This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          ztVW0zJqrOmm7GMK1mzdXdSw8QPDHa4ejIYWiEF+7Fk=
Subject key identifier:   18:83:F3:E1:F4:61:D5:C1:22:28:C3:5F:CF:2C:ED:FD:4C:7A:62:4C
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       019C38D5E090FBC777200463131AC6A8985B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          1809
Signing time:             Sat 07 Feb 2026 16:01:06 +0000
Manifest this update:     Sat 07 Feb 2026 16:01:06 +0000
Manifest next update:     Sun 08 Feb 2026 16:01:06 +0000
Files and hashes:         1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: NwS336v9qdXVOI4hkVURw74T8tLlCgYlUDI3JJMavow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:d5:e0:90:fb:c7:77:20:04:63:13:1a:c6:a8:98:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Feb  7 16:01:06 2026 GMT
            Not After : Feb  8 16:01:06 2026 GMT
        Subject: CN=1883f3e1f461d5c12228c35fcf2cedfd4c7a624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:74:26:33:3e:2c:aa:c8:0d:ad:8f:4a:72:
                    cd:32:fa:f8:74:84:33:2b:57:0d:2b:bf:b6:84:27:
                    f9:f1:8a:84:22:e6:5c:02:ce:e8:82:cc:f1:3d:34:
                    93:ec:ee:16:95:06:2d:91:c9:25:96:d5:5f:cc:7c:
                    67:85:14:6a:d0:a9:ac:1f:35:c0:54:80:be:cc:5b:
                    5c:09:bc:77:e8:e7:be:b1:d6:16:ef:b4:3a:e9:2e:
                    6a:28:82:81:c1:04:4e:34:fb:3f:5f:4e:a6:dc:0e:
                    27:88:a8:bc:07:14:2f:e5:6d:0f:7e:8f:2a:2b:53:
                    94:e4:81:1b:54:f9:dc:f4:3b:21:23:8c:f3:fc:5a:
                    3e:47:89:e5:e1:a1:3a:08:5a:d3:d9:d5:9d:53:cd:
                    24:7b:93:a4:ef:35:c1:4c:9c:30:1a:06:67:42:fe:
                    84:74:cb:a4:44:70:35:f0:d9:64:3b:2d:8b:58:8e:
                    63:99:13:47:17:fb:91:2f:87:27:4a:4e:a3:fb:cd:
                    91:84:a2:3c:a7:86:6c:ba:c9:2e:32:c3:8d:62:d5:
                    9f:83:c5:d4:b4:29:9d:b8:cb:54:ce:0e:c6:35:86:
                    89:b1:fd:77:1e:b7:a9:5f:bb:cf:a0:6d:90:66:9b:
                    24:84:c8:6e:1a:cc:69:30:7c:6d:85:71:93:81:ed:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:F3:E1:F4:61:D5:C1:22:28:C3:5F:CF:2C:ED:FD:4C:7A:62:4C
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:82:6e:5d:09:ce:b9:d3:2a:7b:10:89:77:ec:16:35:91:
         f9:20:b8:cd:6d:36:ae:9d:6f:3f:8f:64:cf:63:6a:d2:d1:f2:
         b6:dc:16:e1:82:26:12:a9:52:4c:dd:6c:fd:e9:4e:64:af:65:
         89:b6:8f:60:1b:09:6b:2a:68:72:bf:eb:5e:07:8d:da:65:5d:
         be:ad:09:c0:7a:7e:2c:48:db:89:13:3f:a1:6e:16:a0:c1:ad:
         95:12:36:55:72:71:97:82:37:2a:10:a6:07:87:33:f6:a0:93:
         c8:65:1f:99:4e:43:37:13:db:08:8f:fa:36:4d:9b:da:b9:0f:
         4a:fc:4d:02:31:40:6b:5b:20:a6:b2:69:48:a1:9b:98:f1:48:
         39:e6:b7:8d:5c:25:32:b4:66:1f:f9:7b:6b:42:90:c7:cd:65:
         d6:e7:79:ba:c9:3c:d3:98:0b:10:b5:06:b9:63:1f:27:db:0c:
         56:37:b3:3d:7f:0e:4c:9c:9e:50:a4:28:01:e1:ba:ac:0e:5e:
         c3:67:b5:4a:b9:7f:5f:fa:32:fb:ca:c1:71:35:63:0c:21:3f:
         94:78:41:c9:cd:36:6b:a1:43:50:5d:e3:cf:51:f9:d5:13:6c:
         5b:9d:e2:43:15:26:69:11:03:30:dd:eb:53:35:8a:b8:5a:6f:
         46:24:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 20:52:36 2026 by rpki-client