This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File:                     l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier:          D/wODofUEBiVyDrjyrgjE4W13wfYNmXrO55Q7pwOskk=
Subject key identifier:   ED:AB:A6:4E:4A:7F:D4:43:F1:DF:15:E7:67:9E:12:AB:17:27:E7:A0
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer:       /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial:       019BF619DCDC4DF3665AA2136B96D029C5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number:          011E
Signing time:             Sun 25 Jan 2026 17:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:48 +0000
Files and hashes:         1: 8QiLjujrDDeRW57K57nE1Qy2Fe4.roa (hash: LNxkpvOU/KRHd6BQ5jOPdFG8+i57rjsTNWZJFQqjzFA=)
                          2: Je6pwcupxmYkeLTCOv8CGXlDTBs.roa (hash: JZNE/6+TrLFJcwxnS7s7SxfstDxwCFdTQJQsRp/mtTA=)
                          3: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: Rq/aranxV01hzO6inw+xv5LHtQGz9qGKJiadLjUyt8w=)
                          4: po54B6DcG4NNjfbOaiSiD07LWNY.roa (hash: F6tAS7XR1ayK/65ME6r1XZa5gTXikXeH7j2JEQzHRCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:dc:dc:4d:f3:66:5a:a2:13:6b:96:d0:29:c5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
        Validity
            Not Before: Jan 25 17:00:48 2026 GMT
            Not After : Jan 26 17:00:48 2026 GMT
        Subject: CN=edaba64e4a7fd443f1df15e7679e12ab1727e7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:0d:55:d1:94:d6:37:90:1b:a2:3a:5e:d8:
                    21:a9:c7:3b:f8:25:2c:5e:16:89:56:6e:6c:9d:9d:
                    da:00:ec:1c:77:d3:16:04:13:c8:82:19:b9:d9:a4:
                    c6:45:6d:05:1e:21:76:b2:c6:36:6c:4e:fc:f9:6b:
                    dc:3f:8c:21:5f:77:3a:c6:69:05:f5:d9:88:ce:a2:
                    35:e5:91:f4:73:b5:ca:83:68:9c:fe:4c:3e:75:36:
                    36:e0:5f:eb:05:77:bd:df:2b:bc:ad:f8:2a:55:3f:
                    99:fd:63:2e:f9:39:27:f2:a1:ea:94:a3:15:9d:7a:
                    fa:58:6a:01:61:24:e1:26:64:dd:f2:bc:24:df:0d:
                    16:c9:9e:22:a9:26:b8:7b:ee:b5:55:e8:89:bc:33:
                    ca:39:0e:fe:07:af:ff:f1:d3:84:bf:00:6c:15:fa:
                    1f:40:2f:dc:54:88:77:54:65:92:e1:4f:91:86:aa:
                    74:89:fc:6e:2e:b0:86:ae:bd:bc:f3:43:0c:68:32:
                    20:ab:eb:97:8d:af:95:93:a4:47:2e:f1:6a:c4:0b:
                    8f:f8:47:2a:34:37:31:fb:76:96:c9:f3:9e:14:4a:
                    c1:bb:12:93:59:21:77:fc:cd:03:9a:94:2a:d2:7b:
                    5d:1c:41:b7:0c:86:5b:44:8d:d0:7c:24:8c:bc:99:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:A6:4E:4A:7F:D4:43:F1:DF:15:E7:67:9E:12:AB:17:27:E7:A0
            X509v3 Authority Key Identifier:
                keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:7b:36:86:77:e1:5d:67:3d:bf:f0:3c:cd:2f:5f:e9:af:
         65:08:cc:73:31:2d:2d:f4:0e:38:ac:2c:ff:f8:a1:35:5f:08:
         34:d9:db:c9:10:d7:97:ea:a5:4d:4e:e3:ba:72:23:c6:57:9e:
         b6:21:b9:d0:c7:be:d6:d2:93:2f:85:56:e8:f5:35:ae:84:7c:
         0e:39:82:55:64:34:bb:dc:1e:75:8a:dd:26:9a:6b:c8:21:1c:
         87:f7:0a:48:bf:da:6a:4d:05:20:b7:e7:b7:cd:02:93:d1:5d:
         de:8c:46:8d:e1:33:d5:2c:23:75:a1:0e:67:68:6a:f5:c0:fa:
         b6:5c:db:81:6c:72:fb:e2:40:db:45:d7:6f:f0:f0:3c:25:e1:
         81:ae:13:15:7a:55:67:ed:54:d3:f7:b4:12:2f:b8:cf:ad:92:
         55:c8:d8:07:72:85:a4:1d:e7:e2:11:3d:f3:b5:2b:eb:46:6f:
         49:97:e9:97:a8:fe:9c:9b:8e:4b:52:26:fa:4c:63:44:3e:c7:
         4c:ca:bc:32:fd:ba:47:73:4f:e8:bf:97:8f:ff:8d:8c:af:7f:
         01:82:27:0d:4b:99:cd:3a:99:e7:e1:28:f4:98:9b:52:33:8d:
         c6:30:ae:18:1a:c7:83:29:81:26:ed:69:2b:1d:30:6f:1b:c7:
         d8:15:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:17 2026 by rpki-client