This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File:                     QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier:          WaGgY73iTAupZnDTCHwI/T4GS035GPBJEnI/rEBukEw=
Subject key identifier:   E2:85:26:F2:C8:9B:48:35:C6:EF:13:99:E0:0E:DD:7D:2A:05:FA:87
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer:       /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial:       019C43FDF421C6DFF27F3117E6F8DA8C623B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number:          1460
Signing time:             Mon 09 Feb 2026 20:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:42 +0000
Files and hashes:         1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: uYy6u3+LYy14cPBWkLooqOS7xY0PDbSXAYK9e//Yjck=)
                          2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:f4:21:c6:df:f2:7f:31:17:e6:f8:da:8c:62:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
        Validity
            Not Before: Feb  9 20:00:42 2026 GMT
            Not After : Feb 10 20:00:42 2026 GMT
        Subject: CN=e28526f2c89b4835c6ef1399e00edd7d2a05fa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:bf:3c:e0:90:a9:60:fa:e6:2f:89:de:cc:
                    4f:b3:20:ed:06:19:ad:ee:7b:71:af:7d:a0:eb:d2:
                    9d:c4:95:eb:98:aa:22:3e:bc:10:09:22:3c:e7:5d:
                    82:6e:0c:bb:b0:35:df:fb:9c:c2:66:f3:a6:4d:75:
                    1a:eb:89:6c:7c:8e:9e:ed:6f:81:e9:37:d2:80:9c:
                    04:14:ef:85:b7:6f:ed:6e:76:20:b5:13:85:b0:2e:
                    5e:c3:3e:60:b8:7b:8c:ed:e2:dd:25:21:c0:53:a3:
                    37:7e:82:23:75:f8:9f:c5:12:58:ae:51:bd:11:ff:
                    9e:28:fb:ff:b8:b7:fe:42:eb:11:38:23:6e:e3:e5:
                    c2:d4:87:6a:36:af:7e:51:e5:84:a9:dc:6d:61:b2:
                    53:c2:8d:5a:30:13:47:1f:8b:2d:72:fc:8f:0b:d3:
                    51:cc:05:9f:e4:23:4e:be:2e:44:b8:51:d6:51:9b:
                    83:b8:e2:f3:d6:a3:c5:34:7f:cc:cb:08:4c:eb:20:
                    7b:36:10:3c:18:1d:e0:de:41:86:44:bf:c7:5a:9b:
                    f2:37:c9:c2:0a:1d:a6:d9:34:1b:75:4d:c7:36:6b:
                    70:4c:37:c9:06:b2:cc:7b:c7:a1:69:46:99:aa:e7:
                    35:46:78:e1:27:cd:0a:d2:ce:94:fe:8e:f6:a5:09:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:85:26:F2:C8:9B:48:35:C6:EF:13:99:E0:0E:DD:7D:2A:05:FA:87
            X509v3 Authority Key Identifier:
                keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:fc:4b:70:00:53:55:95:0e:9e:14:26:8d:79:83:a1:0b:
         33:5c:0c:be:ca:dc:21:91:be:4a:72:b3:64:ea:c0:98:e9:db:
         93:f8:48:14:9d:c2:71:f5:b4:9b:38:91:1b:bc:86:34:ac:c6:
         cf:19:68:9b:6a:a7:b6:19:f6:f7:d6:51:26:47:66:2c:cf:e2:
         97:cd:8e:47:bd:e8:14:b6:db:9b:8c:36:fe:10:3f:06:04:f7:
         59:93:a7:34:9a:9a:33:42:e7:d6:13:a2:0f:11:fd:b7:62:69:
         d1:a4:71:a8:41:fd:0d:69:18:8f:df:9c:bf:9c:a5:da:7f:d4:
         20:ea:37:36:9f:51:19:be:04:67:1b:8e:98:e1:52:a3:88:ab:
         0b:1b:dd:98:96:3d:55:b4:d0:a9:a6:89:7c:00:5d:7b:7d:4e:
         5a:48:cb:b6:ec:1b:3f:2f:cc:b7:d0:50:a2:4d:97:2b:e2:f7:
         03:86:32:fd:be:68:d1:30:00:fe:66:09:72:c5:5e:9b:c5:39:
         94:eb:08:4d:d9:d9:4c:7b:9c:62:41:5e:1a:90:1c:86:53:82:
         fe:22:8a:b7:e1:05:f0:33:c0:de:1b:49:7e:48:1c:ab:f1:e7:
         34:d4:13:c0:28:aa:c5:73:91:21:83:48:14:ad:3a:5a:ee:53:
         2d:f8:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:08 2026 by rpki-client