This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          ArB2PcPLGGEBMUuyp8jThwNRiWXC4FyOmOwt5RaPNXs=
Subject key identifier:   04:01:4D:30:A3:14:B5:FB:DB:2F:E2:60:37:6F:AF:79:B7:74:B7:52
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       019C41A188F05635F7E765702CB9AC649CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          165E
Signing time:             Mon 09 Feb 2026 09:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:31 +0000
Files and hashes:         1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: T5+q79WSfivv2gNkK6PfNTRll8lfuapslMSnL2E68tE=)
                          2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:88:f0:56:35:f7:e7:65:70:2c:b9:ac:64:9c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: Feb  9 09:00:31 2026 GMT
            Not After : Feb 10 09:00:31 2026 GMT
        Subject: CN=04014d30a314b5fbdb2fe260376faf79b774b752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:8d:60:48:a2:d1:48:21:2f:53:09:e6:d2:
                    bf:02:63:a5:ea:4b:fc:e5:32:53:c2:4a:df:16:5a:
                    75:61:75:ee:a4:50:d8:3f:60:6c:be:85:92:2b:3b:
                    5e:21:1e:12:f7:cf:b3:ae:a5:de:61:1d:13:39:e3:
                    24:74:24:27:d3:20:af:3f:59:72:5e:26:93:65:24:
                    c0:44:a8:da:13:bf:55:a7:08:bb:ea:49:48:9a:01:
                    21:f9:a3:95:7e:ae:c7:87:30:26:b7:ef:2d:42:93:
                    0d:d4:9c:47:9a:52:7e:fd:3d:6f:31:20:39:06:fd:
                    81:a4:76:22:8b:87:03:8e:f3:69:8c:67:64:21:74:
                    e0:26:24:66:9b:91:50:64:5c:d2:cf:41:7a:25:c0:
                    14:ce:7a:22:18:de:b8:01:7b:ad:7b:64:7e:7b:07:
                    f6:b3:48:5f:4d:09:26:c4:e4:62:ac:cb:0b:bd:e6:
                    01:17:a3:32:e1:37:77:88:6f:4b:69:22:e6:df:1b:
                    c9:18:94:d3:b0:1e:ae:4b:83:03:cb:c5:bb:41:ab:
                    d1:32:cc:11:8f:3e:3c:a7:bd:f8:ea:89:13:d1:9f:
                    50:9d:f4:9a:ea:bf:3a:a7:bb:40:26:f5:35:d2:b7:
                    e2:64:a1:d2:4d:b3:21:31:e7:84:88:9c:e0:d0:81:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:4D:30:A3:14:B5:FB:DB:2F:E2:60:37:6F:AF:79:B7:74:B7:52
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:86:59:63:b5:f8:0a:72:d6:88:be:e2:78:32:14:2c:df:
         af:36:08:91:ee:c6:d1:31:33:ec:08:a6:02:ea:51:31:6d:17:
         bb:6e:91:4c:51:64:d0:c1:e9:6e:7d:55:fd:82:d8:19:f9:e7:
         63:e3:f8:b4:48:d7:d9:a3:65:5b:6f:d8:a6:5f:b5:dd:44:0a:
         24:8f:ed:da:a9:1c:bf:ea:8d:1e:b0:b2:d9:89:86:8e:96:38:
         ce:f7:ed:a7:92:ad:46:da:3c:c3:7f:14:47:17:5f:fb:79:a5:
         7e:0d:50:87:61:8f:09:19:33:ee:46:20:7f:fb:91:4b:31:4d:
         d9:ec:bb:a6:0d:d0:57:78:90:c9:74:17:61:39:19:88:e1:83:
         f0:70:58:69:67:e0:c8:2a:45:91:84:11:2d:67:0f:78:a0:f8:
         aa:23:f6:21:19:f8:26:64:53:63:a7:4c:61:e2:bb:af:de:b1:
         fb:b9:46:de:60:55:af:2f:98:c4:9c:7e:d6:35:be:a9:5f:40:
         db:6d:d5:92:02:31:37:38:5e:ba:56:3d:4e:cb:99:4e:ad:1e:
         9e:9a:9a:a7:29:d7:f1:9c:e6:1e:fa:d0:04:04:ef:4b:37:0f:
         33:42:4e:dd:2e:89:a2:ae:13:d7:fe:b3:eb:9d:dd:f7:bd:d8:
         65:6d:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:43 2026 by rpki-client