This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          GDZwH9XOEjHd3LMeLuQDfZN3NaAFI1Qm5NlTt6oCYXQ=
Subject key identifier:   8E:5F:E1:1F:4F:7C:BC:81:E1:F5:66:D8:C9:D8:5B:78:76:21:79:C8
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       019C427E0DAA91618F979E60BBC7A9CFD33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          1537
Signing time:             Mon 09 Feb 2026 13:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:23 +0000
Files and hashes:         1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=)
                          2: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=)
                          3: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=)
                          4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=)
                          5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=)
                          6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=)
                          7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=)
                          8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: Xna+Bn/b+GRpASSksOnSfXE89G9xKiMZXwezNk+FC8I=)
                          9: vTKohdF56IFQgah9DuO0JGwcH9U.roa (hash: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I=)
                          10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:0d:aa:91:61:8f:97:9e:60:bb:c7:a9:cf:d3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Feb  9 13:01:23 2026 GMT
            Not After : Feb 10 13:01:23 2026 GMT
        Subject: CN=8e5fe11f4f7cbc81e1f566d8c9d85b78762179c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:ea:07:b4:b5:72:7e:0f:10:e2:6c:71:43:
                    97:c2:fc:19:ed:87:00:8f:5a:e1:17:14:8c:c5:ed:
                    21:09:a2:cb:bd:4b:68:5f:36:ca:18:cd:8a:b6:65:
                    e2:a9:5f:eb:49:fc:00:16:b3:e8:3c:f3:9a:30:2a:
                    73:44:0a:9a:a6:7b:20:d0:d8:db:39:63:58:b8:fc:
                    2b:5b:ce:c7:8e:ff:cb:5c:64:e4:2e:44:f1:d0:52:
                    ef:0e:b3:19:85:2b:38:cc:92:99:71:fe:68:dd:0b:
                    b5:e5:26:b3:4a:fa:8c:d6:f6:40:05:53:f8:97:6c:
                    74:d3:80:26:4a:ab:f4:51:e1:b3:66:9f:75:36:b5:
                    0d:c8:b2:31:5d:51:ec:3c:a8:cf:d9:c8:bd:0e:49:
                    48:28:32:53:55:15:57:bc:bc:56:e7:0e:04:ae:42:
                    f8:af:05:5a:b9:fc:68:73:7a:54:b5:a9:a8:63:4b:
                    ff:7d:01:25:e5:f6:cb:c1:8d:46:08:d7:49:df:21:
                    9e:94:e8:2b:ca:28:5c:a4:ac:97:cf:4a:00:ed:16:
                    17:22:69:36:7b:a4:54:3a:2f:b1:cf:8c:e2:97:ed:
                    78:5b:03:c1:cf:da:ba:d5:2d:1c:51:2f:06:3a:2d:
                    41:0b:64:a8:08:a3:73:71:27:0c:48:ae:2a:74:39:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:E1:1F:4F:7C:BC:81:E1:F5:66:D8:C9:D8:5B:78:76:21:79:C8
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:b4:c6:5b:d7:58:99:82:c1:1e:41:88:26:66:7b:91:3f:
         eb:ef:d1:12:d5:17:fd:50:44:ab:40:90:c8:58:00:97:b0:91:
         b7:3e:09:c1:fb:a9:e6:5f:ce:7f:55:f6:52:30:16:a2:49:f1:
         2b:79:dc:cc:2b:cf:10:7b:a4:c9:65:ca:29:58:02:4c:d5:d6:
         5b:25:22:38:45:cc:4f:b7:31:61:c6:97:1a:99:d0:2e:8e:32:
         d8:ab:3a:25:f7:8c:f9:23:5e:6a:0e:77:24:6f:dd:8c:03:f3:
         98:35:53:7b:35:44:a9:37:02:27:ec:42:a0:2e:58:5c:34:1c:
         a4:f5:19:7c:8e:68:99:2b:6d:ad:f8:ea:e1:1d:b7:11:5e:36:
         d1:8c:98:78:3d:0a:74:39:14:b0:bc:9e:39:ba:0d:81:70:88:
         82:a2:30:77:09:5c:98:91:8d:29:96:7e:b9:02:8e:08:85:58:
         63:b7:f2:08:5e:81:03:af:1b:1e:27:20:0b:7d:af:e9:09:ae:
         92:a0:cd:8e:a3:11:2a:bf:c2:41:93:9e:d7:75:34:e9:0d:61:
         a8:03:d3:c7:8f:d0:6c:89:39:93:fe:07:7b:53:ef:cb:1b:0c:
         04:2e:eb:5c:49:5f:ca:25:5e:20:5f:a3:9b:15:51:fa:4f:0a:
         b2:13:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:22 2026 by rpki-client