This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File:                     qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier:          pe//3bM2r25vRUWlynQfnENY3EiTnfBvlnX7at0LATE=
Subject key identifier:   74:7D:D0:6D:59:BF:BF:B3:F2:F1:FF:3F:95:5B:AC:E1:50:08:E0:4E
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer:       /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial:       019BF80859B8FCBDE68C9A82A8D646F28FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 02:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:55 +0000
Files and hashes:         1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
                          2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
                          3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: QCYSpTMCKg8uq4sObBgW066q8J2Geoj5tkmUBupfFwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:59:b8:fc:bd:e6:8c:9a:82:a8:d6:46:f2:8f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
        Validity
            Not Before: Jan 26 02:00:55 2026 GMT
            Not After : Jan 27 02:00:55 2026 GMT
        Subject: CN=747dd06d59bfbfb3f2f1ff3f955bace15008e04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:da:07:15:f2:08:63:fd:99:88:26:40:f0:
                    9b:ea:51:ac:f4:0b:2c:e6:f7:8a:11:dd:78:ea:75:
                    67:7c:9a:0d:ba:cb:04:77:54:4c:23:72:f7:b9:26:
                    0f:d9:a4:ac:f0:f6:d5:d9:ea:61:e4:cb:55:7f:48:
                    d5:35:f8:34:f1:d2:5b:08:f4:47:6d:19:d9:18:bf:
                    33:bb:5e:4e:eb:d3:0a:cb:0b:13:03:a6:fc:36:40:
                    a2:fe:63:8f:eb:0f:a8:05:66:e4:c1:07:98:b6:cd:
                    f6:cc:48:55:fa:18:df:08:4a:b2:5f:16:66:7c:d1:
                    e0:70:61:6d:19:a4:78:61:1d:fb:32:1d:95:82:62:
                    f3:1e:29:bb:d1:19:75:ed:b6:28:7b:1c:13:39:7a:
                    17:9e:b7:92:19:cd:7d:e7:a2:fb:49:5f:8c:1c:b1:
                    90:16:16:ef:b8:39:9c:36:93:49:42:f8:d0:0e:f7:
                    5f:cc:09:9f:07:72:eb:64:32:66:80:c4:67:0b:6e:
                    3d:67:bb:80:f6:52:2f:ad:ef:ea:09:60:6e:c0:1e:
                    bc:e4:12:c4:35:04:54:2d:d8:0a:14:45:6c:f1:e7:
                    d4:2f:63:90:b4:b8:db:3d:7e:d4:f2:24:4b:49:f9:
                    03:e5:85:bd:d2:91:d3:4b:1e:db:09:a6:a1:4d:96:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:D0:6D:59:BF:BF:B3:F2:F1:FF:3F:95:5B:AC:E1:50:08:E0:4E
            X509v3 Authority Key Identifier:
                keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:2a:15:1d:39:67:86:b0:ea:66:bc:c6:49:10:45:b7:14:
         2e:57:5b:c8:8d:71:57:19:7d:aa:53:d5:1a:82:65:33:59:8d:
         da:41:24:ed:59:ae:05:19:c3:5a:9e:f8:ba:e8:e6:55:5f:10:
         a5:93:6c:66:d7:dd:c2:0c:d3:07:6e:c6:1b:04:16:24:2f:c6:
         6e:92:f5:6b:6f:aa:f8:26:08:de:9c:eb:19:1f:27:d9:91:b3:
         41:e9:74:3b:e3:59:a6:1a:fd:15:1f:0e:65:19:b8:e4:36:a5:
         b8:70:e0:0d:5e:74:32:c6:f7:39:bc:50:22:00:c8:ce:ff:b6:
         6d:58:69:b2:bc:1a:83:f7:f4:51:89:95:f6:38:f1:fd:f4:2b:
         dc:f0:6d:62:5b:f7:9f:f2:a8:96:4f:c1:56:93:88:9c:dd:49:
         ee:5e:25:73:19:2d:fa:ee:c3:6d:34:55:c8:65:03:e0:22:c1:
         cb:bd:cc:6f:6a:5b:ec:f1:b8:79:b2:ea:39:88:b2:c2:fc:82:
         25:9c:4e:62:36:02:59:57:1c:b8:e4:86:23:f0:ac:06:71:5b:
         7a:d4:ea:0e:99:28:7b:61:47:9e:f1:f1:3b:92:a0:db:a1:98:
         52:54:4f:24:9a:47:be:25:78:67:dc:50:53:0f:c7:db:0e:91:
         d5:c0:9b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CFm4/L3mjJqCqNZG8o+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjYwMTI2MDIwMDU1WhcNMjYwMTI3MDIwMDU1WjAzMTEwLwYDVQQD
Eyg3NDdkZDA2ZDU5YmZiZmIzZjJmMWZmM2Y5NTViYWNlMTUwMDhlMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2onaBxXyCGP9mYgmQPCb6lGs9Ass
5veKEd146nVnfJoNussEd1RMI3L3uSYP2aSs8PbV2eph5MtVf0jVNfg08dJbCPRH
bRnZGL8zu15O69MKywsTA6b8NkCi/mOP6w+oBWbkwQeYts32zEhV+hjfCEqyXxZm
fNHgcGFtGaR4YR37Mh2VgmLzHim70Rl17bYoexwTOXoXnreSGc1956L7SV+MHLGQ
FhbvuDmcNpNJQvjQDvdfzAmfB3LrZDJmgMRnC249Z7uA9lIvre/qCWBuwB685BLE
NQRULdgKFEVs8efUL2OQtLjbPX7U8iRLSfkD5YW90pHTSx7bCaahTZbqaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR90G1Zv7+z8vH/P5VbrOFQCOBOMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxoqFR05
Z4aw6ma8xkkQRbcULldbyI1xVxl9qlPVGoJlM1mN2kEk7VmuBRnDWp74uujmVV8Q
pZNsZtfdwgzTB27GGwQWJC/GbpL1a2+q+CYI3pzrGR8n2ZGzQel0O+NZphr9FR8O
ZRm45DaluHDgDV50Msb3ObxQIgDIzv+2bVhpsrwag/f0UYmV9jjx/fQr3PBtYlv3
n/Kolk/BVpOInN1J7l4lcxkt+u7DbTRVyGUD4CLBy73Mb2pb7PG4ebLqOYiywvyC
JZxOYjYCWVccuOSGI/CsBnFbetTqDpkoe2FHnvHxO5Kg26GYUlRPJJpHviV4Z9xQ
Uw/H2w6R1cCbBQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:18 2026 by rpki-client