This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File:                     q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier:          ohQ8CdlcWQja+ywS5+UxPVoP99zX6S0H3HhaO9sWvio=
Subject key identifier:   8A:0B:53:52:49:15:8D:2C:63:D0:21:3D:BA:6B:68:89:E9:FC:CD:EA
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer:       /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial:       019C443518F4BCEA08E21AB86BA8D57479C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number:          181C
Signing time:             Mon 09 Feb 2026 21:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:56 +0000
Files and hashes:         1: TmsmTGmgS6sd6WFv5Rsll00K2Gs.roa (hash: wAic2J4bqDmqrmzEVgtvUbDKm5nBwL0cJ98lVKcttls=)
                          2: kqNTY8751og8kN19fxFeigG4e98.roa (hash: b8fVv0NMLEzs/3BCKjCTfnvYfb1zU98CSy6bYESkj4U=)
                          3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: gBjsL371PlJZhwlWhUfFbifG0wWJCrCJyXuM4CKDnFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:18:f4:bc:ea:08:e2:1a:b8:6b:a8:d5:74:79:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
        Validity
            Not Before: Feb  9 21:00:56 2026 GMT
            Not After : Feb 10 21:00:56 2026 GMT
        Subject: CN=8a0b535249158d2c63d0213dba6b6889e9fccdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:67:20:ef:1b:0e:33:86:14:b6:7a:e9:80:
                    c5:b2:9c:82:8b:0e:04:9b:41:82:85:9c:cc:da:ea:
                    8b:b9:b4:c0:95:cf:5f:77:85:46:62:7f:9f:1b:36:
                    17:c4:0b:46:2c:ea:fe:16:57:66:a9:5f:6e:f4:c9:
                    a0:b3:af:10:03:e2:2a:c4:0d:aa:2d:9d:c5:00:ae:
                    76:4f:1e:7e:b9:0a:e2:84:94:3b:8e:4f:f0:e8:9e:
                    62:14:e3:6b:18:75:1e:54:ca:c8:e4:f3:7b:93:a8:
                    a8:bd:d2:d6:18:9b:48:83:bc:66:4c:88:d5:b6:69:
                    ec:06:29:bb:38:8c:1d:77:76:55:5f:ee:16:a1:ca:
                    5d:d3:38:9a:60:e4:c2:42:74:9d:c6:50:38:59:82:
                    d6:44:b9:d4:c3:4b:24:65:dd:1c:11:76:e6:8c:db:
                    8f:00:00:f6:19:aa:40:77:07:39:59:95:47:54:04:
                    b1:de:90:c3:c1:5e:fe:12:e4:99:5b:0b:1e:ca:af:
                    a9:00:9a:87:f4:d4:11:9f:84:38:e3:9d:29:11:9b:
                    32:b0:07:5f:74:27:2c:e6:4c:30:70:54:62:a6:0a:
                    df:f5:10:c0:89:3d:99:ab:8b:67:da:32:f0:65:1a:
                    21:a4:0a:f6:41:32:32:fd:e0:36:39:6b:50:bf:57:
                    63:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:53:52:49:15:8D:2C:63:D0:21:3D:BA:6B:68:89:E9:FC:CD:EA
            X509v3 Authority Key Identifier:
                keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:d2:e1:5b:27:60:53:1e:a8:87:fa:4e:c9:65:b8:79:ed:
         14:b5:f2:ca:a7:6d:ec:b8:42:8f:e2:4c:42:ef:1a:bd:e6:6e:
         af:a3:d4:fe:d8:fa:77:38:06:e7:d5:a3:f0:f6:ac:2b:a0:e9:
         4e:dc:ba:23:70:d2:64:87:41:ab:a1:42:51:3f:f9:a6:af:7e:
         09:e9:22:05:4e:aa:1f:4f:71:34:7d:9d:26:9e:11:e5:e3:d1:
         3c:57:41:f0:37:13:8f:04:aa:e4:ce:97:f9:7e:4b:27:5d:7a:
         db:33:98:9c:be:62:34:87:2a:9b:2e:0f:95:bc:08:77:1e:0a:
         55:e4:9a:bc:4b:44:84:99:b1:29:19:35:5a:aa:e1:f5:5c:23:
         19:34:3c:93:b6:f3:e1:e3:2d:76:65:35:36:21:d9:13:b5:af:
         fa:de:69:36:54:6c:e2:e1:31:74:bd:9b:f7:a8:23:bc:dd:fa:
         c5:56:dd:61:40:01:d8:72:5d:0a:0d:cb:83:08:0b:9d:69:3e:
         62:48:b7:07:62:b7:2b:44:35:11:66:3d:8d:42:86:d7:c8:3e:
         02:3f:6e:69:b3:e2:c8:2d:74:11:cb:09:29:53:95:f1:88:ff:
         97:3e:79:b4:98:f7:25:b7:79:11:1b:bc:e1:10:ba:17:04:4d:
         8f:a9:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:30 2026 by rpki-client