This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File:                     qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier:          RdDPyLgHGXfYym3xyEM9nlmhFnAfKuC0B/TkG+yVwo4=
Subject key identifier:   AD:06:7D:DC:36:6C:03:60:7A:D7:0B:F1:76:14:2D:63:DF:AC:AA:97
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer:       /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial:       019C4246BB3176D2D65CF5E822FDE7B740BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number:          13AB
Signing time:             Mon 09 Feb 2026 12:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:57 +0000
Files and hashes:         1: H1XFtGY48S7NyteGq9ocooB_ktM.roa (hash: G8R1I1DIiHdtoDh1kdx5LxjS3FgXMSW8e+KxtmIhmMk=)
                          2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
                          3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: sTbPYtTvxIUV9Sot0lC3xPvSgtrQIxUBxHoE5dwp5Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:bb:31:76:d2:d6:5c:f5:e8:22:fd:e7:b7:40:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
        Validity
            Not Before: Feb  9 12:00:57 2026 GMT
            Not After : Feb 10 12:00:57 2026 GMT
        Subject: CN=ad067ddc366c03607ad70bf176142d63dfacaa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:77:e6:0d:d3:fe:c0:b6:f8:a7:e6:39:75:
                    10:8d:43:4d:ca:bf:0d:79:a9:cd:c0:4e:a3:b0:a0:
                    95:d6:7d:ae:d2:87:c4:1b:87:a2:b8:86:39:d4:4e:
                    89:24:8e:8a:67:8d:36:f3:d2:05:75:56:13:c7:02:
                    ac:2b:49:35:99:e8:ba:93:bd:15:7f:bb:9f:36:b2:
                    d2:d9:09:30:88:1a:28:4b:b3:c0:ae:c9:01:5e:ff:
                    74:ea:cc:b4:ae:e4:17:b7:73:7f:68:cc:2f:fa:0d:
                    c2:b4:3b:c9:1f:4c:aa:6d:39:5d:e3:57:e6:66:e4:
                    7a:c2:1f:f4:54:07:48:04:e1:5e:f6:bc:49:14:63:
                    26:6d:2d:1d:25:0a:df:fc:92:18:3c:f6:0f:44:64:
                    b5:bc:1a:cc:64:53:41:a1:6d:5c:5b:c0:da:08:c1:
                    57:93:dc:60:27:1d:d8:e3:e9:6b:59:1d:74:ad:e9:
                    e5:61:11:5f:d3:96:51:77:f2:75:4c:7f:f0:95:cb:
                    76:d8:85:09:0d:97:5e:a7:9d:eb:f1:08:3c:61:f5:
                    e4:48:4f:d8:e6:ea:b9:06:31:36:57:ec:73:e4:a0:
                    b0:b2:b7:f4:4c:8d:a1:da:ce:14:07:e8:68:ea:26:
                    7d:10:2d:a1:01:06:84:70:05:d6:a5:64:bb:6d:35:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:06:7D:DC:36:6C:03:60:7A:D7:0B:F1:76:14:2D:63:DF:AC:AA:97
            X509v3 Authority Key Identifier:
                keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:bf:4c:fe:ef:d7:5a:36:e4:ea:ad:79:0f:02:da:ae:9a:
         1d:ef:b6:0b:6e:82:97:59:de:88:7b:41:3a:ba:3f:60:cf:ac:
         69:87:3a:d3:cb:dd:70:c2:a2:56:44:b3:e7:8c:45:47:8a:0f:
         67:49:d8:00:5c:5b:b1:7c:9d:48:7a:cd:fd:f3:52:0d:47:6c:
         de:8c:e5:51:70:ba:74:f9:1e:05:05:2d:fd:6e:3b:81:d0:d4:
         0b:83:b3:a9:33:fd:18:ba:0a:08:c6:c5:87:34:e7:f8:b4:a7:
         39:7f:69:0d:b8:f5:3f:43:4c:9d:6a:a7:d6:bd:9b:01:90:91:
         c0:59:f4:be:f9:29:0d:89:f2:49:c9:72:5a:b9:ce:52:8e:9e:
         aa:0f:31:94:a4:99:7b:9b:e1:8b:d6:9a:44:a1:a0:40:55:79:
         19:32:ea:40:ce:17:6c:92:7a:49:d5:ea:9d:9b:9e:1b:7f:10:
         cb:70:ef:84:1c:2a:65:7d:10:15:27:bb:7d:95:a9:b6:7e:64:
         65:74:bf:a8:cc:ce:48:a7:fc:10:c5:b2:a1:e5:02:88:78:f7:
         26:df:7a:1e:69:36:a1:16:bf:6b:0e:30:95:ad:67:dd:f5:b3:
         06:d1:f9:5e:24:a9:01:df:08:be:07:71:3b:be:85:00:0b:1f:
         d0:4c:2b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrsxdtLWXPXoIv3nt0C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjYwMjA5MTIwMDU3WhcNMjYwMjEwMTIwMDU3WjAzMTEwLwYDVQQD
EyhhZDA2N2RkYzM2NmMwMzYwN2FkNzBiZjE3NjE0MmQ2M2RmYWNhYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeB35g3T/sC2+KfmOXUQjUNNyr8N
eanNwE6jsKCV1n2u0ofEG4eiuIY51E6JJI6KZ40289IFdVYTxwKsK0k1mei6k70V
f7ufNrLS2QkwiBooS7PArskBXv906sy0ruQXt3N/aMwv+g3CtDvJH0yqbTld41fm
ZuR6wh/0VAdIBOFe9rxJFGMmbS0dJQrf/JIYPPYPRGS1vBrMZFNBoW1cW8DaCMFX
k9xgJx3Y4+lrWR10renlYRFf05ZRd/J1TH/wlct22IUJDZdep53r8Qg8YfXkSE/Y
5uq5BjE2V+xz5KCwsrf0TI2h2s4UB+ho6iZ9EC2hAQaEcAXWpWS7bTVBlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0Gfdw2bANgetcL8XYULWPfrKqXMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxe/TP7v
11o25OqteQ8C2q6aHe+2C26Cl1neiHtBOro/YM+saYc608vdcMKiVkSz54xFR4oP
Z0nYAFxbsXydSHrN/fNSDUds3ozlUXC6dPkeBQUt/W47gdDUC4OzqTP9GLoKCMbF
hzTn+LSnOX9pDbj1P0NMnWqn1r2bAZCRwFn0vvkpDYnySclyWrnOUo6eqg8xlKSZ
e5vhi9aaRKGgQFV5GTLqQM4XbJJ6SdXqnZueG38Qy3DvhBwqZX0QFSe7fZWptn5k
ZXS/qMzOSKf8EMWyoeUCiHj3Jt96Hmk2oRa/aw4wla1n3fWzBtH5XiSpAd8Ivgdx
O76FAAsf0Ewruw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:47 2026 by rpki-client