This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          +qhemMuFjvu3MmYVQ7emCcRnvIWR9G23AZFpZ0aw+wc=
Subject key identifier:   A1:99:F5:77:95:96:79:D6:82:8B:4B:B9:9C:32:94:73:11:E9:2B:CD
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019BF53E5CA338313423AFABF6FA436EF3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 13:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:03 +0000
Files and hashes:         1: 4zqOo2SM12tzCSyJyEiRJDqyLeE.roa (hash: xhzylJcPJUd2ec6iCX/8IUuxbVDyJDMhXg/eaPmydQk=)
                          2: CpR7zdaWFgeP_a3JunXPR9g-kLM.roa (hash: +G+gW4DG9/VXzfDnCfnSWW4i5dWFOrWQai2m9hvQ4Jo=)
                          3: NcgEquPk4dqA6kZfv1d9WtImU1g.roa (hash: dJAF+c5UKrR5ihGU6h+RnFVtoMxdremp4iO/MCSr3CI=)
                          4: OghForkImI0Jo0zBq3XHOESQXuc.roa (hash: jMJmmzeuAO8dk90vNQKpGRRQiIdwuWD8TX9EqhW2Bbc=)
                          5: _W2M19fEeYWYsJYF-LdRGnP5HT4.roa (hash: Pmvi6OlA3CER/RWwL2L21FShj4gRY6R+MGZg5vLD+/o=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: 20KnaYPAplkejMUi8ANM3L3WKSzTnDQhtaogOcDbr3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:5c:a3:38:31:34:23:af:ab:f6:fa:43:6e:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jan 25 13:01:03 2026 GMT
            Not After : Jan 26 13:01:03 2026 GMT
        Subject: CN=a199f577959679d6828b4bb99c32947311e92bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:2a:e2:8e:8e:eb:e8:24:61:22:fb:52:7b:
                    cb:e3:ce:e9:ca:f2:bf:6a:e0:35:d4:51:db:8a:f7:
                    49:8b:11:70:74:1c:02:84:fe:26:4b:47:4e:df:fd:
                    1e:e0:ab:14:cc:2f:1b:ea:8c:c1:17:f1:0b:40:e3:
                    c6:51:79:98:7b:c2:9d:3c:22:65:58:bc:50:d8:ff:
                    de:08:1b:8e:53:0e:fe:1c:79:d9:a9:21:ed:ab:f0:
                    95:74:2d:49:c4:85:31:7f:dc:5b:54:bc:79:d6:58:
                    60:bf:a2:c1:37:b6:cc:aa:31:14:1c:f2:49:a4:2c:
                    34:cd:f3:6a:58:3f:ac:b2:45:c4:24:4e:4e:69:e1:
                    c8:76:38:39:79:2c:4c:96:df:ae:30:4b:1d:7c:ad:
                    59:49:08:58:83:69:dc:48:95:2d:be:4a:b7:0e:ce:
                    8c:2a:a0:7c:5d:8a:d0:2b:8b:05:3d:70:5b:04:f8:
                    48:42:6b:39:00:12:54:4d:a9:df:33:fa:77:68:86:
                    b1:ac:53:94:2b:c1:1e:52:a8:83:5f:2b:eb:0c:d6:
                    31:82:42:1c:de:38:a1:ca:9e:07:fa:79:80:21:e0:
                    65:4a:7e:81:33:b6:40:9f:0f:ea:6c:f5:16:6a:1f:
                    8f:04:22:e0:c9:52:42:90:65:01:b6:49:94:fd:e6:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:99:F5:77:95:96:79:D6:82:8B:4B:B9:9C:32:94:73:11:E9:2B:CD
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:81:11:2c:40:2f:69:51:bb:6f:0c:27:ac:35:ae:83:58:95:
         93:21:14:08:e0:22:2c:f4:32:0c:eb:cb:50:11:5e:6f:6f:5f:
         32:0c:95:96:c3:ca:b5:2d:b9:69:d9:ff:9d:20:00:d6:5e:af:
         ad:9b:1c:45:9b:9a:db:7e:46:95:68:19:35:0f:81:fe:6e:df:
         e1:29:b1:a4:dc:f3:76:3c:a5:29:96:16:8e:4f:cd:8c:4a:46:
         2f:56:92:09:2d:47:b3:78:3f:00:5e:91:92:4e:8c:9e:ed:3d:
         db:2b:b4:a4:e1:a6:a6:cf:f5:3c:58:e6:a0:83:cf:4d:4a:82:
         1d:bc:61:99:a4:45:a6:4f:90:40:26:0c:92:8e:76:78:50:c7:
         fd:76:15:88:ff:04:8e:9e:4f:95:82:fc:ef:85:c3:6d:dc:bf:
         fb:0b:84:f8:0d:fa:d5:67:1d:90:3a:95:f1:9e:8f:86:29:60:
         f8:09:40:e2:ef:60:08:82:32:40:66:86:26:24:62:3e:2c:06:
         c1:b2:42:09:df:08:81:39:5b:5e:18:21:29:e8:62:67:94:78:
         6e:a1:0e:44:65:1c:6f:67:b6:bc:d2:d5:be:c0:83:95:24:92:
         59:97:dd:63:2b:a3:66:45:13:1a:d0:b1:86:87:19:7c:70:53:
         d5:db:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:07 2026 by rpki-client