This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File:                     qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier:          iAhB4Dro6LbHzo5zHbB81yI95VxmpyuMfSt4dcHBNU8=
Subject key identifier:   EC:4F:81:DA:5B:CD:77:46:EE:12:35:2B:F2:B3:00:50:C4:40:8A:1D
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       019C42B473E42470D309AB4F8A70C707F5B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number:          1819
Signing time:             Mon 09 Feb 2026 14:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:48 +0000
Files and hashes:         1: 9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa (hash: Bj+Js4UPw1o6feOmkLrkYY/w7t2b1Dyp0TJfYGAVC4Q=)
                          2: LTmOQCe-BWUTWVQkjpSYNnXaYa4.roa (hash: zJdURY1Kn8xq2aZqWECgaU84OOgVmpgOtWckIX+5TSs=)
                          3: _opXEn0thzhgGf4NWVntdA2gblE.asa (hash: nbnWVS0wu/u5kwilgVDWUiJkK1AUWGIEUy+veLSh4gs=)
                          4: aXlS2MBHT3otsZcZeVd3GMw9MKU.roa (hash: EW9PAlMsLE2KLuPGMAVWKhlfJ/oPt4738Dlm3TTrJp4=)
                          5: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: /7oUbNk1vsS0qUAnA7nZcuvy6t7cRkoznhCJw4iXO9M=)
                          6: se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa (hash: BYRkYl+G8DvP61IrHvjd0vDZAOoEN+QSTpQImOz8dG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:73:e4:24:70:d3:09:ab:4f:8a:70:c7:07:f5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Feb  9 14:00:48 2026 GMT
            Not After : Feb 10 14:00:48 2026 GMT
        Subject: CN=ec4f81da5bcd7746ee12352bf2b30050c4408a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:84:09:4f:00:82:9f:e5:a9:a3:ba:b3:f9:
                    a3:89:0d:f9:9b:34:b5:86:20:3a:ce:21:39:5b:bf:
                    5c:11:81:ab:4f:53:cf:74:0f:1d:89:54:8a:a8:8d:
                    98:b7:f8:fb:7b:2f:0a:49:b5:b9:5f:2a:ae:c7:83:
                    45:cb:44:86:c5:5d:5d:7d:18:3e:a6:8e:53:41:2e:
                    69:57:51:2e:a2:b9:1a:53:84:84:89:27:ba:6c:f6:
                    11:64:2f:2c:8c:cd:42:e0:c6:e1:92:4c:5a:9a:9e:
                    e3:dc:b7:d9:a8:a1:64:86:f3:ff:c7:db:fa:65:29:
                    93:e8:b7:bf:60:a5:82:f6:d9:8d:c5:c0:bf:9b:8f:
                    62:7a:c5:ce:09:f8:74:f8:66:bf:19:33:aa:33:90:
                    7e:89:c9:83:19:24:e5:22:04:5e:1b:24:46:a9:3f:
                    33:b1:f2:10:b7:b3:e4:ac:69:c7:d3:96:f6:91:04:
                    bc:13:80:97:ac:ff:2a:7d:fa:dc:e5:a7:37:56:7d:
                    36:93:bb:39:04:98:a4:43:0d:8a:8d:ec:c4:4e:53:
                    c6:01:19:48:ea:46:b6:f7:05:9e:4e:18:07:30:16:
                    7f:a2:28:b5:33:3b:c0:20:a5:6f:2d:f4:15:71:12:
                    b8:ec:56:39:18:74:d5:55:33:a3:c3:c9:ec:71:e7:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:81:DA:5B:CD:77:46:EE:12:35:2B:F2:B3:00:50:C4:40:8A:1D
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d9:38:9b:de:63:dc:93:3b:49:98:5d:0b:31:09:8b:a8:60:
         2f:a7:a0:a6:50:17:f1:bf:ff:38:3f:9e:3a:12:e9:6c:7a:07:
         14:4f:80:7a:e6:9c:ec:1a:01:ce:4d:60:3a:73:a4:fb:97:37:
         bf:96:2c:c1:a5:4b:cc:62:cf:90:a4:8a:66:60:cc:e6:05:c3:
         b8:6d:1e:20:a3:89:35:41:bf:a1:ef:29:23:d8:ca:7a:ba:6f:
         55:3e:fb:05:95:4f:14:f6:84:3f:be:e3:5e:76:5b:98:4a:f1:
         d8:9d:bb:f7:df:e9:73:10:fa:fd:9a:00:dd:bc:4c:f3:ae:33:
         9b:65:7a:96:7f:8d:5b:3a:33:92:83:ae:d5:18:c2:9a:fb:2f:
         41:37:66:1e:77:37:f6:b0:2c:f6:87:b8:a2:ea:36:52:cb:c8:
         06:ba:d7:6e:52:31:80:73:61:78:3b:d2:7a:aa:43:b6:39:fe:
         90:3d:dc:1f:98:c1:aa:e7:13:67:ba:e2:06:3a:b6:c0:4b:e1:
         42:35:55:89:69:29:d7:39:08:4d:41:dc:a2:cf:53:eb:17:32:
         25:96:e5:b3:62:85:4a:a8:35:b8:de:d0:48:c0:d7:d6:68:f9:
         1a:f5:e0:37:54:be:7d:26:01:ba:3d:74:93:7f:af:d1:00:1d:
         e3:bd:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:40 2026 by rpki-client