This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File:                     QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier:          TALGRs2osNZw6pVfUvJfR/D2Thfa8hgTSY4oTmR5Y2g=
Subject key identifier:   AD:26:67:C9:E4:86:8A:5E:01:45:80:F6:C4:40:E8:A1:85:9F:3D:B6
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer:       /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial:       019BF5E39F02B4F8A92078821650A71F277D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number:          05B3
Signing time:             Sun 25 Jan 2026 16:01:33 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:33 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:33 +0000
Files and hashes:         1: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: hwgP57MgS5sL0FFtxeN3fanr309rvGDogHKqhqKKQGE=)
                          2: arLL-dX7EezUxnhpPmYA6Z1bdh0.roa (hash: /QmgKDALaBJxjzH0fH/pX9bzBt4U5Cyo5O5w9+AYU6U=)
                          3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:9f:02:b4:f8:a9:20:78:82:16:50:a7:1f:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
        Validity
            Not Before: Jan 25 16:01:33 2026 GMT
            Not After : Jan 26 16:01:33 2026 GMT
        Subject: CN=ad2667c9e4868a5e014580f6c440e8a1859f3db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:52:f5:2e:62:5b:93:fc:8b:e2:84:4a:47:
                    ea:42:db:93:48:15:1a:7a:a9:db:6f:af:66:01:b2:
                    a5:67:0a:59:03:d5:3a:52:e4:f3:34:a3:c2:78:b9:
                    8a:15:1a:76:b8:1f:d9:ed:3d:dd:2c:2b:51:cd:33:
                    20:c3:a5:4e:b7:0b:2c:03:07:48:b0:e3:04:26:68:
                    54:00:77:b5:70:2d:62:25:85:e2:6a:9e:21:30:89:
                    ac:05:a8:f3:59:cf:4d:f6:ce:63:25:1f:6f:bb:3f:
                    0e:df:c0:7c:74:0b:7d:62:18:0e:2e:fc:a3:eb:0f:
                    e1:11:c9:f8:ee:f6:d4:80:59:53:f3:fc:d1:e4:fa:
                    b0:60:8e:1a:6f:2b:28:39:51:54:a8:85:84:47:b0:
                    84:be:22:58:3a:91:7f:fa:12:cd:92:2f:a9:26:69:
                    36:70:32:3c:d6:ef:94:b2:d8:e4:ec:d7:a6:2f:f1:
                    18:e7:a9:e0:23:74:7c:08:5b:03:0a:a3:8a:ed:69:
                    e1:ee:39:0b:4a:22:96:81:13:8f:bf:19:7a:bc:49:
                    1b:28:50:7f:38:af:0b:ee:0d:a0:37:01:42:f2:47:
                    98:a3:38:e2:39:a3:7c:09:1e:00:a7:e1:c9:c0:78:
                    e2:73:80:0f:74:7c:82:88:03:4c:7e:03:2b:ee:d2:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:26:67:C9:E4:86:8A:5E:01:45:80:F6:C4:40:E8:A1:85:9F:3D:B6
            X509v3 Authority Key Identifier:
                keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:18:9a:0f:3f:db:a5:35:34:2f:07:f0:e4:81:06:f2:56:09:
         e3:75:f3:68:4d:2f:ac:85:53:59:e0:ef:6f:56:02:69:18:13:
         39:0f:3b:fc:d8:d0:44:e7:2d:80:a1:6e:2e:d0:b6:c2:3f:49:
         6b:9f:95:b8:db:e1:74:06:54:58:90:33:af:a7:b9:eb:37:4f:
         db:af:9d:75:f2:25:44:40:1a:25:6d:7e:a4:8f:90:cc:41:ab:
         a3:6d:a3:94:c2:49:f7:02:14:82:05:54:f3:64:fd:39:42:92:
         e2:2a:fc:77:b2:b8:43:20:41:d5:85:b0:59:7b:0c:a8:d6:6c:
         48:ce:71:2e:23:8f:3d:cb:80:55:49:30:0f:ab:b8:82:70:72:
         12:0c:35:c0:d4:6c:69:57:13:cd:1b:37:55:e5:8e:a6:5f:ba:
         40:88:4d:24:5a:ad:4e:c7:7c:2e:71:8a:42:9e:a5:5c:35:c5:
         bc:89:fc:35:ee:d0:e8:81:cf:93:c9:e5:cd:5b:9c:c4:61:88:
         e0:ae:79:eb:96:8d:a2:07:fc:dd:d3:97:e8:d6:20:03:8c:da:
         f9:1b:d8:e3:01:82:fb:2f:f0:8a:7e:d9:2b:e8:a9:20:22:71:
         a0:69:6e:48:06:5a:af:5d:4c:03:20:c6:8a:4d:00:25:75:4a:
         d9:1f:8f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1458CtPipIHiCFlCnHyd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm
NjM1YjcwHhcNMjYwMTI1MTYwMTMzWhcNMjYwMTI2MTYwMTMzWjAzMTEwLwYDVQQD
EyhhZDI2NjdjOWU0ODY4YTVlMDE0NTgwZjZjNDQwZThhMTg1OWYzZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHtS9S5iW5P8i+KESkfqQtuTSBUa
eqnbb69mAbKlZwpZA9U6UuTzNKPCeLmKFRp2uB/Z7T3dLCtRzTMgw6VOtwssAwdI
sOMEJmhUAHe1cC1iJYXiap4hMImsBajzWc9N9s5jJR9vuz8O38B8dAt9YhgOLvyj
6w/hEcn47vbUgFlT8/zR5PqwYI4abysoOVFUqIWER7CEviJYOpF/+hLNki+pJmk2
cDI81u+Ustjk7NemL/EY56ngI3R8CFsDCqOK7Wnh7jkLSiKWgROPvxl6vEkbKFB/
OK8L7g2gNwFC8keYozjiOaN8CR4Ap+HJwHjic4APdHyCiANMfgMr7tKqLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0mZ8nkhopeAUWA9sRA6KGFnz22MB8GA1UdIwQY
MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt
NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm
LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xiaDz/b
pTU0Lwfw5IEG8lYJ43XzaE0vrIVTWeDvb1YCaRgTOQ87/NjQROctgKFuLtC2wj9J
a5+VuNvhdAZUWJAzr6e56zdP26+ddfIlREAaJW1+pI+QzEGro22jlMJJ9wIUggVU
82T9OUKS4ir8d7K4QyBB1YWwWXsMqNZsSM5xLiOPPcuAVUkwD6u4gnByEgw1wNRs
aVcTzRs3VeWOpl+6QIhNJFqtTsd8LnGKQp6lXDXFvIn8Ne7Q6IHPk8nlzVucxGGI
4K5565aNogf83dOX6NYgA4za+RvY4wGC+y/win7ZK+ipICJxoGluSAZar11MAyDG
ik0AJXVK2R+Pwg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:55 2026 by rpki-client