This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File:                     qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier:          +ct4OJOxxnB2cIWnc1PdVpV6BWX2/MnF4A8t9BL/Lws=
Subject key identifier:   63:57:A2:C9:09:39:6F:48:24:34:35:50:64:F1:54:C2:5F:8D:4E:22
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer:       /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial:       019C41D8BDBB01661F952F52453FE45E8F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number:          0BFB
Signing time:             Mon 09 Feb 2026 10:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:49 +0000
Files and hashes:         1: _8dqyaacWAiBj7GrWnfshRhnGVY.roa (hash: sW41H20Oh0pfgWyCjhtCKwUXmZEC6nQrjm/lQBX3AVA=)
                          2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: VeKQo3uTVd2ofWg81EnJQirB9Uvz86mlMkabdcLcBCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:bd:bb:01:66:1f:95:2f:52:45:3f:e4:5e:8f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
        Validity
            Not Before: Feb  9 10:00:49 2026 GMT
            Not After : Feb 10 10:00:49 2026 GMT
        Subject: CN=6357a2c909396f482434355064f154c25f8d4e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:c7:6d:d5:57:66:e3:c0:63:ad:8f:06:dc:
                    5b:49:d4:95:f0:9c:cf:47:8d:23:6c:77:6c:c4:89:
                    e6:5c:18:6e:9a:cb:ff:40:42:cd:19:03:eb:07:6a:
                    b6:d2:48:f7:8b:11:a9:a7:41:7c:b1:3a:f0:d3:5f:
                    59:c6:df:78:0e:6a:28:a8:79:17:7e:5c:8e:26:d3:
                    0f:01:73:47:34:4d:e0:dc:0b:30:ef:ee:b0:ac:9c:
                    b0:79:6b:b0:6a:3a:3d:9b:de:7a:0a:01:9a:33:a8:
                    bf:30:08:0d:bb:21:6e:cb:19:39:92:c9:65:0d:68:
                    a1:67:bc:89:27:c3:1b:61:7e:d5:aa:85:cd:f8:d9:
                    71:66:53:50:b7:e9:4c:36:62:41:ab:42:5f:ca:fb:
                    9c:30:bc:93:92:b2:57:e2:e8:62:d3:6a:3e:94:ff:
                    73:43:41:60:1e:de:3d:5a:28:ae:cf:f6:78:54:8e:
                    f2:24:c2:c9:35:28:cb:a4:ac:40:95:03:79:66:6d:
                    f4:2c:01:cc:8b:27:bb:92:c8:9a:6d:41:f5:ee:9a:
                    fd:43:39:f6:a1:cf:f3:a3:3f:63:8e:ef:dc:94:f1:
                    1b:2b:15:0f:72:e0:9a:b0:61:ca:0e:d4:26:0d:cf:
                    66:25:3a:e4:39:db:f6:b7:83:a5:ca:c4:ac:1a:ad:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:57:A2:C9:09:39:6F:48:24:34:35:50:64:F1:54:C2:5F:8D:4E:22
            X509v3 Authority Key Identifier:
                keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:c9:e1:3d:b7:f9:1e:c8:ec:20:f1:52:cf:3b:76:58:3b:
         08:a4:f3:f2:e4:83:fd:09:77:ce:7d:4e:e9:1f:f9:58:a7:5b:
         8b:87:2d:00:a9:9a:17:fc:f0:40:64:45:41:49:b0:9b:57:e0:
         d9:17:6b:00:1d:33:77:70:aa:75:5d:0a:34:96:25:fd:4f:5f:
         b8:21:cc:9a:f3:36:36:be:5d:cf:90:32:24:ab:75:00:ab:39:
         5c:09:d4:3c:a0:10:08:39:58:b6:b3:50:a4:1a:6b:89:d9:d4:
         95:76:db:4a:1f:86:76:98:2d:02:76:36:ba:4b:c2:b8:17:11:
         59:76:e9:64:40:4a:d7:70:de:f7:fd:05:9c:ef:9c:b3:d7:4f:
         0b:3c:9b:e8:2f:57:38:f6:9b:a5:61:1f:09:77:e6:f6:0a:f8:
         ee:1f:c0:ef:59:ad:15:ae:28:05:82:39:02:eb:06:80:32:cc:
         e4:b2:ce:32:1e:45:e0:6c:02:bf:ed:51:21:bf:48:ea:e8:e3:
         45:f8:e5:92:ef:93:68:46:ef:6f:ed:bf:6f:53:10:68:6b:40:
         ac:a1:cb:fb:bf:3f:df:b4:a9:83:57:1a:11:97:fb:b5:d1:d3:
         39:ee:e6:7f:fc:bd:54:16:44:c9:98:c2:8f:85:bb:ca:b8:dc:
         4f:03:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:55 2026 by rpki-client