This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File:                     qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier:          Kr/S4b8nWfiDaH+Cst+ec12B6ZnJxtXliD+YCclsHSQ=
Subject key identifier:   75:D4:A8:F8:8A:4A:34:B7:01:11:24:39:29:4D:5F:2B:91:02:A0:ED
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer:       /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial:       019C438FB6A40DAC433C72B7514A0C16465C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number:          13EC
Signing time:             Mon 09 Feb 2026 18:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:17 +0000
Files and hashes:         1: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: Pdk7QlGKk5KzsePuQD2eg4FwlsY1+PKjNVS/F/e9InA=)
                          2: v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa (hash: l5yrsl5tfKirXCQFQ9UTcOUZgIWs2Z58yXBB5pkbhOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:b6:a4:0d:ac:43:3c:72:b7:51:4a:0c:16:46:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
        Validity
            Not Before: Feb  9 18:00:17 2026 GMT
            Not After : Feb 10 18:00:17 2026 GMT
        Subject: CN=75d4a8f88a4a34b701112439294d5f2b9102a0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:78:10:90:77:9b:6c:55:ff:cb:7f:2a:94:
                    85:cf:d3:37:8b:27:23:14:05:34:45:b6:f4:63:52:
                    ea:98:ec:4e:6a:38:e5:68:b0:57:09:d1:b2:32:73:
                    28:07:80:b2:e1:15:04:e7:46:eb:e6:41:54:5d:7f:
                    2c:64:72:31:03:27:bc:76:8e:9f:e0:ca:29:4c:c3:
                    60:56:b5:3a:ba:7b:00:6d:21:dc:23:40:a2:6e:e0:
                    9e:23:6c:df:0a:08:dc:5f:4b:00:d1:6f:76:be:7e:
                    06:23:c3:72:b3:8f:48:ea:82:88:32:db:6e:83:91:
                    51:61:40:b0:13:bb:43:22:48:dd:31:83:c0:0c:45:
                    33:17:26:43:f7:5e:3b:28:12:f9:34:0b:a2:04:2d:
                    49:b5:81:6b:4d:de:20:64:0a:ef:79:7f:77:85:92:
                    59:8c:2b:d3:57:ba:74:b5:f8:e0:c2:21:a9:de:65:
                    ed:f7:6c:c0:e3:ae:c1:91:93:cd:be:8f:a2:2b:4a:
                    3d:a3:e1:d5:7f:eb:9d:e9:c7:49:6b:16:84:f4:7b:
                    db:56:f7:30:47:85:72:5e:17:ce:ac:df:4b:a9:d4:
                    cb:30:ac:b8:61:e7:43:31:39:9b:82:4e:01:dd:45:
                    0c:23:62:ea:41:71:7b:78:97:94:22:30:ff:af:41:
                    80:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:A8:F8:8A:4A:34:B7:01:11:24:39:29:4D:5F:2B:91:02:A0:ED
            X509v3 Authority Key Identifier:
                keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:64:c2:19:eb:29:c1:38:36:30:65:85:c7:0b:6d:5b:42:
         3d:de:d8:e1:26:76:bb:eb:14:c5:f8:e1:49:04:22:9a:1d:a2:
         fd:4d:48:86:f8:b9:52:42:bc:ab:14:1f:e5:62:53:94:fc:b2:
         db:fb:c8:89:00:56:c5:0a:b4:d5:c4:7d:80:ea:2c:d1:2c:95:
         96:86:2c:93:6e:34:d8:87:35:94:a6:88:c1:9e:2b:17:12:66:
         68:1d:0c:3a:d9:13:b8:e9:bd:2e:9e:7c:fc:a2:62:08:28:ff:
         79:61:8f:7c:ed:3f:64:9f:71:3f:33:88:b1:b8:af:1a:22:7d:
         d6:22:25:8e:91:07:89:0e:67:1d:1b:f2:67:d7:82:ac:28:03:
         e4:a4:62:76:e1:c5:a3:bc:34:90:51:7e:6c:5f:8a:6f:72:f7:
         3d:08:59:49:ef:05:0d:ef:a2:8e:f1:87:e4:c0:19:eb:78:75:
         c9:a6:16:0f:a8:92:51:32:09:a8:ae:e6:6d:d6:7c:f0:5f:ee:
         78:46:69:f8:45:39:d7:2d:b7:b5:80:5b:85:d5:93:f6:92:d2:
         ed:2b:92:da:db:5a:57:8a:79:f7:d2:8c:27:be:0f:c2:b5:2b:
         7a:5c:3b:e0:54:17:97:81:9e:e3:2b:98:82:24:ae:4d:8f:aa:
         e2:fe:59:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj7akDaxDPHK3UUoMFkZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4
MmYxNDMwHhcNMjYwMjA5MTgwMDE3WhcNMjYwMjEwMTgwMDE3WjAzMTEwLwYDVQQD
Eyg3NWQ0YThmODhhNGEzNGI3MDExMTI0MzkyOTRkNWYyYjkxMDJhMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iF4EJB3m2xV/8t/KpSFz9M3iycj
FAU0Rbb0Y1LqmOxOajjlaLBXCdGyMnMoB4Cy4RUE50br5kFUXX8sZHIxAye8do6f
4MopTMNgVrU6unsAbSHcI0CibuCeI2zfCgjcX0sA0W92vn4GI8Nys49I6oKIMttu
g5FRYUCwE7tDIkjdMYPADEUzFyZD9147KBL5NAuiBC1JtYFrTd4gZArveX93hZJZ
jCvTV7p0tfjgwiGp3mXt92zA467BkZPNvo+iK0o9o+HVf+ud6cdJaxaE9HvbVvcw
R4VyXhfOrN9LqdTLMKy4YedDMTmbgk4B3UUMI2LqQXF7eJeUIjD/r0GAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXUqPiKSjS3AREkOSlNXyuRAqDtMB8GA1UdIwQY
MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt
ZDMyZjhkODc1Zjk4LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4
LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAlkwhnr
KcE4NjBlhccLbVtCPd7Y4SZ2u+sUxfjhSQQimh2i/U1Ihvi5UkK8qxQf5WJTlPyy
2/vIiQBWxQq01cR9gOos0SyVloYsk2402Ic1lKaIwZ4rFxJmaB0MOtkTuOm9Lp58
/KJiCCj/eWGPfO0/ZJ9xPzOIsbivGiJ91iIljpEHiQ5nHRvyZ9eCrCgD5KRiduHF
o7w0kFF+bF+Kb3L3PQhZSe8FDe+ijvGH5MAZ63h1yaYWD6iSUTIJqK7mbdZ88F/u
eEZp+EU51y23tYBbhdWT9pLS7SuS2ttaV4p599KMJ74PwrUrelw74FQXl4Ge4yuY
giSuTY+q4v5Z7A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:56 2026 by rpki-client