This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          8+D2V/duEzdWHrJLF0LaoIeoN4TtJxVbbSSh0HLiJnM=
Subject key identifier:   2E:F4:CB:9B:D8:46:FA:46:73:00:22:8E:A9:1C:C0:BC:71:30:77:30
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       019BF3500DEF8FB07498A814C7DEB0B62B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          03E2
Signing time:             Sun 25 Jan 2026 04:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:08 +0000
Files and hashes:         1: 52DLcP5QY9pi7vojxO_II_zfgcQ.roa (hash: RzKzGr4Ea3LAud+NmUq6w6faNUNWCiigM9sI+gxiGqs=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: tMCzQQYHi5D2lg9FtiLey+dVLV6sWL8k5T0om0rs3gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:0d:ef:8f:b0:74:98:a8:14:c7:de:b0:b6:2b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Jan 25 04:01:08 2026 GMT
            Not After : Jan 26 04:01:08 2026 GMT
        Subject: CN=2ef4cb9bd846fa467300228ea91cc0bc71307730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:59:29:70:41:60:4b:41:0d:65:ea:a7:36:
                    0c:73:71:75:d7:74:b6:5b:2f:5f:20:6c:ea:38:83:
                    79:1d:06:97:86:8d:06:8d:89:f0:2b:90:3b:c6:48:
                    ea:d4:04:9d:3d:38:60:ee:f6:51:02:a6:b9:6a:8a:
                    5e:d2:50:2a:e5:b2:76:73:51:59:ce:5d:30:7a:5a:
                    9d:da:7d:e3:9c:4f:35:30:5d:1a:89:bf:80:dd:2d:
                    88:49:60:1c:78:d6:e7:0e:18:fb:d2:4a:d0:96:65:
                    7c:de:e2:ee:c7:21:e0:cb:fd:0d:61:3d:5e:bd:64:
                    94:b2:96:21:e5:97:40:b5:66:78:6d:0e:b3:6b:18:
                    43:9c:99:8c:72:2f:98:18:e7:2e:f9:ff:8c:7a:c2:
                    11:0d:7b:46:83:96:67:56:b9:ea:ca:50:d6:34:85:
                    9a:49:6f:e9:1c:61:c7:c0:cb:46:0d:36:d2:7b:b8:
                    25:96:4e:53:1a:e1:f2:e1:ab:60:c1:f4:b1:90:5e:
                    a5:1b:2e:d9:90:65:44:66:43:8c:9e:fa:d6:90:95:
                    79:bc:7c:32:0f:c0:93:45:66:66:2b:c3:16:df:27:
                    81:c0:e3:29:2f:fc:74:00:c4:67:1c:44:f6:ee:7d:
                    72:d6:65:c0:9a:3e:96:79:74:fe:1b:36:38:85:f6:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:CB:9B:D8:46:FA:46:73:00:22:8E:A9:1C:C0:BC:71:30:77:30
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:68:98:e5:e4:6f:51:5d:36:88:56:2c:66:47:3d:f5:ee:
         b2:e5:06:a9:01:13:93:54:6f:21:59:3b:04:33:9d:77:5a:86:
         1e:82:5d:dc:e8:eb:98:e0:0d:1f:76:3c:e2:89:cc:a8:a9:ab:
         84:4c:06:62:78:db:39:f7:09:74:90:4e:eb:db:8d:68:9c:d2:
         b2:00:a6:b0:69:51:6a:94:86:98:b2:2f:0b:fe:47:60:26:9f:
         e5:d8:7d:d7:d6:cb:b9:ee:e8:68:ad:8e:fc:9b:e5:96:97:67:
         f2:48:f7:42:c2:12:41:4a:1a:14:46:23:65:09:54:8b:73:08:
         9b:b4:53:80:d6:3c:b3:9a:80:a1:55:23:cc:dc:aa:dc:f5:2d:
         53:28:48:c2:fc:1e:71:11:4b:c6:af:c6:ad:f9:fb:3c:78:bd:
         f1:f0:cf:34:b4:02:2e:72:9d:6a:44:d9:40:50:28:b4:03:49:
         97:f5:a9:06:eb:df:8a:dc:74:0e:9c:7e:f0:0a:1c:d3:32:2a:
         e3:97:42:ec:f6:b2:f4:64:d8:b4:e4:e0:82:2b:57:8a:1e:bf:
         4c:01:2a:aa:8a:96:c1:b3:bb:dc:2f:11:8e:2b:f5:cf:21:72:
         65:77:e7:8b:7f:85:b6:03:2d:28:d8:67:6b:78:d7:fa:63:ef:
         35:26:77:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:38 2026 by rpki-client