This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File:                     qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier:          XRXh+ezYQ/6qxWjmPZiBQNkjD2sLYqYA+e0gU0/KwnI=
Subject key identifier:   49:69:65:9B:51:A7:5E:4F:DC:D8:9D:10:67:EF:0D:8C:04:D0:EE:53
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer:       /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial:       019C4210497BEE03EEFA9D752F8C6E480D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 11:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:29 +0000
Files and hashes:         1: kW0WK2IFHNGeUqtoeqP2787mYnk.roa (hash: OoUVW67pQ7OzkcQcCKnAORtBV+T6+mdVc97qhb5jPng=)
                          2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: kWthmm6Qx+vxvuOWuB6wmBEtCRXRmFoxwwBTCJCo5e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:49:7b:ee:03:ee:fa:9d:75:2f:8c:6e:48:0d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
        Validity
            Not Before: Feb  9 11:01:29 2026 GMT
            Not After : Feb 10 11:01:29 2026 GMT
        Subject: CN=4969659b51a75e4fdcd89d1067ef0d8c04d0ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:e0:b8:45:59:fc:2d:21:2c:4b:1c:22:9e:
                    87:1c:d6:d0:a9:a3:cc:79:08:9a:0d:42:0e:47:f6:
                    d6:85:a8:80:d4:f9:02:be:23:e8:b7:a4:70:54:10:
                    c8:1a:17:c8:6c:d9:0a:d9:e0:c5:b7:3d:73:cf:82:
                    eb:9e:06:60:8c:5d:7c:c0:82:2d:75:2c:94:2e:a1:
                    26:7e:25:fb:b5:82:0e:07:98:8a:9f:78:d1:ee:76:
                    0e:00:6b:7c:86:ee:e5:d9:d0:d4:ed:b0:45:c1:6b:
                    92:39:e8:eb:61:41:58:38:7d:ca:41:b2:06:71:8c:
                    a4:4a:cc:d2:ea:66:28:21:9b:6b:ee:3f:fd:76:3a:
                    da:70:99:36:3b:68:46:e1:99:7a:f3:ef:22:b4:0c:
                    0e:49:a7:7d:ae:d2:6b:2e:84:24:39:62:18:44:f7:
                    68:a7:26:27:e1:fe:9d:39:92:8a:52:e0:a7:13:9b:
                    c8:32:de:6f:74:0c:bf:9f:b3:f8:7e:d3:0c:e2:0b:
                    18:81:63:d1:96:94:b8:9f:71:f5:34:d3:7b:72:d8:
                    78:50:b9:40:e7:dd:53:11:e8:17:87:59:2f:b1:a1:
                    70:a1:c1:95:f6:51:50:84:30:eb:78:b7:25:f3:df:
                    79:7f:7d:b7:3e:10:1b:11:be:ed:d7:c9:b6:7b:5a:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:65:9B:51:A7:5E:4F:DC:D8:9D:10:67:EF:0D:8C:04:D0:EE:53
            X509v3 Authority Key Identifier:
                keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:3a:cf:e5:1b:a2:93:92:c6:6d:09:0c:33:5f:e3:fe:bf:
         9e:2c:3c:98:56:b8:77:74:c0:a1:2a:b8:9d:e8:e9:15:77:a9:
         9f:f4:6e:ed:d3:e6:a2:00:8a:55:1a:d7:06:4a:2c:2c:29:82:
         fa:7d:9c:77:61:7d:92:85:27:1c:d3:a2:6d:4d:57:3b:91:27:
         e2:49:83:d6:82:2c:fb:42:0e:b5:fd:ec:ea:5b:78:e6:84:8c:
         a7:20:17:10:96:77:38:54:bd:4f:d7:4d:7b:16:1e:96:10:11:
         d2:be:86:ed:28:ae:77:33:5d:b3:61:10:87:6a:cc:4a:ef:47:
         9a:ff:08:92:ba:13:8a:44:86:44:4b:73:6f:26:0c:3e:df:1d:
         98:fe:47:c0:5a:4e:c5:50:e4:32:f7:a7:78:e7:a7:94:b9:15:
         5c:57:ec:69:ac:3b:81:08:98:b3:7a:76:a5:df:89:82:c9:4f:
         63:43:fb:dc:01:cc:45:b6:ca:80:5e:17:ca:6a:72:28:ff:2b:
         cf:e6:69:1b:70:de:55:a6:af:83:01:1e:fe:59:94:2d:ec:67:
         8f:9a:4a:05:b6:95:5e:3a:bf:c9:60:e4:f8:4e:a3:94:a4:c1:
         dd:51:ac:b1:12:76:71:89:2f:78:4d:6f:57:c4:45:bc:c4:47:
         a5:5c:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:31 2026 by rpki-client