This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          gbC4QXkTZzyyhwWzXk0M51qmWQjTyhl4ZJhV29K8E1A=
Subject key identifier:   B0:16:12:D6:67:BE:EE:F4:07:84:79:94:29:F1:6F:9C:80:69:CE:13
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019C359D60DAA9A2C5487CB39A29F8A930E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          12E7
Signing time:             Sat 07 Feb 2026 01:00:32 +0000
Manifest this update:     Sat 07 Feb 2026 01:00:32 +0000
Manifest next update:     Sun 08 Feb 2026 01:00:32 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: 6cmrjMclr5tkNXHU/koomyuRuc+Ea4isZU74keX9hB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:9d:60:da:a9:a2:c5:48:7c:b3:9a:29:f8:a9:30:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Feb  7 01:00:32 2026 GMT
            Not After : Feb  8 01:00:32 2026 GMT
        Subject: CN=b01612d667beeef40784799429f16f9c8069ce13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:f5:ff:e4:f2:8f:08:d4:10:1d:83:a4:a3:
                    88:9b:3d:ad:8d:15:b0:59:80:38:d0:44:74:3a:39:
                    5b:68:9f:f0:0a:84:39:af:8a:9c:72:9f:23:72:d5:
                    54:a5:dd:aa:bd:9e:23:09:32:70:83:77:26:a0:4f:
                    f4:90:9c:73:97:c4:27:8a:67:2a:bf:9f:fc:c5:3b:
                    8b:8d:0f:f3:e9:bd:56:18:0e:22:ee:97:97:cb:04:
                    b0:0a:56:88:6c:2f:51:be:b6:b4:78:34:4c:ad:8b:
                    99:09:3b:92:22:05:4b:4c:f9:aa:0a:22:4a:2a:18:
                    8b:6a:81:97:e1:29:fc:4d:05:95:37:42:ac:f4:f3:
                    ff:93:59:94:04:19:2b:91:3d:bf:a7:cf:81:74:dd:
                    06:ff:1a:e7:55:4e:f6:4a:94:3f:a6:e1:59:d8:32:
                    40:12:84:dd:f4:c6:be:23:f0:6c:34:bd:cc:c2:34:
                    1a:4b:9c:49:04:6e:4c:d4:7b:1d:42:10:3e:f4:76:
                    76:0d:bd:fe:f1:28:ce:45:27:14:11:94:48:1a:da:
                    3f:df:bd:61:bb:fc:b5:d1:fb:9f:ff:c5:bb:e3:5b:
                    61:2b:df:1f:ca:ef:9f:dc:e7:a9:78:c8:cc:7d:4d:
                    48:fd:35:2b:d4:c7:81:69:a4:5c:dc:cc:b4:c5:cd:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:16:12:D6:67:BE:EE:F4:07:84:79:94:29:F1:6F:9C:80:69:CE:13
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:23:e7:89:96:64:54:7f:c5:d0:9a:33:e2:fa:29:f6:e7:
         80:51:67:40:6a:ba:9b:db:a6:a8:0c:cf:89:35:2c:24:0f:ea:
         40:1e:e3:83:c2:1f:86:3d:74:ae:8a:a3:e0:63:b9:0f:26:6d:
         94:b1:42:f5:b1:17:65:b3:e9:b8:89:90:e3:87:a6:64:e7:e0:
         8f:ce:a7:a6:01:2a:63:50:e8:84:aa:46:ec:2b:d9:5d:48:18:
         73:0e:8d:36:4c:79:e7:bf:d9:f6:64:f5:14:2f:a3:19:8c:c4:
         79:bc:fa:fc:13:05:59:6e:23:34:c1:9a:8c:25:39:95:b9:be:
         a9:13:4a:2c:ce:cf:c4:23:80:8c:19:85:29:83:40:f7:83:a6:
         99:77:dd:f4:cf:a1:11:62:17:93:93:b1:57:fb:4d:b1:84:a9:
         f0:b0:2a:3b:98:53:7a:db:2e:30:c6:2d:82:58:b0:2f:68:ca:
         b5:c7:eb:d8:e5:c5:98:65:08:a4:76:cf:3e:dc:84:1e:87:cf:
         e3:9e:89:bf:f2:2e:0a:7a:5b:81:70:5e:1e:8b:9b:a7:00:20:
         77:de:82:8d:c9:94:8c:8f:b5:43:63:c0:8c:ee:b4:4d:e2:fb:
         2e:55:4a:64:7c:c5:87:2d:68:bc:ca:cc:c4:00:18:ce:be:de:
         37:37:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 11:39:13 2026 by rpki-client