This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          Vq4Bw1vbnDa1GXssUw2M17mSmLfSXYhwVbzyyUq7GU8=
Subject key identifier:   DD:0E:16:B9:E9:AE:4B:82:10:B7:DE:67:AD:A0:A5:B5:13:FD:44:0E
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       019C427D0D380C0D77817872BD821BA82B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          0FD1
Signing time:             Mon 09 Feb 2026 13:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:17 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: 9c7487jGbkIZDn+5i4XstdTz1v1COQ3n1Jx+W2oCGsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0d:38:0c:0d:77:81:78:72:bd:82:1b:a8:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: Feb  9 13:00:17 2026 GMT
            Not After : Feb 10 13:00:17 2026 GMT
        Subject: CN=dd0e16b9e9ae4b8210b7de67ada0a5b513fd440e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:3c:e7:45:01:35:ec:2d:e0:86:0b:ae:cf:
                    d8:ee:88:c2:29:1e:b5:33:f7:07:2c:6b:42:68:bf:
                    86:27:34:fd:ad:d1:61:ae:72:1f:13:e7:71:7f:9f:
                    1b:21:3c:15:63:b0:fe:60:66:22:ab:df:03:a8:42:
                    25:a2:9a:d6:0f:5b:de:64:1f:6a:5e:46:7f:5f:d9:
                    de:7b:4f:3d:e6:d3:9d:f8:ad:09:1b:3c:e0:f9:2f:
                    56:87:01:91:46:a9:90:36:bf:bc:13:00:99:f2:2a:
                    8c:03:98:9b:ad:af:32:9a:f9:9e:b0:42:89:82:5b:
                    c1:d9:bf:2c:04:ba:7a:21:c2:3f:b6:f9:27:55:6c:
                    8d:87:d1:2f:6c:30:49:57:64:2f:aa:3c:89:d5:ad:
                    02:11:a7:ce:4c:c7:67:9f:de:88:a7:f2:77:f3:e1:
                    d9:4b:dd:0c:a0:9d:6f:75:af:98:98:4b:46:e6:54:
                    38:fc:d1:d8:e4:0e:e7:4a:c7:9d:8e:1b:ba:2d:ee:
                    c7:8d:bb:72:8e:37:74:f6:90:99:1c:05:fd:f1:e7:
                    8f:33:13:d5:00:dd:aa:25:0e:63:be:0d:b2:8d:e6:
                    8b:cb:00:dd:b0:ce:4c:14:81:18:18:72:bb:9f:f1:
                    cd:93:7f:2a:d6:34:c8:0c:31:f1:23:16:34:1f:e4:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:16:B9:E9:AE:4B:82:10:B7:DE:67:AD:A0:A5:B5:13:FD:44:0E
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:de:a5:41:02:7c:b9:d5:f4:75:c5:63:75:54:47:13:c6:
         0c:3f:0d:6b:e3:1c:43:f7:8c:7f:17:4d:fd:85:45:aa:bf:0a:
         71:98:05:75:46:dc:64:fd:4b:8c:8c:36:29:fa:da:0a:4f:48:
         07:11:ab:b9:db:57:1f:00:40:4a:a1:a4:47:bf:c0:45:a4:fd:
         69:79:e8:da:c7:dd:c2:d6:b0:9e:9b:ed:8d:3f:4e:56:fb:f3:
         0a:24:c0:72:2a:96:bb:8c:3e:d8:83:73:e1:b4:42:38:d2:39:
         1c:ea:79:d5:d6:1b:0b:ed:61:75:0c:03:55:b2:df:a3:8c:18:
         64:27:80:53:77:41:bd:84:0a:d8:d3:cd:79:07:d8:57:dc:f3:
         bd:d3:6a:36:1a:c0:38:2a:f4:13:40:92:a6:14:26:3e:71:47:
         a9:0f:66:5c:e3:0f:2e:07:91:ad:98:c5:4e:64:f8:32:88:ef:
         02:65:d0:90:0f:67:50:d6:81:7e:f5:eb:1f:2e:68:97:e5:6d:
         50:08:e9:48:6c:8f:8a:f3:36:b9:67:a7:6e:19:c4:8a:a4:4b:
         3d:10:93:65:84:a2:24:c0:74:31:6c:04:0f:bc:32:9a:db:2d:
         3e:12:79:2a:13:db:92:44:1f:1e:34:80:84:5f:9b:e7:a8:6a:
         9c:49:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:50 2026 by rpki-client