This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File:                     QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier:          Rcq6Pcsj8hWhcsFJCHyGu2nVMuPXuwvRgMrh2WoBxmw=
Subject key identifier:   1E:91:10:2F:EE:9D:DC:7F:FE:A1:D5:70:21:73:41:9F:6B:21:F8:7D
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer:       /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial:       019C432276B888064D40B17F0E82F0F9B5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number:          17A0
Signing time:             Mon 09 Feb 2026 16:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:57 +0000
Files and hashes:         1: GEvyRWGXbdbHUTAehbJp3YhlTgY.roa (hash: b/xFEmDMbOi0xEK2SMYux/TUJuKIqsMzgBODuaUhYag=)
                          2: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: Ug0mpFV0bidTHZotEY7gp2swqM+dhFKLghnQTdYs1vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:76:b8:88:06:4d:40:b1:7f:0e:82:f0:f9:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a6e640198013de12a251f086030cd78c732516
        Validity
            Not Before: Feb  9 16:00:57 2026 GMT
            Not After : Feb 10 16:00:57 2026 GMT
        Subject: CN=1e91102fee9ddc7ffea1d5702173419f6b21f87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:91:f8:fc:36:10:7f:68:2d:9e:97:29:cf:
                    54:5d:31:6e:f8:16:ba:9a:90:82:8d:39:89:d2:4f:
                    31:38:64:14:76:d4:71:3f:71:15:4b:47:40:16:a5:
                    07:e8:5a:71:0f:12:81:91:3a:37:00:c2:b4:82:ee:
                    a7:06:e4:e7:d3:36:d7:0d:91:b4:f9:a9:30:e7:68:
                    f6:91:3e:b9:76:c3:0e:3e:6b:b6:0c:b9:5e:5a:3f:
                    0c:e7:95:d4:20:b9:1a:86:2f:b4:3a:c4:95:59:53:
                    66:ab:d1:e2:98:98:1f:23:98:e0:e4:68:79:5a:d8:
                    3a:04:68:56:82:46:0a:23:dc:ce:c8:e3:45:7e:56:
                    96:18:4c:eb:67:88:5b:57:0e:c5:b4:e1:02:18:d4:
                    81:71:53:32:1e:71:ed:34:9a:f9:6a:dd:01:8a:37:
                    e0:f7:72:40:3b:f9:a7:9c:ee:4e:ee:da:e7:bc:64:
                    4f:4e:68:6a:c8:ec:2a:8f:9e:9b:29:a8:39:03:8d:
                    cd:0c:52:0c:cf:0e:c5:62:10:82:35:93:7d:33:ee:
                    d4:64:9b:28:5d:1f:56:c5:bf:1a:d0:13:ef:29:0e:
                    63:b2:8b:d0:62:40:9c:a3:10:84:f6:21:67:bc:72:
                    43:3f:f4:ba:dd:79:e6:fb:18:12:f9:44:32:9a:22:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:10:2F:EE:9D:DC:7F:FE:A1:D5:70:21:73:41:9F:6B:21:F8:7D
            X509v3 Authority Key Identifier:
                keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:44:dd:b3:ac:01:1c:06:38:9c:76:42:22:cc:5e:97:70:8b:
         49:da:20:85:03:54:d5:c9:c7:cc:ba:29:13:d0:e4:50:03:db:
         d0:a8:02:5a:fe:2a:84:f9:fe:a4:37:12:b3:b0:b5:9a:5b:52:
         72:f4:d6:ff:d5:6c:fe:91:b9:e5:01:31:7d:10:81:12:9f:70:
         43:c2:04:fb:b5:66:5c:00:b5:ff:44:80:b5:6b:30:e0:f2:15:
         49:30:5c:81:4e:55:30:87:37:b2:96:db:b7:11:b6:5b:36:23:
         13:21:a4:0b:69:a9:87:90:45:2d:c5:c7:2d:0a:6b:6a:65:ff:
         d6:85:db:76:ec:33:df:10:07:6d:e9:24:70:95:52:95:fc:6e:
         44:de:83:74:f3:82:77:76:d6:ec:58:ac:3f:db:8b:9f:fb:3e:
         1f:e8:a6:24:73:f6:f2:75:ec:f2:fe:42:91:7d:1d:c3:96:b6:
         0d:2c:2b:3b:d9:0b:96:a1:29:40:0e:d9:18:43:05:8c:ad:9d:
         3a:c0:e3:24:cb:50:fe:a8:88:be:fc:59:2c:0f:9e:37:4e:f5:
         91:6e:69:fb:e5:4b:c8:3b:ff:1f:d5:5c:c8:b6:b5:33:d5:65:
         ca:e4:53:15:e2:aa:0d:04:72:4c:6f:ad:e1:c4:fd:1f:ba:7c:
         ec:1c:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:54 2026 by rpki-client