This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          8POJvcQxMFEQ6a5/HnvLvdiEjF1x3YLNmMWvtoVSvfc=
Subject key identifier:   4C:17:95:12:48:7A:CF:A6:B9:B0:98:FD:92:50:87:E5:E0:30:E7:5E
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       019C0FA31E82AB57628BA748E2534B0CD12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          1723
Signing time:             Fri 30 Jan 2026 16:01:14 +0000
Manifest this update:     Fri 30 Jan 2026 16:01:14 +0000
Manifest next update:     Sat 31 Jan 2026 16:01:14 +0000
Files and hashes:         1: 1-UtCMLoYpQTccw0rAaKnjr3aeP4.roa (hash: N8latQNhGiEjvdqVYf+HsgaWPueV4r0S9nawy713xeE=)
                          2: 1-aNnq3G-3Uph4CDICNHGtMEexzM.roa (hash: COcKotvyQgXvt7JUDGUl9yoEfHAlHiTxt2Sp6dfcn4M=)
                          3: 5O5myP0lF1xP1jJEoQe9pSgv1NY.roa (hash: 1Ly5GkaJNn9NGiJHBbBhR411FTMTwdqj9zg5X4o1rJs=)
                          4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: H6c92gO88j8Zuc4dc5dtvUOvBEzIxe/y3Bs9ktaSfko=)
                          5: QB5DaA1MIwR5ikAvXA3gM5FxDQY.roa (hash: QVnUg9rir6hPV0SWbkI+uNhJZ6Bpm1g1EMmNwsSmgyI=)
                          6: Zae_gMNSGLYpjvDka3zKlP-S3hQ.roa (hash: KFAqhbt9W5g+ZaeRsfu703acWAo0iC27yLXUw/eFD2k=)
                          7: dBqvOag7Vn6SMH5-RRqsLXHXhvA.roa (hash: l+RlXCW7RTqPoNsvx1EDw/ugEa8VniO9ekXCbH/csAk=)
                          8: eIAvi_fRWFUTaXHfkY48zizgI6I.roa (hash: zlK7AxneUnvHvJcK0AMBNR80xbI0s9cOUQ5f2N58mBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:a3:1e:82:ab:57:62:8b:a7:48:e2:53:4b:0c:d1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Jan 30 16:01:14 2026 GMT
            Not After : Jan 31 16:01:14 2026 GMT
        Subject: CN=4c179512487acfa6b9b098fd925087e5e030e75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:34:61:58:c3:a5:41:84:77:0a:f6:8f:92:
                    b7:1f:7a:75:7a:fb:04:a5:da:dd:d2:d4:e7:27:76:
                    b4:f8:20:f4:a5:27:3f:e7:97:5a:54:ea:1e:94:28:
                    95:7e:a4:9e:4d:5d:58:43:e7:2e:08:19:56:14:23:
                    a6:19:15:ff:46:10:99:d6:53:c7:43:2d:6b:75:e3:
                    9b:2b:17:66:6c:b5:31:42:89:52:9d:d5:ec:0a:00:
                    d4:96:a6:9a:5e:dc:40:db:7a:34:9f:41:82:2d:d1:
                    23:cd:0b:37:df:12:5c:6a:f5:0c:63:51:e0:7e:97:
                    f9:4a:79:72:6f:4d:5a:be:35:02:93:0c:43:cd:50:
                    58:e4:8f:b8:c1:3b:7e:0f:02:33:53:7b:08:d0:3d:
                    96:f8:5d:f8:c9:3a:94:f6:4e:ee:a2:6f:f6:2b:e5:
                    8a:fb:89:b4:0b:e3:b5:9b:98:19:52:08:33:02:b4:
                    07:73:19:7f:34:66:dd:de:a4:47:08:42:d0:9a:dd:
                    9b:bf:27:48:53:18:d9:ad:87:43:b7:e8:09:8e:06:
                    e2:04:f2:19:b7:b7:98:11:a0:95:f5:8e:ab:0c:39:
                    41:47:f3:bc:e1:d3:6b:38:6e:04:c8:2d:87:79:b5:
                    8f:ba:6e:63:cf:14:07:16:ad:ac:e3:ae:5f:02:76:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:95:12:48:7A:CF:A6:B9:B0:98:FD:92:50:87:E5:E0:30:E7:5E
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:91:47:3b:36:53:2c:e7:b1:a1:e6:de:71:d9:d3:06:cb:
         a6:01:53:94:1e:9e:9d:36:45:e7:85:16:5e:f0:5d:6d:cf:cb:
         01:4a:13:22:dd:c6:5a:7e:33:25:23:22:1c:e5:16:54:13:0d:
         6a:5e:25:11:1a:cf:fa:cb:eb:8c:15:34:9c:4a:e5:ce:98:83:
         38:33:07:ec:9c:b4:8f:26:92:cd:56:11:24:f3:0d:55:c8:58:
         71:ee:58:b1:75:57:06:68:57:74:87:d7:e2:cc:a4:c6:bf:b8:
         aa:b4:13:3d:51:d6:03:09:24:82:29:cc:e9:96:29:ea:4f:9c:
         10:06:5e:bb:f4:d7:32:11:d0:48:a6:d8:7e:94:1c:14:c7:ec:
         dd:62:5b:5a:bc:ed:3a:32:d5:78:d3:44:b0:90:58:96:d8:a6:
         64:b4:94:30:a7:1e:3b:2d:a9:c1:b2:94:01:7a:a3:54:fa:e1:
         7b:26:1f:99:3c:13:6b:56:89:08:19:e4:21:61:0c:70:5a:d7:
         44:4a:17:76:ae:0a:c2:b3:bb:37:05:7f:a1:69:36:03:00:e6:
         04:3d:a9:07:3d:50:c8:3b:d8:c2:d1:6f:33:4e:7e:44:35:04:
         16:80:51:41:b6:6f:e6:cc:86:ce:02:9d:4f:20:75:38:de:aa:
         9d:08:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 22:38:06 2026 by rpki-client