This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File:                     q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier:          o7+5crHW4PEjPQ9YFATjKCrhFQs6xEiP50PIc02AAPI=
Subject key identifier:   D2:62:83:D0:A0:F4:40:CC:1F:CC:F6:E2:C5:3C:77:83:43:3D:AD:2B
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       019C416AF209876141CAAC3A3939CB1C4448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 08:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:53 +0000
Files and hashes:         1: LYw_86zqqUU-5ZAgDmKGuBI8moU.roa (hash: yws9eccxGXYISJMC2IFo/HR97Yy0+NyB/dp085XRJR8=)
                          2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: H321ADKsd6OdIxhkBSvI6ANfG2aOBS4AUpaCxVBWy3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:f2:09:87:61:41:ca:ac:3a:39:39:cb:1c:44:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Feb  9 08:00:53 2026 GMT
            Not After : Feb 10 08:00:53 2026 GMT
        Subject: CN=d26283d0a0f440cc1fccf6e2c53c7783433dad2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:2f:8e:c5:9f:9c:79:9f:d2:d3:ef:1b:88:
                    69:f1:fd:9c:37:02:e2:de:1b:20:8f:b0:6a:95:f2:
                    3b:b4:08:1b:23:74:2e:c4:22:a5:42:ab:8c:d6:c1:
                    b9:5e:63:28:cc:b0:c1:06:8b:08:76:6d:ca:bc:ed:
                    af:dc:0d:02:c0:35:31:83:e8:47:24:9e:04:03:08:
                    d7:3f:2a:dd:75:7b:56:0a:53:03:96:0d:b3:23:6b:
                    09:d0:63:dd:a5:4d:d5:de:3a:a4:f5:64:23:9a:bc:
                    8f:23:45:36:22:c6:a6:05:8e:a1:db:43:b9:06:e5:
                    f0:ae:aa:7d:a0:e9:06:0c:b3:78:2a:77:37:48:9c:
                    c8:68:83:fe:04:17:ea:c6:dc:24:95:40:f2:32:a4:
                    97:41:09:22:80:14:ca:a4:5e:6c:3e:e0:83:76:65:
                    10:52:1b:a9:00:47:ea:12:99:c3:de:45:3f:bb:15:
                    84:f9:dd:40:12:7b:1f:e0:94:2c:3a:9c:c6:d8:49:
                    8c:b8:48:83:bf:f9:81:b2:14:b2:b5:2a:54:e9:50:
                    82:94:8a:a6:58:a5:f8:06:d7:1e:70:d5:e2:4e:f0:
                    b8:5e:c1:e7:31:fb:35:f7:a6:f8:a2:28:bd:20:a2:
                    34:4f:ed:46:d3:80:7b:c1:27:36:93:eb:7b:1f:8b:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:83:D0:A0:F4:40:CC:1F:CC:F6:E2:C5:3C:77:83:43:3D:AD:2B
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:bd:38:aa:91:a8:4d:93:b2:53:41:94:e0:cd:64:ad:5f:
         d2:5a:59:5e:40:9a:34:45:9c:af:e4:13:57:3a:29:d0:5d:2c:
         b9:b8:d4:fc:02:2b:33:03:a4:5c:4b:be:05:76:07:61:06:3b:
         97:36:aa:3f:a9:a1:d1:a7:55:bd:f6:83:c0:11:f6:82:62:4c:
         59:bc:fa:2f:2f:42:28:57:98:a6:2b:d5:4b:b3:ec:74:f8:a2:
         ec:fa:e3:db:92:81:a4:62:36:49:8a:b2:2b:2a:69:2a:79:2b:
         3a:19:90:1b:4d:f7:7c:76:67:17:54:12:62:32:78:7e:39:cb:
         ab:bb:da:5b:ee:0c:a6:b5:c1:54:90:c5:65:38:ef:66:42:33:
         72:29:06:fa:2e:4c:b8:cf:37:73:74:4e:3b:ba:df:2b:83:36:
         29:bf:d1:6a:f0:40:84:33:fe:7b:92:73:4e:78:0d:cd:1c:4f:
         15:e0:aa:61:bb:91:90:ad:ac:48:db:a1:a7:d2:4c:4f:6b:b3:
         2b:8e:43:c0:ca:e3:86:7f:58:f1:0a:9d:66:27:b6:3a:60:06:
         11:98:49:81:80:76:67:77:28:f8:b7:86:81:51:3b:1a:88:ec:
         36:f9:34:1b:50:b5:57:f0:e5:55:ff:b7:28:63:00:da:2c:36:
         b6:ab:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:43 2026 by rpki-client