This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          vJCemqtZRCm7bEmfsx26Fmxq00VBwxOcsTmopyNvprE=
Subject key identifier:   1F:1F:D3:74:8C:75:2A:0F:2F:27:1B:09:4D:2D:54:35:99:86:01:3D
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       019BF23D9298C338468DB8ACE215767CFEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          17E8
Signing time:             Sat 24 Jan 2026 23:01:19 +0000
Manifest this update:     Sat 24 Jan 2026 23:01:19 +0000
Manifest next update:     Sun 25 Jan 2026 23:01:19 +0000
Files and hashes:         1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=)
                          2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=)
                          3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=)
                          4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: kGzSnve4H0xRuPyxuvcSTXBHshWDAPgM+bKHVoqjODU=)
                          5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=)
                          6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:92:98:c3:38:46:8d:b8:ac:e2:15:76:7c:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Jan 24 23:01:19 2026 GMT
            Not After : Jan 25 23:01:19 2026 GMT
        Subject: CN=1f1fd3748c752a0f2f271b094d2d54359986013d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:0e:2b:1d:66:fa:86:47:36:ae:1f:09:fb:f7:
                    94:3a:84:04:74:58:cf:2b:e7:2b:0e:37:ad:72:f9:
                    d2:99:1e:22:7b:e7:c3:a9:c7:7b:d9:cf:22:ba:bf:
                    0a:9e:27:c3:0e:a6:2e:45:fc:0f:f1:65:cb:cc:9c:
                    ee:fb:f8:4e:f8:7c:23:a9:a3:5d:6b:1e:6e:bc:cd:
                    a1:7c:7c:2f:0d:4e:9f:43:d1:90:dc:a8:dd:03:30:
                    59:9d:61:23:67:a7:bc:88:d9:48:3b:c5:e1:43:63:
                    c5:a8:8f:1d:9f:8a:b0:50:1d:14:7a:25:44:e1:2b:
                    41:e0:93:84:bb:38:a5:32:22:50:7c:83:96:bc:a1:
                    bf:df:d5:00:af:b2:c6:30:96:85:b3:d0:09:27:2e:
                    2f:29:42:66:30:1e:49:62:48:08:26:dd:17:a8:93:
                    27:e4:88:82:e7:aa:c1:a9:81:ff:7e:3a:17:04:89:
                    c3:d3:f0:38:20:b2:cd:13:31:a0:8d:8d:b1:5a:58:
                    96:9a:e7:39:c1:f4:ac:5a:f1:97:ce:30:85:7e:b2:
                    fb:c2:ef:b2:ec:18:7b:bf:f4:fc:86:4c:b2:af:0f:
                    71:b6:5c:9a:89:3a:79:f6:46:f2:09:6f:1b:b9:8e:
                    a4:c4:5a:98:f6:7e:45:fe:cc:4c:94:62:fd:4a:a7:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1F:D3:74:8C:75:2A:0F:2F:27:1B:09:4D:2D:54:35:99:86:01:3D
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:87:ee:78:fc:0a:03:21:d6:2b:4e:4d:98:d6:79:84:0e:12:
         19:bc:30:9a:b5:6f:7a:2b:18:62:2c:9a:be:98:57:34:cb:ce:
         8f:4e:74:bb:f3:06:fc:49:62:90:95:4e:27:c9:e9:1c:b6:fb:
         3b:37:22:f2:ac:1d:d4:7c:3a:1f:20:c8:bb:4b:4c:4f:0f:b3:
         69:21:7f:18:b6:7d:5c:b0:10:c4:98:32:3c:50:1d:ba:d1:9d:
         7a:7b:28:e8:ab:81:09:0e:6e:ab:0f:33:07:35:f1:08:60:c2:
         07:af:ed:07:4d:48:28:45:cf:10:36:4c:e5:3c:e8:97:b6:da:
         a4:00:a4:c7:dd:53:51:17:2d:4b:f2:2f:97:a4:25:05:05:f3:
         45:ad:24:84:69:e2:68:49:c6:32:f0:78:fe:0d:a3:90:47:36:
         27:a7:f6:06:0a:2d:96:a5:b6:50:04:dd:ca:70:ac:d5:41:9b:
         7c:2b:aa:2f:e6:05:7b:d7:5f:c0:3f:af:4f:86:71:b1:a4:22:
         4e:15:c3:45:02:b5:9c:a6:72:a5:f5:b5:9a:8e:04:4d:9f:86:
         99:ce:ad:e5:69:78:db:25:0a:d4:ed:2d:94:fe:6b:f5:47:31:
         13:04:0b:93:69:45:07:95:72:aa:9a:6a:62:2c:47:ed:91:af:
         77:ca:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:45 2026 by rpki-client