This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File:                     Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier:          kJGzf4aaSQ6h/3aF2+FSQ1dXQpR96nWtN8BZfUdAlIc=
Subject key identifier:   34:E2:A0:37:37:02:20:DF:A0:10:E3:CA:57:49:FE:BF:86:2F:67:36
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer:       /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial:       019BF80888040750BF7C2847C0374F5EC288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number:          0693
Signing time:             Mon 26 Jan 2026 02:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:07 +0000
Files and hashes:         1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
                          2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: jEBTyj6mcZvtFUZrYWbMJtMKBAD/YJjw8qK1f4Q3OCM=)
                          3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:88:04:07:50:bf:7c:28:47:c0:37:4f:5e:c2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
        Validity
            Not Before: Jan 26 02:01:07 2026 GMT
            Not After : Jan 27 02:01:07 2026 GMT
        Subject: CN=34e2a037370220dfa010e3ca5749febf862f6736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:5c:52:5a:fc:e9:e4:99:68:ef:00:1a:1d:
                    fa:7e:59:1c:5f:a2:5d:76:95:65:8a:9e:60:25:a3:
                    89:7e:3c:2d:eb:c3:bd:74:ed:96:93:9a:1f:fb:dd:
                    71:4f:8b:56:97:40:ec:3f:a5:bb:93:ca:5c:a3:cd:
                    e3:e8:00:d8:3b:52:eb:34:e6:a1:bd:3b:eb:61:27:
                    5b:73:d9:1c:b0:5b:8f:98:6e:2a:15:05:95:9c:d9:
                    17:8e:65:1c:7b:6b:a4:d4:03:ef:41:6b:ec:22:21:
                    e6:18:24:de:4a:4e:c4:42:bc:63:b7:d0:b9:b1:8e:
                    c4:5a:d0:4e:ad:51:1e:a3:46:fc:8b:be:05:e0:26:
                    de:94:80:c2:a6:ec:2e:96:54:7b:37:7d:fc:bf:ab:
                    07:e1:e3:1a:a1:eb:c6:4b:1a:89:72:be:24:fa:b9:
                    80:f4:54:57:e4:4d:f3:ea:c4:71:ad:6a:66:91:57:
                    cb:c2:42:bf:a9:79:3c:ab:6c:f4:7a:79:4d:40:8f:
                    25:3d:6d:72:10:7d:2d:99:61:7b:71:8d:ca:35:47:
                    10:1b:a1:82:b4:78:13:4b:c5:0e:d1:a6:db:58:11:
                    92:8a:b2:8f:33:83:bd:9f:63:b2:87:a2:9b:6e:2c:
                    65:bc:f9:2d:31:6d:fb:cc:01:d5:76:ae:be:97:ce:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E2:A0:37:37:02:20:DF:A0:10:E3:CA:57:49:FE:BF:86:2F:67:36
            X509v3 Authority Key Identifier:
                keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:94:af:88:06:0b:95:6b:b4:5a:12:29:2a:6c:3b:d4:05:4f:
         d3:b1:d7:99:bb:52:fb:b1:09:bf:bf:0a:42:ee:b3:69:83:32:
         86:aa:0b:9a:ea:d0:4c:97:5d:0a:55:b9:6b:c4:be:dd:07:a1:
         1c:c7:52:95:3c:84:3e:ad:88:02:46:3d:ec:27:c1:8f:e1:c0:
         2d:86:63:f4:3c:bc:7f:22:35:8d:41:9e:4a:a5:38:4c:16:e4:
         3b:44:aa:28:b2:75:c3:a8:29:b6:a5:76:0c:39:c9:dc:f3:23:
         b0:b4:b6:2a:3e:22:94:79:02:87:ff:d7:ec:d4:b3:70:6d:a2:
         1e:c1:2a:9e:6b:70:6f:06:57:ee:78:fc:58:db:19:ea:23:71:
         d0:c8:f1:ab:bc:62:d3:7c:07:a0:0f:1e:fe:c5:a2:b0:ea:78:
         3b:58:7f:43:a0:48:9c:57:fa:84:e7:43:cd:28:1b:36:24:da:
         eb:be:31:3c:1d:22:29:91:f0:4b:42:ae:2c:e2:6e:9f:74:51:
         2c:34:50:39:cf:a9:81:5c:ad:57:97:a2:d3:1e:ab:0a:e2:cc:
         95:35:89:9a:ad:90:21:17:84:fd:ef:12:f6:3b:7b:1b:f0:28:
         4a:32:b7:1b:46:d7:bc:48:bb:c0:99:55:dc:0e:9c:9a:de:33:
         2e:2f:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:18 2026 by rpki-client