This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File:                     qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier:          VOg25ewQRE34NVtIXt/0EMuNjLOMszNGmL3zo5V8pWs=
Subject key identifier:   78:D6:45:20:A3:56:6C:9B:C3:07:48:51:49:B6:2E:F7:C3:2C:79:82
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer:       /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial:       019C40FD4CECA9B16DBD1DDFD936F76BAB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number:          031B
Signing time:             Mon 09 Feb 2026 06:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:07 +0000
Files and hashes:         1: 7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa (hash: dJfyXH3Ih6KNLcTIHiS1qro2e4tZl7n+nF8SgkkUKW8=)
                          2: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: mMsbaVR1qF/gGP9qpHxlOWMlNIiLsMzut9zO97Ebodo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:4c:ec:a9:b1:6d:bd:1d:df:d9:36:f7:6b:ab:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
        Validity
            Not Before: Feb  9 06:01:07 2026 GMT
            Not After : Feb 10 06:01:07 2026 GMT
        Subject: CN=78d64520a3566c9bc307485149b62ef7c32c7982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:e2:06:c1:b4:2a:7e:1f:5e:cb:e8:fc:b6:
                    9c:03:a4:90:8d:37:66:9f:c8:06:79:d1:15:aa:9f:
                    c3:b6:5e:38:ed:80:21:7b:9b:ae:e5:3f:b7:9b:21:
                    6a:ca:6e:af:fb:a5:ea:c5:d9:8d:01:32:eb:b6:87:
                    0d:91:d1:f7:67:e9:ed:da:a9:df:62:b6:8f:25:2b:
                    5e:52:ab:a7:88:90:96:93:66:f9:d4:60:d7:48:50:
                    be:c6:17:3e:98:6a:83:42:45:1e:2d:a7:74:e6:a1:
                    46:da:29:56:14:d8:c8:f5:5f:43:c4:79:0e:bb:8d:
                    04:65:9f:87:08:07:24:c0:53:10:92:4c:6d:b5:07:
                    1c:32:47:24:02:b4:5b:5d:d5:82:c4:3e:49:e5:2e:
                    62:63:5f:f7:71:5a:30:86:b5:88:08:34:41:b7:93:
                    8d:30:b8:68:d1:5b:26:c6:f0:07:ef:47:19:c0:1e:
                    5b:5b:97:52:8e:24:c6:33:d9:bc:83:a4:d5:be:45:
                    b9:35:63:b1:1e:ad:7a:fd:a3:32:b3:57:4d:fb:89:
                    d9:1c:41:ec:c5:33:fa:f7:e0:c4:44:f9:61:7b:9b:
                    64:8a:1b:3c:ff:cc:eb:94:90:73:59:62:fb:c4:a7:
                    66:d0:3a:42:14:6e:16:a0:75:b9:80:20:be:a6:81:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:45:20:A3:56:6C:9B:C3:07:48:51:49:B6:2E:F7:C3:2C:79:82
            X509v3 Authority Key Identifier:
                keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bd:ee:de:c7:82:da:1c:01:69:a7:b4:a0:88:34:2e:69:4e:
         11:88:9e:c2:54:19:2e:83:ae:99:74:61:bd:9e:c7:d3:4d:c4:
         fb:04:9b:64:04:30:2a:62:ad:f7:b7:22:61:dd:ba:d5:6d:1f:
         b1:a7:6a:e5:85:e6:7e:77:f2:53:2c:27:5d:15:b2:ad:ce:4f:
         f2:88:ee:cc:9c:e1:73:01:20:c3:a6:4d:e6:d9:df:9f:1c:bf:
         c8:4b:03:c1:3d:df:2c:b1:34:47:5e:0d:62:ee:98:a7:53:1e:
         b0:fa:b8:fb:f7:88:4b:21:82:b9:f6:48:84:71:0b:32:b6:1f:
         22:67:62:40:21:30:ef:2c:ec:32:07:f9:0b:5a:d7:5f:bb:f0:
         62:ef:fe:40:d3:0e:dd:15:c0:e4:9a:38:ee:23:ad:2e:58:51:
         ae:19:2d:33:db:91:e8:b5:3b:2f:d0:66:66:d5:f5:16:dc:5a:
         7b:5e:d7:26:93:6d:c7:a2:89:98:e6:f4:12:47:27:ca:2b:45:
         a1:d2:4d:8e:5e:fd:65:ef:53:0f:87:01:61:ea:94:3b:4f:40:
         96:a3:df:d6:4c:e0:89:02:3e:f1:12:1b:04:53:0f:7c:5f:47:
         0e:a0:a5:ca:e1:b6:32:b1:e6:bd:92:26:d2:07:13:03:8d:dd:
         ef:91:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:00 2026 by rpki-client