This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File:                     qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier:          UMF3pvH5L/+HkQ3JwBGTd6jW95wpihGZZwwmPk/WXjE=
Subject key identifier:   4E:CF:48:78:9D:9C:61:63:12:F5:B4:53:43:D1:FF:9C:C3:50:ED:C4
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer:       /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial:       019BF5ABCA1AF688D9C3AABE39CAE98FA154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number:          15B8
Signing time:             Sun 25 Jan 2026 15:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:34 +0000
Files and hashes:         1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: BCHTADo0OEWnd1vvzLqKSbx7Cuj4LGlAkUqngQmOyRk=)
                          2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
                          3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:ca:1a:f6:88:d9:c3:aa:be:39:ca:e9:8f:a1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
        Validity
            Not Before: Jan 25 15:00:34 2026 GMT
            Not After : Jan 26 15:00:34 2026 GMT
        Subject: CN=4ecf48789d9c616312f5b45343d1ff9cc350edc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:9a:e9:73:82:4d:ac:6a:4e:6e:67:73:f0:
                    cd:2f:8e:e7:52:f5:4f:a3:fd:25:d0:64:1b:d1:4a:
                    a0:e8:24:26:84:66:fc:34:31:ae:61:9b:75:b4:16:
                    e3:3a:1c:51:83:09:82:40:81:e1:d0:70:43:b3:fb:
                    ed:be:ab:85:dc:5d:e1:0a:04:5f:aa:b8:6d:28:f2:
                    d8:04:2c:cc:7b:6e:15:33:42:1b:c3:46:8a:a0:2e:
                    0e:5a:af:cc:ee:f2:9b:ad:ac:98:f0:7d:cb:67:cc:
                    70:df:8a:61:ac:dc:c8:69:e6:ff:c4:b8:9c:cd:56:
                    1d:d1:54:59:40:cd:59:99:a5:f2:d6:de:fe:8c:87:
                    8d:9d:21:8f:93:c9:fc:3b:2e:af:f1:15:7f:78:39:
                    11:f5:75:fc:5c:0a:8c:1a:34:e3:ff:1d:67:50:7f:
                    cc:ed:75:33:64:db:45:f3:7f:5c:7e:d4:83:0e:61:
                    e7:7a:1a:b3:f8:c3:fd:21:9e:3c:e1:32:b6:91:1b:
                    9f:38:02:ed:cb:30:47:0a:2c:9a:b6:a7:00:67:54:
                    02:6c:94:08:b4:a4:25:f3:7a:15:2d:69:b2:97:30:
                    b8:9a:02:c1:38:7b:13:b8:e3:02:b7:38:fe:b2:9d:
                    7a:40:c7:e7:30:06:31:e7:0e:9a:da:33:a5:86:10:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:48:78:9D:9C:61:63:12:F5:B4:53:43:D1:FF:9C:C3:50:ED:C4
            X509v3 Authority Key Identifier:
                keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:cf:a9:4d:b4:73:94:9c:0a:e7:a9:76:ac:ef:e3:6d:11:
         91:d7:24:6e:32:9b:90:ad:64:34:81:84:40:af:f7:c5:35:e6:
         fb:62:21:1f:48:1b:8c:0e:49:0c:de:26:41:8b:49:4d:a6:2a:
         2a:1c:87:cb:83:91:9f:b7:b0:da:0c:43:0f:56:04:74:62:92:
         20:26:35:ae:92:08:31:cc:b6:c7:df:46:af:d7:13:ae:71:8c:
         5a:50:23:2f:78:62:d2:d1:ab:67:07:4b:b6:e7:fb:c0:de:93:
         da:7d:82:e2:4d:34:ff:62:c3:59:b6:aa:34:09:e6:e0:76:95:
         b8:37:ab:d4:34:34:8e:2f:7e:87:37:6e:f4:bc:f6:e0:1b:28:
         1d:42:34:5f:6e:22:5c:f0:c1:7d:6e:67:7d:2f:8f:c9:a3:67:
         b7:30:d4:af:cd:37:46:cc:bd:33:d8:d2:d7:47:71:72:b9:0f:
         7f:1f:80:9b:83:29:8b:da:42:0b:f6:db:11:e9:67:2a:ae:46:
         e9:90:1e:32:1a:05:f4:4d:e1:00:2c:27:63:9e:a9:3a:95:bc:
         11:46:1c:46:b9:b9:1b:9a:ff:76:6a:e8:40:4e:63:dc:69:fe:
         4f:21:9c:4c:15:55:12:d6:f8:7e:cb:3f:ca:21:c6:7d:ad:97:
         0a:a9:ff:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1q8oa9ojZw6q+Ocrpj6FUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1
MTI5MzkwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD
Eyg0ZWNmNDg3ODlkOWM2MTYzMTJmNWI0NTM0M2QxZmY5Y2MzNTBlZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdaa6XOCTaxqTm5nc/DNL47nUvVP
o/0l0GQb0Uqg6CQmhGb8NDGuYZt1tBbjOhxRgwmCQIHh0HBDs/vtvquF3F3hCgRf
qrhtKPLYBCzMe24VM0Ibw0aKoC4OWq/M7vKbrayY8H3LZ8xw34phrNzIaeb/xLic
zVYd0VRZQM1ZmaXy1t7+jIeNnSGPk8n8Oy6v8RV/eDkR9XX8XAqMGjTj/x1nUH/M
7XUzZNtF839cftSDDmHnehqz+MP9IZ484TK2kRufOALtyzBHCiyatqcAZ1QCbJQI
tKQl83oVLWmylzC4mgLBOHsTuOMCtzj+sp16QMfnMAYx5w6a2jOlhhCrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7PSHidnGFjEvW0U0PR/5zDUO3EMB8GA1UdIwQY
MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt
ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx
LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4rPqU20
c5ScCuepdqzv420RkdckbjKbkK1kNIGEQK/3xTXm+2IhH0gbjA5JDN4mQYtJTaYq
KhyHy4ORn7ew2gxDD1YEdGKSICY1rpIIMcy2x99Gr9cTrnGMWlAjL3hi0tGrZwdL
tuf7wN6T2n2C4k00/2LDWbaqNAnm4HaVuDer1DQ0ji9+hzdu9Lz24BsoHUI0X24i
XPDBfW5nfS+PyaNntzDUr803Rsy9M9jS10dxcrkPfx+Am4Mpi9pCC/bbEelnKq5G
6ZAeMhoF9E3hACwnY56pOpW8EUYcRrm5G5r/dmroQE5j3Gn+TyGcTBVVEtb4fss/
yiHGfa2XCqn/JA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:07 2026 by rpki-client