This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          JRR8WaUeKRGZY9yTfRTVh8RwlJI5R+yQ1L4AMpldZOo=
Subject key identifier:   54:B2:66:5B:0C:25:62:82:A0:ED:4C:70:1F:D0:89:39:F6:31:39:CD
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019BF4D0B5414DB09F407FF88151B948F03E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          17FC
Signing time:             Sun 25 Jan 2026 11:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:17 +0000
Files and hashes:         1: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (hash: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok=)
                          2: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (hash: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw=)
                          3: J037jcIbssptRuiF7QThwckkgYA.roa (hash: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8=)
                          4: b2J3Kq_VVh1EG8v7M57JsnhxRys.roa (hash: D7SHysw2y1TUjvU83TjW8wSMTeBnb6/uD11HZxz6yFQ=)
                          5: qDLdXKoUpJm2dsTwBt4zQnSNQnw.roa (hash: iyRRGWBDG+XLYgp/kklLhjkEJWQzUFTgBj54SJwLLnw=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: HDaSGF7Ej3nV77DecKuVAa7SZXspYjQAn7IfATGFAnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:b5:41:4d:b0:9f:40:7f:f8:81:51:b9:48:f0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jan 25 11:01:17 2026 GMT
            Not After : Jan 26 11:01:17 2026 GMT
        Subject: CN=54b2665b0c256282a0ed4c701fd08939f63139cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:78:92:21:c7:07:ae:5b:ba:97:1e:03:aa:
                    b3:99:b6:c4:38:40:6e:36:35:ef:9d:dc:50:0c:33:
                    5b:47:63:dc:53:1d:9f:ca:37:c8:38:40:bf:8c:15:
                    c8:27:e1:24:85:fa:7e:14:d7:57:fd:47:2b:85:63:
                    38:01:8f:52:12:af:d0:a9:5f:5d:5b:3b:4b:69:8c:
                    ba:31:22:80:1c:8f:0a:6e:3e:d4:8b:53:b9:65:54:
                    87:7c:89:ee:76:5b:39:45:b0:e5:91:f2:6a:32:eb:
                    37:8a:43:07:9a:61:8f:af:56:4d:2f:5b:4b:12:6e:
                    c4:0f:21:3f:d6:c0:38:7d:c7:c4:b2:03:ae:99:03:
                    37:8a:b7:f2:32:d6:78:cb:05:aa:f4:b2:8f:35:7b:
                    c0:96:75:66:82:2d:9d:9f:a7:ea:ef:5c:1b:53:97:
                    01:a0:fd:00:e1:72:bf:21:c5:e3:06:ac:48:27:d1:
                    78:fa:b7:eb:5c:db:0a:c9:11:e5:35:a2:7a:c7:5e:
                    6b:15:85:da:fe:ba:7e:e4:b2:3b:28:be:c7:a7:34:
                    23:dd:54:ca:8d:af:05:0c:c6:60:ce:ca:63:1e:2b:
                    8c:96:57:94:b0:d1:72:b8:b5:db:5e:f2:69:3e:e1:
                    e9:e7:3d:f0:e0:36:30:06:f3:c3:4a:f7:06:69:b6:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:66:5B:0C:25:62:82:A0:ED:4C:70:1F:D0:89:39:F6:31:39:CD
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:88:e7:67:e2:c0:f1:fd:60:fd:be:53:1b:07:30:49:3a:46:
         cf:fd:54:0b:17:38:e1:d8:4d:9e:6e:9b:03:94:63:ff:ee:9a:
         5b:81:73:40:35:e1:8a:74:68:f7:74:6c:4d:c6:9a:f3:36:a4:
         29:d3:ae:85:5c:af:df:e1:b3:df:e6:d9:0d:de:40:d7:dd:a3:
         cb:06:ea:44:5e:f5:07:0d:81:d4:60:1d:53:ce:3c:d7:ca:0e:
         f1:17:9f:d3:d8:b3:4b:5a:8a:a2:9a:9f:ea:ab:be:61:8e:0e:
         fc:37:45:22:75:f0:09:b8:e7:2c:62:0e:b3:76:83:ac:a0:21:
         0d:93:f3:8f:27:95:60:3a:55:d3:e9:76:3e:0a:5c:8d:e8:73:
         bd:b6:3b:6a:aa:e0:3c:3e:43:d2:28:36:0e:67:bf:d3:a4:cb:
         1b:69:9a:76:98:72:0f:ad:0c:0f:1a:11:bf:f3:da:b4:60:28:
         20:5e:b3:70:e7:ef:8d:92:69:52:f1:da:38:58:12:9e:53:5f:
         b0:41:ba:3e:32:c0:4c:52:57:2b:74:b8:45:b5:b6:96:4b:12:
         2a:b4:4a:24:41:64:41:21:05:0e:f0:46:d7:49:83:7d:32:d9:
         28:2a:ef:c0:83:db:52:8d:a9:ef:6e:71:8a:90:76:0e:c1:3c:
         97:8e:5a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00LVBTbCfQH/4gVG5SPA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx
Zjk2MDUwHhcNMjYwMTI1MTEwMTE3WhcNMjYwMTI2MTEwMTE3WjAzMTEwLwYDVQQD
Eyg1NGIyNjY1YjBjMjU2MjgyYTBlZDRjNzAxZmQwODkzOWY2MzEzOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxZ4kiHHB65bupceA6qzmbbEOEBu
NjXvndxQDDNbR2PcUx2fyjfIOEC/jBXIJ+Ekhfp+FNdX/UcrhWM4AY9SEq/QqV9d
WztLaYy6MSKAHI8Kbj7Ui1O5ZVSHfInudls5RbDlkfJqMus3ikMHmmGPr1ZNL1tL
Em7EDyE/1sA4fcfEsgOumQM3irfyMtZ4ywWq9LKPNXvAlnVmgi2dn6fq71wbU5cB
oP0A4XK/IcXjBqxIJ9F4+rfrXNsKyRHlNaJ6x15rFYXa/rp+5LI7KL7HpzQj3VTK
ja8FDMZgzspjHiuMlleUsNFyuLXbXvJpPuHp5z3w4DYwBvPDSvcGabYGrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSyZlsMJWKCoO1McB/QiTn2MTnNMB8GA1UdIwQY
MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt
MjM2ZTkyZmM2YTU5LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5
LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVojnZ+LA
8f1g/b5TGwcwSTpGz/1UCxc44dhNnm6bA5Rj/+6aW4FzQDXhinRo93RsTcaa8zak
KdOuhVyv3+Gz3+bZDd5A192jywbqRF71Bw2B1GAdU84818oO8Ref09izS1qKopqf
6qu+YY4O/DdFInXwCbjnLGIOs3aDrKAhDZPzjyeVYDpV0+l2PgpcjehzvbY7aqrg
PD5D0ig2Dme/06TLG2madphyD60MDxoRv/PatGAoIF6zcOfvjZJpUvHaOFgSnlNf
sEG6PjLATFJXK3S4RbW2lksSKrRKJEFkQSEFDvBG10mDfTLZKCrvwIPbUo2p725x
ipB2DsE8l45avg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:24 2026 by rpki-client