This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File:                     rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier:          avDeK6w7UEH2nGvaWNPomDatqncNvmhsnLF75X5r/sY=
Subject key identifier:   D9:AD:B0:86:36:75:33:1A:5B:58:7C:D6:42:1B:6C:20:EB:91:C5:9D
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer:       /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial:       019C438FAA1B8DCF0BBD0CF420E8ACCC2C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:14 +0000
Files and hashes:         1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
                          2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: S0hKU/09umkVd/LOuuWGovGvfms4IRvCFKyK66Up19E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:aa:1b:8d:cf:0b:bd:0c:f4:20:e8:ac:cc:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
        Validity
            Not Before: Feb  9 18:00:14 2026 GMT
            Not After : Feb 10 18:00:14 2026 GMT
        Subject: CN=d9adb0863675331a5b587cd6421b6c20eb91c59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:5f:ad:d0:fe:15:bc:82:4a:47:e2:e4:5b:
                    d0:af:44:cc:d3:fa:6d:a0:6a:60:03:4c:c7:b7:b8:
                    5f:d9:8e:39:c2:6b:ed:fa:05:18:c7:2b:61:52:47:
                    a2:1a:67:6b:68:6c:3f:a9:1f:45:dc:b4:67:b9:06:
                    9b:7c:87:bc:14:f4:37:ec:1e:66:87:d5:f3:09:8b:
                    36:d5:cf:b8:1f:81:25:f7:7b:3d:38:ea:2d:8c:10:
                    2b:10:41:2c:ab:6c:c3:e8:44:32:82:37:6a:02:a1:
                    e1:4b:cd:b7:b4:fa:a3:79:0c:91:94:e5:3d:81:cb:
                    0a:a7:4a:0b:6e:90:36:5c:ec:0f:f2:7a:35:f6:e3:
                    1f:63:28:c7:da:bf:1d:ac:b7:00:40:cf:ec:28:d5:
                    4d:9a:56:2e:93:16:8c:c7:88:ab:ed:11:79:5c:d9:
                    54:4a:66:e6:df:00:82:4e:71:49:21:1a:85:de:d4:
                    df:00:c2:f2:e0:75:a8:14:ef:d2:bd:3d:9e:d8:db:
                    26:ed:32:8a:82:79:58:4b:67:ec:99:37:b1:e8:e5:
                    ed:5d:23:2f:d5:28:0a:a9:3a:bf:78:3f:a8:b8:d6:
                    3b:99:1b:8c:68:12:cf:e2:6a:51:99:be:0f:e3:70:
                    19:83:05:b9:c8:6c:b5:dd:c1:16:54:88:fe:88:25:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AD:B0:86:36:75:33:1A:5B:58:7C:D6:42:1B:6C:20:EB:91:C5:9D
            X509v3 Authority Key Identifier:
                keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:cd:60:54:84:5e:4f:e4:e5:37:fc:fb:98:81:96:d5:2d:
         bc:3c:41:53:63:d7:1e:97:ba:f3:05:4c:5b:2d:68:7d:8c:b0:
         3f:26:9c:5f:ca:b1:01:58:36:96:21:fb:c3:fc:ea:7f:91:40:
         ba:aa:ed:b0:9c:92:51:8b:60:19:ab:9f:0c:e7:6b:bd:7f:d4:
         bc:31:9f:1c:19:b3:1f:00:58:9f:3b:30:7f:0e:62:ee:8b:fe:
         9c:d0:05:83:6b:b0:2e:e7:96:1f:cd:d9:94:b8:07:8d:12:70:
         e1:fc:81:fe:06:bf:06:23:6c:e0:e3:55:2a:74:57:30:75:c3:
         cf:2d:99:38:b2:62:4d:d4:d2:1b:f0:50:ef:42:fa:e7:b9:0e:
         8c:01:b8:1e:9f:45:82:9f:1d:53:dd:7f:5c:9c:d3:f5:6e:c6:
         d6:9a:6a:a1:98:66:a5:ec:31:4d:04:1d:c9:92:1f:25:63:fa:
         7e:1a:34:4a:58:32:e0:42:88:d6:8a:9c:b6:a4:f4:75:ac:0c:
         ef:64:85:ab:27:9a:e7:0b:0d:24:1b:83:55:d7:3b:d9:55:f5:
         ae:c5:67:bd:81:c4:20:63:2f:b2:93:9e:26:41:8f:62:3f:3a:
         b3:0d:ab:05:f2:92:46:7a:a7:7f:d5:76:a7:91:d3:80:70:85:
         08:6e:ed:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj6objc8LvQz0IOiszCyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDU0MDM2ZGFkMzJkMTdhOGM5MTZkYzJkZmJiM2NlOGEz
NjQ1MmMwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD
EyhkOWFkYjA4NjM2NzUzMzFhNWI1ODdjZDY0MjFiNmMyMGViOTFjNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JlfrdD+FbyCSkfi5FvQr0TM0/pt
oGpgA0zHt7hf2Y45wmvt+gUYxythUkeiGmdraGw/qR9F3LRnuQabfIe8FPQ37B5m
h9XzCYs21c+4H4El93s9OOotjBArEEEsq2zD6EQygjdqAqHhS823tPqjeQyRlOU9
gcsKp0oLbpA2XOwP8no19uMfYyjH2r8drLcAQM/sKNVNmlYukxaMx4ir7RF5XNlU
Smbm3wCCTnFJIRqF3tTfAMLy4HWoFO/SvT2e2Nsm7TKKgnlYS2fsmTex6OXtXSMv
1SgKqTq/eD+ouNY7mRuMaBLP4mpRmb4P43AZgwW5yGy13cEWVIj+iCUhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmtsIY2dTMaW1h81kIbbCDrkcWdMB8GA1UdIwQY
MBaAFK0FQDba0y0XqMkW3C37s86KNkUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0Yjgt
OGUxNTE0Y2NhYTRhLzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0YjgtOGUxNTE0Y2NhYTRh
LzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvfNYFSE
Xk/k5Tf8+5iBltUtvDxBU2PXHpe68wVMWy1ofYywPyacX8qxAVg2liH7w/zqf5FA
uqrtsJySUYtgGaufDOdrvX/UvDGfHBmzHwBYnzswfw5i7ov+nNAFg2uwLueWH83Z
lLgHjRJw4fyB/ga/BiNs4ONVKnRXMHXDzy2ZOLJiTdTSG/BQ70L657kOjAG4Hp9F
gp8dU91/XJzT9W7G1ppqoZhmpewxTQQdyZIfJWP6fho0Slgy4EKI1oqctqT0dawM
72SFqyea5wsNJBuDVdc72VX1rsVnvYHEIGMvspOeJkGPYj86sw2rBfKSRnqnf9V2
p5HTgHCFCG7tXQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:01 2026 by rpki-client