This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          BK2SONmMREh8+s6H9X1F0DyHwR6jDE1/iFHInwCaz9Q=
Subject key identifier:   6E:2E:A1:94:B5:0D:C9:39:0F:DF:A7:F8:FF:30:9C:99:D1:65:98:19
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       019C446BA6B37DEFDD5DF17EEEEFBAC41E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          1538
Signing time:             Mon 09 Feb 2026 22:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:31 +0000
Files and hashes:         1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=)
                          2: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=)
                          3: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=)
                          4: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=)
                          5: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=)
                          6: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=)
                          7: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=)
                          8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: Ufmd25UGNFC1GJVsnIydg7XLUn+Q/XOMaRqzx3tAvik=)
                          9: vTKohdF56IFQgah9DuO0JGwcH9U.roa (hash: bsUg8Uy5yocfoi+JUcF+13tkU1rzb4BDrWJjTlHrS6I=)
                          10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:a6:b3:7d:ef:dd:5d:f1:7e:ee:ef:ba:c4:1e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Feb  9 22:00:31 2026 GMT
            Not After : Feb 10 22:00:31 2026 GMT
        Subject: CN=6e2ea194b50dc9390fdfa7f8ff309c99d1659819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:a8:42:1f:cd:7b:e3:2b:ae:0d:21:46:95:
                    7f:d5:24:1c:3c:b0:e6:e0:79:ea:a4:18:dc:c1:b7:
                    8d:b5:a6:e9:99:47:b8:98:24:c1:64:88:8e:fa:5f:
                    e7:a9:e4:3c:0e:49:ce:61:19:2e:f8:06:2c:d4:12:
                    d0:85:da:ec:89:e7:a8:48:d9:42:c8:70:ef:52:cd:
                    f3:e1:db:4c:5d:7d:2b:dd:7c:f8:83:ed:81:11:3e:
                    8f:f4:0b:e8:2e:92:22:f0:1c:f1:39:2d:53:47:a3:
                    62:3e:19:44:60:18:66:9d:b7:14:fb:51:f1:4e:a5:
                    a0:d8:9a:20:53:a8:7e:df:68:aa:98:2c:97:53:6f:
                    62:aa:77:41:c4:d1:1a:ca:62:93:f4:91:fd:cb:2c:
                    9d:52:2d:4e:8f:da:fa:81:ca:b1:42:1e:ba:9c:37:
                    0b:c2:e5:ba:e5:06:41:87:ed:d2:08:bb:27:62:7d:
                    98:04:14:72:22:b9:2e:cb:ae:62:c0:e9:60:bf:21:
                    64:eb:91:a1:9f:8b:14:34:1d:af:97:5e:18:c8:b9:
                    ab:5c:6b:5e:de:85:b7:17:ab:62:8f:a8:bd:d3:a1:
                    f5:7a:a4:b0:76:5a:36:a4:3a:96:e8:fd:dd:b4:a7:
                    9c:8a:70:c9:90:0e:0b:07:17:81:c4:b1:c8:7f:90:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:A1:94:B5:0D:C9:39:0F:DF:A7:F8:FF:30:9C:99:D1:65:98:19
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c8:2d:da:2c:d6:8a:be:e2:1e:c6:2d:ef:82:bf:cf:ca:c8:
         50:d5:74:0a:cc:fc:94:ba:eb:f2:91:be:a6:e4:47:15:16:34:
         3c:0b:cc:cb:4e:75:50:08:0c:33:dd:2a:7d:ca:6d:11:33:74:
         48:55:c7:2f:c4:20:47:25:84:6f:fd:5d:a1:b1:1e:8c:cb:ae:
         e8:87:5a:9b:62:5e:5a:6f:23:9c:98:81:d3:04:ee:6e:b3:38:
         6e:d8:b0:44:27:b7:6f:ae:c7:36:94:d9:17:56:45:59:da:98:
         11:fc:5d:3f:f1:dc:2b:30:65:e7:62:4d:b6:27:d3:5d:4d:2a:
         05:cc:4a:08:1d:df:b8:ed:22:8a:29:f9:32:82:b2:e0:e8:05:
         6d:7f:e8:7b:7d:2d:1c:21:4c:bd:2c:7e:9e:43:ce:4c:bc:b5:
         35:f6:ba:08:ea:94:92:8a:35:f9:37:cd:cd:54:67:4c:b0:f7:
         4b:1d:6f:1d:26:36:6d:03:bc:62:da:2c:dd:37:be:2c:3b:2b:
         e9:6f:b3:85:2d:de:ec:3e:3a:03:f3:5b:16:a3:be:b3:97:ba:
         31:86:01:58:5a:6d:2c:49:e0:2a:74:fa:04:14:99:68:e2:f6:
         3d:74:c6:05:e3:3e:ba:73:c8:f9:de:f0:b2:41:1c:b6:69:f6:
         62:0b:30:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:29 2026 by rpki-client