This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File:                     Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier:          diMwFUdZBYgQdah/R13y41AFSJKDIoCdQrl9Ul1abe4=
Subject key identifier:   9E:BB:68:15:21:EE:68:47:E1:10:9A:F4:72:00:15:41:9D:7A:90:E0
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer:       /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial:       019BF7D177195D28EB46F335A43343585B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 01:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:58 +0000
Files and hashes:         1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
                          2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: ondRTPSU663I63S23DOdzh0B/TjWlXhuWfwc9pl+N3E=)
                          3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:77:19:5d:28:eb:46:f3:35:a4:33:43:58:5b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
        Validity
            Not Before: Jan 26 01:00:58 2026 GMT
            Not After : Jan 27 01:00:58 2026 GMT
        Subject: CN=9ebb681521ee6847e1109af4720015419d7a90e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:10:ee:dd:2b:8a:8f:96:5c:b6:59:e6:14:
                    d5:d2:00:f9:94:d2:c5:a5:39:29:63:a0:4e:b7:bc:
                    54:f7:02:2a:4f:95:bc:39:be:50:82:59:c0:29:eb:
                    09:a7:4a:80:c1:3b:b6:07:d1:14:7e:9a:f7:ed:8f:
                    b6:75:b2:ad:a1:8c:6d:3b:c5:c5:b2:54:0c:fa:b0:
                    db:57:ce:9b:79:61:77:08:2e:e4:6e:0f:63:7b:4c:
                    72:7c:af:ff:cb:6e:98:86:de:64:a6:aa:8a:a4:c9:
                    81:d3:a5:95:b4:b0:d0:c4:04:00:c5:a8:09:df:cf:
                    e1:17:c2:59:2a:b6:08:c6:bf:5b:10:5d:3a:f3:b6:
                    39:27:ae:8a:1b:04:ca:f2:19:b0:cd:9e:94:5b:6f:
                    9d:36:42:4b:fa:40:6a:3f:d6:81:af:52:91:a3:f9:
                    8d:51:e0:14:bc:ea:92:d0:ba:ee:82:5d:bb:78:46:
                    ea:80:83:4c:1a:1e:c3:9f:14:50:28:c9:71:8f:d7:
                    ad:d0:f2:12:2c:a0:c2:aa:11:08:80:4e:ee:da:b2:
                    be:93:93:e9:03:93:cb:a2:b7:cd:78:a8:fd:c9:50:
                    20:e0:0f:4b:89:ca:47:53:61:c5:ff:04:12:82:47:
                    7e:36:2c:8c:64:ec:73:7c:92:66:98:23:e1:10:07:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:68:15:21:EE:68:47:E1:10:9A:F4:72:00:15:41:9D:7A:90:E0
            X509v3 Authority Key Identifier:
                keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:d5:91:63:76:3c:d7:4e:2a:f2:d9:22:4c:1f:68:64:98:
         63:16:9c:ae:de:d8:e6:40:e8:1e:4d:1c:b6:bf:b6:ea:48:6c:
         20:81:29:eb:24:6c:d5:66:b6:d1:a3:a4:91:50:a1:f4:b3:97:
         c2:18:e2:a9:90:8f:61:d9:3c:ce:7e:69:a3:74:4a:bf:7b:9e:
         3d:6c:36:b9:4a:34:71:43:b5:e7:39:da:7b:ae:d2:06:1b:09:
         d8:d6:2c:03:b5:b4:26:7c:8d:70:8b:2d:65:c9:84:47:f6:b9:
         80:18:18:bb:ba:2a:d6:93:37:25:5c:e0:21:b9:a9:98:02:e1:
         9f:81:0f:0f:d2:31:ed:f2:7d:41:d7:ed:37:16:76:b0:8d:86:
         4c:1e:22:54:e4:49:4d:5b:c9:3c:f5:c9:a8:f6:62:23:12:5a:
         8a:4b:78:ca:a6:11:d0:39:c6:91:ce:e0:7e:49:6d:29:e0:03:
         af:bb:ed:37:1c:34:65:b5:78:bb:5b:90:08:bc:3b:3f:27:2c:
         5d:93:f0:bd:4c:59:0d:d3:ec:1d:e9:e3:99:e1:a7:39:e5:1d:
         8b:fb:a0:21:cd:76:20:08:2f:cb:4f:7c:f0:44:77:4a:aa:5a:
         ce:97:3a:f6:15:c8:b0:0c:c4:1a:7b:63:ac:21:fc:a4:bb:e3:
         09:82:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:53:45 2026 by rpki-client