This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File:                     l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier:          ufwip4QCjnSr3nxlgzzjCzY+pGUeLO4UQUyRx+6KTMA=
Subject key identifier:   A3:0F:A2:46:0B:F9:6B:F8:32:FF:6D:9E:27:F4:8E:63:F2:3A:98:E8
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer:       /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial:       019BF42BB883C079689D962EA0CF0A48ACF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number:          011D
Signing time:             Sun 25 Jan 2026 08:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:04 +0000
Files and hashes:         1: 8QiLjujrDDeRW57K57nE1Qy2Fe4.roa (hash: LNxkpvOU/KRHd6BQ5jOPdFG8+i57rjsTNWZJFQqjzFA=)
                          2: Je6pwcupxmYkeLTCOv8CGXlDTBs.roa (hash: JZNE/6+TrLFJcwxnS7s7SxfstDxwCFdTQJQsRp/mtTA=)
                          3: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: 7N8NBKT2HcaHqV4HXtX/e7OxLzldNvy93qV/f2Tt1I0=)
                          4: po54B6DcG4NNjfbOaiSiD07LWNY.roa (hash: F6tAS7XR1ayK/65ME6r1XZa5gTXikXeH7j2JEQzHRCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:b8:83:c0:79:68:9d:96:2e:a0:cf:0a:48:ac:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
        Validity
            Not Before: Jan 25 08:01:04 2026 GMT
            Not After : Jan 26 08:01:04 2026 GMT
        Subject: CN=a30fa2460bf96bf832ff6d9e27f48e63f23a98e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:b3:67:4c:7a:ec:5f:4e:f4:d4:1e:4f:a3:
                    23:d8:a2:9d:01:49:c1:93:9a:45:fd:dc:9b:f2:5d:
                    7c:d6:b4:04:90:76:2a:5c:73:4e:e0:78:39:72:fe:
                    03:34:39:71:48:92:3d:30:45:47:61:3e:ac:b0:97:
                    48:38:a2:74:31:72:45:0c:c1:f0:95:6f:51:00:82:
                    ea:1f:8c:c4:14:3c:b2:59:75:c0:ed:92:a3:0c:f7:
                    22:d5:2d:a3:9d:86:2a:52:c5:7a:e8:a3:5a:f5:3a:
                    13:a6:9a:6d:46:14:ef:69:56:63:ac:b2:0a:fb:7c:
                    9c:bd:11:d8:dc:54:60:82:29:18:61:7f:1c:77:62:
                    de:06:21:4e:d8:ff:c6:f0:80:54:77:70:46:85:d4:
                    c1:e4:0a:7e:bd:46:40:ef:14:56:42:a6:d8:fb:d6:
                    35:f8:8d:ee:a5:a6:70:ab:86:22:77:11:10:04:be:
                    77:77:4a:6c:2a:e3:c1:d0:5e:23:5f:2d:39:bf:c9:
                    3b:3e:c7:ac:28:e8:04:b9:cc:72:df:f6:93:bd:42:
                    a2:1b:89:a0:16:9b:b8:06:ad:c7:b2:36:97:8c:27:
                    c0:97:56:41:d4:3f:4f:fe:1d:b9:71:5f:b7:0b:b7:
                    0a:53:49:cc:0f:c7:67:aa:84:de:d6:01:52:f3:3b:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:A2:46:0B:F9:6B:F8:32:FF:6D:9E:27:F4:8E:63:F2:3A:98:E8
            X509v3 Authority Key Identifier:
                keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:af:9c:cf:69:52:ef:20:b4:8b:01:bb:65:15:40:ff:0a:
         44:ff:92:3a:5b:b0:75:fe:96:3e:d2:1c:e4:ea:d6:74:ec:ec:
         08:59:e9:24:cd:bb:3f:01:2a:87:8d:cc:32:87:86:75:1b:d5:
         18:e3:33:4f:5b:2d:89:99:5c:83:95:4b:de:06:d3:96:7f:39:
         68:86:94:cb:36:66:4d:74:b0:f0:c3:a7:62:88:b2:60:d3:7c:
         d8:60:15:70:7d:74:6a:92:d4:f0:5b:95:77:df:6d:1f:82:1f:
         b0:4e:24:cf:01:51:50:b9:4a:e6:1d:30:57:01:04:75:31:c4:
         16:48:f6:5a:8c:db:28:27:02:e2:4a:45:19:c1:72:93:90:e7:
         28:fc:fa:48:aa:63:2f:77:97:36:1e:64:39:9b:64:65:09:3f:
         f2:af:ee:0d:56:82:75:78:d4:f6:a3:f6:59:5f:54:f7:99:e4:
         6e:71:f0:a8:30:75:cb:4c:e4:cf:59:af:f1:ed:89:cd:60:7c:
         c4:cb:ee:ec:3b:ba:b3:d5:16:a7:ed:80:3d:8a:d0:7a:56:01:
         48:26:75:d3:86:db:5d:ac:fa:2e:e7:07:9e:55:74:75:12:54:
         98:0a:73:25:7e:f5:b1:f9:e5:b5:72:76:e9:f7:1c:36:22:a5:
         7d:db:e9:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K7iDwHlonZYuoM8KSKz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjE5MDQ3ZjNmMWUwNTkzZDFjMzE3OTk3YmVkZTI4OTBh
YTBmZmIwHhcNMjYwMTI1MDgwMTA0WhcNMjYwMTI2MDgwMTA0WjAzMTEwLwYDVQQD
EyhhMzBmYTI0NjBiZjk2YmY4MzJmZjZkOWUyN2Y0OGU2M2YyM2E5OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXizZ0x67F9O9NQeT6Mj2KKdAUnB
k5pF/dyb8l181rQEkHYqXHNO4Hg5cv4DNDlxSJI9MEVHYT6ssJdIOKJ0MXJFDMHw
lW9RAILqH4zEFDyyWXXA7ZKjDPci1S2jnYYqUsV66KNa9ToTppptRhTvaVZjrLIK
+3ycvRHY3FRggikYYX8cd2LeBiFO2P/G8IBUd3BGhdTB5Ap+vUZA7xRWQqbY+9Y1
+I3upaZwq4YidxEQBL53d0psKuPB0F4jXy05v8k7PsesKOgEucxy3/aTvUKiG4mg
Fpu4Bq3HsjaXjCfAl1ZB1D9P/h25cV+3C7cKU0nMD8dnqoTe1gFS8zsG/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMPokYL+Wv4Mv9tnif0jmPyOpjoMB8GA1UdIwQY
MBaAFJfxkEfz8eBZPRwxeZe+3iiQqg/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTIt
N2EzZTM5NGMwNDkzLzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTItN2EzZTM5NGMwNDkz
LzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+avnM9p
Uu8gtIsBu2UVQP8KRP+SOluwdf6WPtIc5OrWdOzsCFnpJM27PwEqh43MMoeGdRvV
GOMzT1stiZlcg5VL3gbTln85aIaUyzZmTXSw8MOnYoiyYNN82GAVcH10apLU8FuV
d99tH4IfsE4kzwFRULlK5h0wVwEEdTHEFkj2WozbKCcC4kpFGcFyk5DnKPz6SKpj
L3eXNh5kOZtkZQk/8q/uDVaCdXjU9qP2WV9U95nkbnHwqDB1y0zkz1mv8e2JzWB8
xMvu7Du6s9UWp+2APYrQelYBSCZ104bbXaz6LucHnlV0dRJUmApzJX71sfnltXJ2
6fccNiKlfdvplw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:26:47 2026 by rpki-client