This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File:                     qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier:          9Y2NtWAzbHfITUXeZn0R5TqsVAJm9oJdiUsxeiqPmZg=
Subject key identifier:   43:AF:56:31:E7:C3:DD:AB:8E:FE:60:97:A0:09:68:24:A9:B2:AD:23
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer:       /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial:       019BF650AC445EA5C76629E10BB98EC7F80D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number:          17AB
Signing time:             Sun 25 Jan 2026 18:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:40 +0000
Files and hashes:         1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
                          2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
                          3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: bYurjrQ7NF5ZUytERLQvrirrDW/QKCVJYVVPZfLwmgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:ac:44:5e:a5:c7:66:29:e1:0b:b9:8e:c7:f8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
        Validity
            Not Before: Jan 25 18:00:40 2026 GMT
            Not After : Jan 26 18:00:40 2026 GMT
        Subject: CN=43af5631e7c3ddab8efe6097a0096824a9b2ad23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:05:cd:41:76:bc:eb:d7:a9:10:0c:60:c9:
                    6c:7b:ae:71:67:c7:30:1a:13:56:23:f0:bd:38:6d:
                    0b:9a:f9:19:d0:4f:30:16:d6:4d:af:c1:e5:eb:7c:
                    2a:b1:eb:86:5f:90:82:bf:d1:50:9d:43:c9:5c:1e:
                    f6:85:df:27:31:44:f8:82:15:15:0e:78:c9:22:ad:
                    74:15:00:a3:a5:2e:c9:c6:a9:bb:d9:a3:d1:60:54:
                    ac:59:9f:07:1f:96:e5:22:33:53:e3:c3:4a:4b:0b:
                    df:a3:d0:36:c4:fc:e5:56:56:7a:50:5c:20:8a:b0:
                    c0:2e:4b:d4:52:27:67:90:f6:a8:47:31:60:42:60:
                    d4:a5:e0:df:97:04:5d:e9:10:d6:4b:75:80:63:f8:
                    e8:38:98:dd:94:b3:2b:62:aa:0c:7e:b9:ec:d7:8e:
                    63:12:f7:4a:46:39:72:e1:36:df:c3:0b:17:ca:f5:
                    23:ab:4b:e7:a1:07:ba:d0:5d:e2:8b:8e:95:8e:ed:
                    c4:15:36:58:bd:1d:f2:72:4f:87:bd:26:60:af:a6:
                    50:95:03:41:eb:23:b2:82:6d:b0:4f:a0:5b:77:58:
                    a7:9e:3c:19:09:c8:9b:91:e3:87:c2:30:ae:27:6d:
                    86:0f:b8:c2:14:20:32:06:54:a3:f6:ae:8b:95:df:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AF:56:31:E7:C3:DD:AB:8E:FE:60:97:A0:09:68:24:A9:B2:AD:23
            X509v3 Authority Key Identifier:
                keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:2d:35:65:bb:c7:dd:0b:c6:72:6b:b0:4a:52:55:47:81:
         62:77:4a:d1:14:ae:0d:30:ad:04:81:aa:6d:19:f7:64:06:82:
         c3:f4:d5:ad:6c:29:a9:d9:c9:17:e7:81:5d:9e:f1:a7:67:06:
         20:3a:16:7a:65:dc:02:a0:2f:72:8e:2a:59:dc:45:25:69:49:
         a6:cf:15:a9:c8:00:fe:d3:32:7c:33:ef:8d:a8:9f:ca:9c:0e:
         35:4f:96:67:1e:ed:c7:92:f9:02:f5:2f:6d:a6:e5:c5:be:66:
         1b:48:e3:0a:b7:47:80:bb:83:cf:3b:69:45:ac:64:07:56:3b:
         7b:7f:93:61:fe:b9:d6:fc:c6:b1:44:5a:76:6f:2a:a7:7c:43:
         00:2f:1e:f4:17:97:d6:75:6b:46:bc:d0:1f:dd:be:67:94:25:
         c3:8f:74:31:63:a4:6d:b2:97:f4:8c:37:87:8b:5c:81:84:54:
         bc:a2:59:c5:ac:80:7c:5b:c4:61:7a:6a:ba:34:99:12:e9:0a:
         ce:d7:81:99:0d:eb:e2:c5:ae:f4:19:7a:70:25:fb:86:b2:27:
         c6:cf:71:07:55:be:40:6a:80:12:ad:a7:f2:84:50:56:73:5a:
         5b:db:a4:be:a3:20:a7:bf:f8:39:43:ac:67:f7:94:aa:34:f0:
         48:85:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:09 2026 by rpki-client