This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          GicbAmK0HReoj/STP+K+X6LxvXkQOw8R3QfZZhv48ac=
Subject key identifier:   29:17:7B:15:93:1D:28:A7:61:0F:AB:FC:D2:87:14:1A:9B:F1:39:76
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       019C446BE627F85F6BB29EA01DC883207925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          14A3
Signing time:             Mon 09 Feb 2026 22:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:47 +0000
Files and hashes:         1: 21Yf12X5Xts3sbdn2jGlU_TfEv4.roa (hash: Uc+vkMAdsrzPjHQ3cBJ8s1GbQwnyrG3dngRrn0NPypc=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: iesbjyyqvaEY074IMdL9SlmhLlWpis2M46+gSF0322s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:e6:27:f8:5f:6b:b2:9e:a0:1d:c8:83:20:79:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Feb  9 22:00:47 2026 GMT
            Not After : Feb 10 22:00:47 2026 GMT
        Subject: CN=29177b15931d28a7610fabfcd287141a9bf13976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a9:4c:f3:7a:31:e0:8c:6b:d8:8f:f1:eb:d2:
                    68:b3:91:d1:3a:14:58:85:5a:a8:ca:6c:d9:03:6e:
                    8f:0d:34:81:25:72:1e:b5:31:32:02:47:dc:2a:38:
                    82:7d:78:41:78:1f:fa:e8:66:cb:81:06:59:26:5d:
                    a9:7d:82:90:75:29:e0:c0:eb:cd:b8:f7:c6:d3:3b:
                    14:04:05:be:3b:aa:ca:52:63:0e:a3:4e:5c:3f:af:
                    b1:4e:05:3a:92:69:05:0a:46:ae:01:7e:3d:1f:09:
                    37:d1:ee:cd:98:92:ca:9d:04:eb:f0:ef:d9:a0:96:
                    93:eb:89:81:3f:62:c0:e8:90:f2:81:89:50:ca:61:
                    4d:e8:ce:00:98:b9:a3:90:07:1d:c9:d2:2b:1c:55:
                    24:f2:8f:78:95:48:c2:71:9b:4b:a7:f7:b5:4d:21:
                    43:df:30:da:ef:13:11:a3:42:92:d6:4e:59:d7:4f:
                    3e:c1:a4:68:ba:21:46:b4:f5:0a:d6:8a:4e:c7:29:
                    cd:da:f8:32:69:94:9c:80:9e:e8:8f:7c:62:09:ab:
                    89:df:d4:3f:aa:b1:73:e5:26:61:63:d4:54:33:ae:
                    21:6b:39:56:1f:50:a7:5b:58:a0:d0:c8:e6:c4:b0:
                    f0:50:18:cf:24:0c:67:44:19:10:2e:6a:26:1e:91:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:17:7B:15:93:1D:28:A7:61:0F:AB:FC:D2:87:14:1A:9B:F1:39:76
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ae:0e:ed:c4:b8:68:40:33:0a:27:ab:0d:6d:32:59:73:e3:
         7b:68:79:1c:ec:58:08:18:83:96:47:f6:04:ed:8d:93:49:c9:
         dd:4a:44:aa:8f:a4:7d:c0:8e:59:84:7c:d6:fe:2e:72:c7:be:
         ff:58:07:e3:2f:24:de:55:11:c9:c4:21:2a:7f:d6:b5:a7:c0:
         b4:08:f4:0f:7d:b8:81:c8:94:f8:4a:b1:a4:9b:ea:19:c1:4b:
         bf:ce:bd:93:c5:4d:ad:d5:d7:be:eb:72:9f:7d:a1:c6:7a:fd:
         9b:68:1d:3a:25:07:4b:ef:55:32:c9:82:95:1e:c7:31:28:00:
         cc:77:1b:fe:09:07:a6:77:a1:96:71:21:f8:f7:cd:90:b9:4f:
         14:38:d0:e8:bc:5b:e9:2e:18:78:09:34:54:8a:49:2d:19:7c:
         9a:c3:b2:43:e2:5f:5e:67:c3:8b:d7:36:1f:6d:e8:e3:da:bd:
         ae:1b:d5:e7:45:04:df:80:3b:47:61:a3:97:08:a8:c2:56:9b:
         c0:bb:b8:4b:b4:06:34:ea:8f:06:e6:2d:37:26:27:eb:f7:fa:
         49:91:fa:89:2b:f8:35:9a:c6:1f:9e:03:8c:bd:ef:e8:2e:0c:
         5f:d2:bf:9b:23:45:19:30:4f:89:b7:a2:b9:2f:ea:59:a2:03:
         e5:ea:d1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa+Yn+F9rsp6gHciDIHklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj
NTA0OGYwHhcNMjYwMjA5MjIwMDQ3WhcNMjYwMjEwMjIwMDQ3WjAzMTEwLwYDVQQD
EygyOTE3N2IxNTkzMWQyOGE3NjEwZmFiZmNkMjg3MTQxYTliZjEzOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqalM83ox4Ixr2I/x69Jos5HROhRY
hVqoymzZA26PDTSBJXIetTEyAkfcKjiCfXhBeB/66GbLgQZZJl2pfYKQdSngwOvN
uPfG0zsUBAW+O6rKUmMOo05cP6+xTgU6kmkFCkauAX49Hwk30e7NmJLKnQTr8O/Z
oJaT64mBP2LA6JDygYlQymFN6M4AmLmjkAcdydIrHFUk8o94lUjCcZtLp/e1TSFD
3zDa7xMRo0KS1k5Z108+waRouiFGtPUK1opOxynN2vgyaZScgJ7oj3xiCauJ39Q/
qrFz5SZhY9RUM64hazlWH1CnW1ig0MjmxLDwUBjPJAxnRBkQLmomHpHwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkXexWTHSinYQ+r/NKHFBqb8Tl2MB8GA1UdIwQY
MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt
ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0
LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa4O7cS4
aEAzCierDW0yWXPje2h5HOxYCBiDlkf2BO2Nk0nJ3UpEqo+kfcCOWYR81v4ucse+
/1gH4y8k3lURycQhKn/WtafAtAj0D324gciU+EqxpJvqGcFLv869k8VNrdXXvuty
n32hxnr9m2gdOiUHS+9VMsmClR7HMSgAzHcb/gkHpnehlnEh+PfNkLlPFDjQ6Lxb
6S4YeAk0VIpJLRl8msOyQ+JfXmfDi9c2H23o49q9rhvV50UE34A7R2Gjlwiowlab
wLu4S7QGNOqPBuYtNyYn6/f6SZH6iSv4NZrGH54DjL3v6C4MX9K/myNFGTBPibei
uS/qWaID5erRpA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:10 2026 by rpki-client