This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          xkLoo261YwVa1XC0VitrpD9pLlR2fku05qJhMqjFftI=
Subject key identifier:   F6:6E:0E:0E:B7:80:41:67:8F:A3:2A:4A:A5:16:EC:97:3E:40:C0:6F
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       019C352F5D879879B74A12FCAD39B5DD1894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          1810
Signing time:             Fri 06 Feb 2026 23:00:22 +0000
Manifest this update:     Fri 06 Feb 2026 23:00:22 +0000
Manifest next update:     Sat 07 Feb 2026 23:00:22 +0000
Files and hashes:         1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
                          2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
                          3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
                          4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: svqtI0pbMhwxBtPlQaXbfBuoPn6+Bsqp3kCOec7mF0U=)
                          5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Feb 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:2f:5d:87:98:79:b7:4a:12:fc:ad:39:b5:dd:18:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Feb  6 23:00:22 2026 GMT
            Not After : Feb  7 23:00:22 2026 GMT
        Subject: CN=f66e0e0eb78041678fa32a4aa516ec973e40c06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:7c:c1:9f:8a:12:cd:8d:f6:a6:a8:8f:be:
                    3b:3b:c4:44:73:2a:05:c3:86:e1:39:7c:c7:3b:e3:
                    e7:e0:65:49:a9:c8:4d:5b:65:9f:3c:41:c1:d5:35:
                    5f:2d:43:83:dc:2d:1e:b5:f3:93:5d:ef:37:b5:0e:
                    33:26:65:69:18:01:2c:da:eb:bd:2f:6c:30:c6:81:
                    15:0e:d7:a2:98:1b:d9:92:bc:f0:50:57:49:75:7f:
                    cc:ee:ea:3d:fa:ff:37:78:94:da:1d:a1:3e:95:b1:
                    8b:37:e6:45:e8:ad:35:c1:ca:85:d9:bc:03:c6:6d:
                    c3:35:c6:d8:5f:4a:cb:3d:e2:8c:c9:00:cc:c4:82:
                    9f:27:01:1f:59:a7:ae:95:d0:3b:6c:24:d9:da:bb:
                    3b:45:e7:ce:c0:e6:67:62:c8:03:7b:df:57:23:71:
                    88:62:65:48:2c:3f:1c:92:81:f5:95:68:bd:32:63:
                    96:13:35:95:9a:6b:73:79:6d:11:18:aa:e3:9a:ef:
                    15:7d:5a:d3:06:f2:96:80:72:cf:ea:6d:29:40:03:
                    9a:ca:e5:77:b5:d3:4d:6b:be:9c:67:58:fd:0c:10:
                    d1:27:b6:53:ca:ec:aa:fb:a4:91:6a:6f:3b:5f:c0:
                    a9:7d:1f:08:bc:be:50:6c:89:76:95:7b:dd:7d:0c:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6E:0E:0E:B7:80:41:67:8F:A3:2A:4A:A5:16:EC:97:3E:40:C0:6F
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:9d:fc:d2:36:2d:d8:37:39:74:5b:3f:f3:3e:a0:96:53:
         fa:e7:ff:64:d9:8d:c1:b1:9c:fc:05:41:0e:bb:28:d1:04:e2:
         46:ad:c3:1c:bd:f9:be:22:6e:89:85:e4:f3:c5:d6:33:8f:70:
         0e:13:ad:0b:d8:5c:46:d8:6f:a3:fa:bb:a6:ab:c3:58:53:12:
         46:d0:1b:37:55:42:1c:9b:ca:fa:99:c8:1a:18:55:04:b7:63:
         6e:bf:f6:42:8c:0a:2f:00:3f:68:55:3f:7f:7d:36:32:1b:4d:
         31:3f:93:37:dc:64:39:a9:c2:6e:01:5a:b9:88:60:90:2b:ec:
         f7:35:ad:bb:d6:e9:d6:ad:bb:b6:2c:8a:1a:5c:7c:60:a1:da:
         d6:4f:9f:d8:39:a3:e9:59:31:0f:6a:15:89:28:8a:99:2b:2c:
         c1:a7:59:3a:23:5d:a0:bb:12:63:16:62:9e:1b:cd:89:dc:23:
         83:06:74:45:24:a5:8b:3c:a4:bf:83:0c:c8:da:58:32:df:18:
         cd:89:be:13:77:18:b4:68:f2:8a:eb:c4:d5:5a:53:41:8e:d7:
         98:91:40:e1:12:44:56:53:bf:28:cc:a5:80:18:84:a8:72:15:
         5d:4f:a5:53:34:d8:09:a2:13:99:3e:f4:47:9c:18:14:ef:a9:
         b2:36:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 07:15:30 2026 by rpki-client