This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          kg8eWHTdgu6DSu8nLGSgWe7aFp3zM8Cbpb/Q9og7aTk=
Subject key identifier:   46:96:83:0C:76:92:90:14:B3:90:BA:2C:B2:53:E0:E4:0D:A7:5C:DF
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       019BF3BD78890E12E8F6F4F189330DC0C5B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 06:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:39 +0000
Files and hashes:         1: 3BwNdrkKQij3iLju6BrO2elKEDU.roa (hash: LD2RApU9Hl8o4t7NiDLxpiWcrV4cz6X7zWjatkLQRSA=)
                          2: OMxShmSN_MmgdqjB3FCH456QPyw.roa (hash: Vm7cRKSz6QpnQGwyuo2jJgMyLFID06ztzYaKVdmY098=)
                          3: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: b6oX4u7a544CrPflxv7JY90FXvqhK7wAD6tRZWa9S6k=)
                          4: VLAKggAmP_2e5ujcu_orpJmGymk.roa (hash: R7zarhFK+F6qeI1f2Us/zQph/cT5R9wLEpRj2LShETc=)
                          5: g_4YB2ktK_BZdQW2jisjb57z4v4.roa (hash: FrWnOJyYlT2BDuUH41B6UfYjVVUxab5ezAoKnJ2JP3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:78:89:0e:12:e8:f6:f4:f1:89:33:0d:c0:c5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jan 25 06:00:39 2026 GMT
            Not After : Jan 26 06:00:39 2026 GMT
        Subject: CN=4696830c76929014b390ba2cb253e0e40da75cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:1c:4a:93:a9:5a:4b:31:9e:41:13:16:0a:
                    fe:64:bb:7c:1b:ac:ad:49:76:7e:f9:d2:ef:6e:a6:
                    a1:a3:cb:63:38:4b:2e:6f:d1:74:b6:45:75:31:d3:
                    80:f7:c5:ab:f4:2c:a0:fb:32:47:3d:b8:7e:16:ec:
                    cd:d8:c6:3c:87:91:d0:08:c3:96:22:a6:6d:8f:5d:
                    5a:74:5e:68:88:45:01:15:16:32:59:5d:c8:26:d7:
                    01:07:d4:17:a2:30:7f:2c:13:3a:aa:79:b2:ad:d4:
                    41:bd:a9:1c:ac:3b:25:30:64:b3:bf:74:4c:c5:2a:
                    3c:86:a4:5f:2f:5e:1f:a5:69:b0:81:97:fe:8f:26:
                    91:e0:e6:2d:c1:bf:81:3b:a4:1c:86:e3:3f:32:56:
                    36:72:87:5c:40:c5:71:71:25:27:ea:27:b8:a5:aa:
                    86:27:fb:7d:40:68:c8:f4:97:23:c7:5f:29:01:30:
                    f5:10:c6:5a:e8:ac:1b:6e:c5:83:1d:b8:79:91:d9:
                    44:9d:1f:da:53:dc:9a:aa:ea:df:77:85:b3:7b:b9:
                    a4:13:9e:63:67:5c:f1:ce:ce:97:e9:34:61:24:03:
                    fa:2b:03:3b:1d:1e:ca:9b:c8:2f:49:3c:79:46:2a:
                    29:c4:f7:44:e1:01:18:7f:73:6f:b2:55:1a:7d:99:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:96:83:0C:76:92:90:14:B3:90:BA:2C:B2:53:E0:E4:0D:A7:5C:DF
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:8a:77:27:0b:56:6d:a7:4d:19:b8:34:45:54:0a:b4:93:
         fd:8d:62:19:01:2b:94:b2:36:0d:54:e1:23:cd:ef:3c:f3:f7:
         52:81:b1:23:30:be:02:ce:80:d6:e2:e8:5e:95:dd:9d:d6:f2:
         38:7a:ed:1e:4c:00:bc:6f:1f:34:46:1a:f3:ab:ce:39:cf:9f:
         a6:49:60:37:b7:af:14:c0:bc:ea:8f:1c:99:43:36:98:95:aa:
         04:6c:cb:d9:72:68:c2:b5:22:04:ec:a0:ae:c6:71:05:82:15:
         a4:09:97:bb:f0:9a:da:a3:a8:da:87:6f:bd:d7:de:37:e3:52:
         12:eb:de:3e:6f:24:0f:69:63:fb:48:49:93:10:d6:0b:54:40:
         d0:03:33:e5:f4:08:c3:28:94:d1:6c:f0:0f:0e:02:b2:6d:8e:
         83:35:74:12:9f:5f:a4:f3:19:63:8b:ad:9d:7b:a5:08:32:85:
         02:79:3a:67:f6:d4:48:8c:f7:fb:14:ee:03:c2:31:75:77:81:
         a5:e9:4b:b0:13:ef:8b:68:df:f8:8b:84:fd:37:e8:6b:28:fd:
         38:12:41:62:a6:c9:18:0d:87:f3:88:84:47:c9:88:99:99:50:
         0c:8b:6a:9e:8e:e8:56:51:b7:9b:ed:0f:55:ad:06:4b:28:12:
         a1:11:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:09 2026 by rpki-client