This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          LJsCuxOGrQGzQEEt689PYb5azaiZ55ZTArZ7anK3w3g=
Subject key identifier:   19:B2:48:48:8C:62:6E:AC:D9:B3:6E:62:6E:AD:7C:FE:2C:15:89:EF
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019BF91B02973045DCF62C794EF931978523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 07:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 07:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 07:00:55 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: TBIRsi1uHebFyCsADTnXnhSrxYg3RAzNkZH2CUG0Tos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:02:97:30:45:dc:f6:2c:79:4e:f9:31:97:85:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jan 26 07:00:55 2026 GMT
            Not After : Jan 27 07:00:55 2026 GMT
        Subject: CN=19b248488c626eacd9b36e626ead7cfe2c1589ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:eb:cc:b8:c6:6d:0f:8c:14:48:46:85:6c:
                    8c:ed:63:63:e0:07:5b:50:04:6b:c0:2b:d3:0a:fb:
                    73:7a:0c:8c:54:fa:a8:f0:53:85:77:0b:ea:94:9d:
                    be:33:01:26:22:76:8b:31:4f:25:b4:4d:4f:8b:25:
                    dc:4a:f2:99:07:cf:50:ce:ab:ca:35:a9:05:d7:c6:
                    13:f6:28:e5:54:fd:d7:36:bc:3d:77:5f:f1:05:a8:
                    6a:1a:6a:97:c6:05:53:b2:7a:5f:21:17:b7:12:4c:
                    09:75:dd:bc:9b:9f:6f:33:a0:d8:96:0a:f3:31:08:
                    10:74:5a:6a:28:0a:17:6d:ea:9f:c3:74:3b:d6:f7:
                    05:a7:68:81:fa:2c:ca:45:0c:40:3d:aa:c3:fd:a8:
                    81:95:c0:f9:fb:65:7f:da:16:bc:4e:95:4d:91:e8:
                    42:08:47:5a:76:35:07:48:1b:b5:4f:7b:83:be:b0:
                    e6:66:57:14:3b:16:95:0e:20:ba:1d:66:e1:7b:fc:
                    df:0a:aa:1e:95:ca:48:58:02:e0:a7:cd:bf:eb:d7:
                    1d:3d:d2:e2:9a:8f:7a:16:40:9f:0e:c8:a2:99:34:
                    5a:0f:5b:8a:4b:a0:75:0f:de:ab:df:e3:73:ca:de:
                    e6:40:f2:ae:bc:cd:4b:4f:e1:1c:41:be:de:d0:30:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:48:48:8C:62:6E:AC:D9:B3:6E:62:6E:AD:7C:FE:2C:15:89:EF
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c5:e0:f8:a1:04:6a:d6:7a:54:65:8a:9c:cf:15:f6:da:36:
         78:a5:01:54:7e:a1:00:bb:72:4c:be:f3:ea:ba:5a:1d:f9:e1:
         e3:5e:9e:35:a6:b3:9a:19:be:b5:20:b2:bc:8d:0e:eb:9e:20:
         21:f6:e8:09:7e:7e:09:fb:ec:20:89:05:4e:54:bd:46:95:9e:
         8f:17:ef:db:52:70:54:7f:08:47:ff:d3:dd:ec:f5:88:16:74:
         4d:63:3a:47:d8:02:be:7c:86:35:76:77:81:66:d5:72:a3:84:
         d7:bc:f6:e9:3a:71:63:49:88:dd:08:64:34:28:ac:65:5d:c5:
         4a:af:63:7a:5d:c0:5b:4e:d2:18:58:59:a7:b3:8d:31:8e:39:
         b0:24:72:e8:e0:f1:9b:21:36:b5:72:e4:db:fa:d4:46:d8:9b:
         e8:04:db:ff:05:e4:23:9e:94:4e:d2:93:f8:b3:c4:25:2c:ad:
         5e:cc:93:68:ac:5e:63:8c:fa:e6:be:2d:5b:2e:ae:03:3e:fe:
         b0:9c:69:ad:42:96:bd:ba:64:01:f8:66:48:0b:f1:39:36:35:
         69:9e:99:ef:4c:8e:e8:3d:fb:9b:dc:bb:38:2d:8a:83:6b:24:
         36:a3:d4:f8:fd:a4:e8:1a:81:8f:10:60:26:d5:0e:91:b5:e0:
         41:75:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:28:23 2026 by rpki-client