This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          YY+IAF18kLuvKRZyGKzX0jJjLy9pm0nrOLrP6OYif+0=
Subject key identifier:   CD:F3:76:27:CA:45:2E:53:29:F9:5D:9D:CC:DF:5D:23:FF:71:19:2E
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       019BF6BEF00329E387C58036A5EE2CF69193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          0E94
Signing time:             Sun 25 Jan 2026 20:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:06 +0000
Files and hashes:         1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
                          2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
                          3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
                          4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
                          5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: IRf/Ba9DJrUU7dOZLIbo6f3ZSOujh+M0zl/1qO9MX14=)
                          6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
                          7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
                          8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
                          9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
                          10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
                          11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
                          12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:f0:03:29:e3:87:c5:80:36:a5:ee:2c:f6:91:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Jan 25 20:01:06 2026 GMT
            Not After : Jan 26 20:01:06 2026 GMT
        Subject: CN=cdf37627ca452e5329f95d9dccdf5d23ff71192e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:2f:d3:74:c8:e9:b8:3b:4d:db:04:21:ec:
                    64:b7:38:bd:de:24:54:2c:7a:80:46:d1:f6:9c:a2:
                    b5:bf:dc:94:4c:c9:29:94:12:3c:0b:81:0f:0b:98:
                    e2:ef:29:4d:e6:77:8e:8f:41:06:73:b2:36:14:8c:
                    b9:f3:fc:5f:8e:aa:98:c6:8a:7f:cf:52:de:1b:dd:
                    8c:68:dc:62:f1:83:56:29:a2:ee:dd:56:ac:24:6f:
                    fb:07:62:14:48:25:b6:65:d6:4e:cc:ff:e9:d7:c7:
                    c3:27:b6:0e:9f:35:3e:72:1d:c5:79:22:a1:91:f8:
                    09:08:45:56:fa:04:1a:6b:85:aa:70:04:f1:15:d0:
                    bb:92:c1:35:99:93:dd:3f:20:27:b6:10:b6:63:32:
                    d6:2a:b2:88:41:b8:db:97:3e:f2:f5:15:f3:32:42:
                    36:92:4d:99:f7:98:f2:cc:c4:91:c2:97:2d:a1:d1:
                    e4:c1:a6:b8:4d:53:3d:89:1e:93:7f:a3:96:96:e2:
                    06:a9:74:b4:4a:54:f1:ce:97:56:ea:3c:f2:f8:69:
                    69:bb:45:96:b7:f1:b7:40:f5:31:5e:25:4d:56:7d:
                    8b:58:d5:2d:02:c3:03:05:c9:c8:f6:e5:96:a2:72:
                    71:45:5c:62:87:22:6c:59:d9:fc:db:23:cf:bd:24:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:76:27:CA:45:2E:53:29:F9:5D:9D:CC:DF:5D:23:FF:71:19:2E
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:63:ee:fd:94:21:c1:34:7d:66:88:40:a6:a9:96:df:7d:
         c4:67:0a:18:a5:3d:ea:78:d5:0e:5c:b0:15:09:77:8e:b0:98:
         81:91:14:4b:55:05:e0:0c:9f:42:5f:fa:a6:f1:02:bb:4b:b2:
         59:14:40:b5:ba:ac:36:f2:8c:16:3a:9e:3d:95:66:31:a5:35:
         16:56:b0:be:c6:de:76:c3:14:a9:19:40:df:ec:6e:bc:17:9b:
         0b:c1:a8:35:ec:24:9f:89:48:f2:d4:9f:32:72:4b:b4:41:15:
         d3:59:49:5b:0b:c2:2b:16:03:63:1a:18:48:5a:46:e9:07:50:
         af:97:a8:2d:3f:ca:ab:8a:7c:54:7b:67:27:48:36:f6:2b:eb:
         8e:a8:0e:9d:d9:ce:68:4d:71:ad:62:b7:d0:2f:dd:82:c0:e3:
         98:bb:56:36:9d:0d:0c:bb:d4:3d:f4:3d:7b:f2:a2:41:0d:08:
         05:0d:7d:12:b9:0d:3e:68:11:65:90:6e:53:f0:02:ec:fc:5f:
         2b:85:b3:9b:c6:b2:4f:94:7a:3a:86:8b:e1:e7:2c:ee:dc:45:
         76:83:1d:68:ec:7a:64:b4:f1:d2:3b:d1:f7:a4:70:de:b8:2e:
         57:89:63:b0:c9:b6:7f:ff:d8:46:50:eb:c8:04:2d:14:fe:af:
         44:a8:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:24 2026 by rpki-client