=07b313501033589775433e63c49f3e05f4cfc1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:98:d0:73:06:ea:0a:ba:69:2a:35:7a:78:
                    56:83:52:dd:22:99:3d:05:9e:43:27:48:68:2c:73:
                    f5:67:cb:ac:37:1b:25:81:68:3f:65:d4:bd:07:50:
                    f7:66:91:05:e0:b6:60:88:33:a3:8a:e0:7e:88:3a:
                    b3:5e:f5:1a:08:c1:82:8b:87:17:ee:12:77:e0:fd:
                    59:d7:08:a6:1e:d9:74:5a:0a:9e:9d:19:e5:70:ea:
                    7c:eb:7d:7c:dd:59:d8:46:ac:51:77:5e:cc:05:17:
                    81:16:1d:b5:6d:90:97:32:f9:f2:8f:7a:64:cd:c6:
                    e7:50:4b:95:80:c3:3f:1f:8c:b8:a8:79:bf:30:cf:
                    e8:7e:bd:93:f3:49:67:aa:ea:80:fe:d7:47:6d:a2:
                    45:5f:f7:2e:26:57:3e:ee:76:e8:e2:82:e2:c0:ed:
                    02:f6:aa:4d:d7:2e:64:e8:96:73:5f:55:db:1b:73:
                    ff:bb:52:90:4a:b6:2a:cc:73:c3:84:27:1c:d5:b0:
                    e8:00:b0:d0:5e:3d:4d:b6:50:97:a3:da:c7:a6:31:
                    85:45:99:e8:84:3b:67:83:9a:3a:8a:33:39:f4:af:
                    58:56:59:97:e1:11:c5:52:ae:ea:f6:95:6b:2a:83:
                    21:d4:2a:df:59:e6:48:96:58:4e:fe:0f:dd:72:05:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:13:50:10:33:58:97:75:43:3E:63:C4:9F:3E:05:F4:CF:C1:A1
            X509v3 Authority Key Identifier:
                keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:3a:41:54:06:ef:72:58:a0:b4:f2:f7:d5:3b:1c:d1:e9:
         5c:7e:89:2b:c6:26:42:f4:a0:89:31:ec:bc:28:9d:34:be:bb:
         af:f4:d0:21:9d:ac:b1:98:4b:65:61:2f:e0:6d:d5:d2:9f:25:
         90:c2:4e:cc:d0:b5:72:83:a6:5b:38:31:02:49:57:99:0c:c0:
         c4:41:80:c4:73:af:5f:ff:91:a6:34:9c:bd:b0:9b:cd:d0:e8:
         af:6e:13:cf:26:83:8e:15:58:e2:55:e1:53:71:3f:79:5f:50:
         de:cf:a2:99:27:44:d0:ab:c5:5e:d0:54:fb:eb:6c:10:79:97:
         39:0a:89:a9:43:e6:53:fe:a2:00:b3:19:b0:d4:1c:42:26:37:
         44:d2:21:e5:27:40:66:cf:c8:dd:3e:57:81:15:55:07:30:6e:
         5c:65:60:b4:70:1c:5e:92:08:cb:6e:1c:d5:19:1c:6b:2d:a7:
         e6:10:b2:97:da:ec:12:b9:e8:c5:09:e7:14:f2:ec:8a:01:64:
         b3:5c:2d:cc:c6:8f:4f:52:ec:1e:07:e9:1a:ca:bb:7a:5d:29:
         be:72:c8:7b:72:83:c9:b9:29:5e:42:32:46:67:39:aa:24:6d:
         fd:4e:ba:21:39:ac:a8:81:51:4b:9b:e6:cd:ec:af:b2:4d:bf:
         2c:3c:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:44:47 2026 by rpki-client