This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File:                     QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier:          yHs/0HOh5qJTFq0PsNO9Yt2NRAMrF76jPsS2mLHUlWA=
Subject key identifier:   93:86:E3:C1:97:CB:E1:80:0C:58:61:2D:32:86:67:99:6F:79:79:EB
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer:       /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial:       019BA4FE321BD55600B06E4F766FD83FABA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number:          17C0
Signing time:             Fri 09 Jan 2026 23:01:20 +0000
Manifest this update:     Fri 09 Jan 2026 23:01:20 +0000
Manifest next update:     Sat 10 Jan 2026 23:01:20 +0000
Files and hashes:         1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: +Ggsn220X9tecaZgAq6d4MoWvKUOyvdLfq0/CLI+yrw=)
                          2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
                          3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a4:fe:32:1b:d5:56:00:b0:6e:4f:76:6f:d8:3f:ab:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
        Validity
            Not Before: Jan  9 23:01:20 2026 GMT
            Not After : Jan 10 23:01:20 2026 GMT
        Subject: CN=9386e3c197cbe1800c58612d328667996f7979eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:a3:25:26:c4:e5:69:43:6a:c6:5b:87:e3:
                    99:6c:8c:93:8c:32:29:c5:37:81:d5:66:c5:44:d6:
                    50:5d:63:11:38:ce:ac:c2:f8:21:b7:38:f0:8a:09:
                    2e:91:6c:29:19:7a:d5:0e:ec:e9:ef:ef:99:64:cd:
                    1a:fa:bd:1e:f3:9c:86:f1:66:25:6e:23:b6:a2:65:
                    ac:84:40:4f:ee:6f:5a:97:da:62:c6:bd:9a:22:5b:
                    e0:fd:ac:b9:83:56:c5:a7:ce:66:bb:c8:ec:b5:1b:
                    cc:e3:43:c6:38:c0:5b:9b:f6:41:82:52:70:4d:02:
                    ba:0d:f1:ac:02:da:c9:35:30:c9:6f:3a:71:e2:7f:
                    c1:28:39:99:e9:11:25:18:5c:2c:68:8c:7a:50:db:
                    91:fa:4b:23:45:42:dc:da:af:a5:12:86:4f:24:3b:
                    31:95:90:fb:9e:2c:33:85:5b:71:77:55:30:6c:9e:
                    7e:3f:7f:13:61:29:0b:16:58:e8:64:4b:0e:fc:81:
                    73:b9:80:30:3a:da:fb:ed:fb:9c:39:24:48:c0:76:
                    fd:c1:16:6a:50:0b:aa:87:27:1d:7b:4a:95:56:35:
                    a3:e4:35:9b:dc:43:6b:5c:73:c6:d4:f6:00:73:61:
                    b1:48:f0:5b:0c:e9:f8:0d:28:fb:25:85:2e:67:7d:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:86:E3:C1:97:CB:E1:80:0C:58:61:2D:32:86:67:99:6F:79:79:EB
            X509v3 Authority Key Identifier:
                keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:65:e1:e0:44:91:03:3b:d3:88:d5:ff:69:5f:0f:cf:62:94:
         f7:bd:88:2c:7d:5e:ee:67:3a:ab:09:0b:60:50:4a:1d:5a:f2:
         32:21:b4:4e:58:d1:bb:75:54:b5:d4:87:7d:7b:ef:ab:21:78:
         7a:63:18:16:cb:e6:4c:f9:47:44:0d:d0:34:62:fb:2c:6b:d1:
         a6:ee:7c:7f:b2:51:50:45:53:c3:29:b7:86:9a:52:af:b2:bb:
         21:31:89:cd:74:de:17:25:0f:19:65:cb:93:da:23:27:05:70:
         d5:ed:da:b4:c9:c9:a3:03:f1:18:42:3c:2b:e3:4d:ea:82:8d:
         11:bb:cf:69:34:77:5d:80:11:52:b3:68:9d:33:86:88:f2:96:
         6d:cc:9a:a1:24:32:c6:e3:eb:69:3b:56:ed:d4:50:e7:85:04:
         c1:e6:02:f4:86:71:97:d3:9a:06:2c:95:5d:7c:04:67:9d:90:
         65:06:dd:42:38:2a:15:26:7f:6c:4e:88:a2:20:d0:f8:f8:ff:
         79:73:74:79:1f:e5:29:63:43:04:04:25:a2:58:40:65:db:8d:
         40:10:c8:f4:9c:62:f9:10:b3:5e:96:ce:ae:e3:ba:7b:cb:ea:
         c6:0b:ac:11:9f:6c:66:9b:eb:87:0f:9c:c1:ec:89:ab:84:f7:
         2a:ad:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 07:10:32 2026 by rpki-client