This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File:                     qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier:          2JkxUf8tUCQdNEYjSkJ8ilzCRpVM4lsdgAGHPUKlOMI=
Subject key identifier:   8F:AB:BF:B6:22:BE:B7:34:86:07:3D:D8:51:59:96:D8:D5:6D:50:50
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer:       /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial:       019C1CF16C3A97EBF2592ACEBEDD4636437B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 06:01:49 +0000
Manifest this update:     Mon 02 Feb 2026 06:01:49 +0000
Manifest next update:     Tue 03 Feb 2026 06:01:49 +0000
Files and hashes:         1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
                          2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
                          3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: j+pOKcw731a1ctkg4I7DcjswxAXSKFfnQl5q+gukoZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:f1:6c:3a:97:eb:f2:59:2a:ce:be:dd:46:36:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
        Validity
            Not Before: Feb  2 06:01:49 2026 GMT
            Not After : Feb  3 06:01:49 2026 GMT
        Subject: CN=8fabbfb622beb73486073dd8515996d8d56d5050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:a4:a7:86:f4:25:b5:c0:83:b6:e5:17:2a:
                    d1:28:3e:ca:f5:25:0b:bc:48:b6:35:34:a9:d5:77:
                    df:b7:4a:d7:81:1b:be:bd:00:30:36:30:57:e5:07:
                    db:97:56:61:e2:11:ac:81:da:03:21:26:ac:f6:b4:
                    1f:ab:76:ed:0f:9a:96:9f:79:3d:f2:bb:55:88:4d:
                    ec:47:95:b1:45:7b:b9:23:67:dd:b6:37:71:0f:af:
                    76:53:e4:93:96:f1:cf:77:98:2f:85:69:25:7b:88:
                    52:9c:45:82:e3:08:f3:ee:10:ab:d4:f0:46:5b:31:
                    7c:6b:0b:5e:2c:01:62:28:82:ad:e1:c2:7b:88:d8:
                    bd:9c:a6:c5:ac:07:84:45:0f:15:e2:da:a6:e7:d3:
                    06:1d:5d:a9:d4:1c:66:c7:5d:d9:76:5d:4c:fd:98:
                    60:33:5b:54:87:ab:c1:48:3a:7f:0a:d9:85:ce:13:
                    91:ef:05:2f:b7:3f:b3:e9:1e:f3:fe:3f:fe:6f:97:
                    e6:31:9d:3f:95:9b:4f:03:1a:e9:2c:8f:54:d9:31:
                    2c:c7:48:d2:32:ba:3d:5c:4e:af:71:a2:e4:38:c1:
                    a4:b1:dd:44:dc:aa:0d:5e:2b:aa:0c:40:4b:8a:fd:
                    69:d8:22:bc:8c:32:d4:93:7b:3b:ce:ab:f4:b4:8d:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AB:BF:B6:22:BE:B7:34:86:07:3D:D8:51:59:96:D8:D5:6D:50:50
            X509v3 Authority Key Identifier:
                keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:57:73:b3:e9:07:f8:16:a5:f9:de:e5:2c:93:74:ca:50:
         1a:d3:e0:5a:20:a8:b2:42:e4:9e:64:21:c8:e7:61:c4:92:81:
         c8:24:c8:92:09:f7:0c:3c:46:64:a1:7c:23:43:bf:62:7e:8a:
         a7:35:90:a2:14:56:da:ea:b0:39:a3:d0:1f:f6:9f:2c:a2:75:
         23:80:98:9c:17:83:aa:18:a4:1f:9c:36:6d:bb:9c:f0:84:cc:
         2f:f4:76:6c:0f:bc:cc:10:2a:74:6a:4d:fa:35:76:80:c9:2b:
         2b:f4:df:11:0f:2a:f9:dc:b9:12:7c:33:e8:7c:89:df:73:db:
         b3:d2:a6:12:00:55:86:d0:a8:fa:cd:5d:11:79:c8:c9:73:57:
         6e:22:a9:ce:9c:56:c7:2e:de:c3:66:f4:d5:d3:7d:35:11:36:
         28:8e:f3:5c:54:20:2b:ff:56:36:f3:36:4d:3c:8c:bf:12:1b:
         8b:17:79:d4:82:bc:01:c8:3b:c2:7d:32:c5:bd:0c:be:13:47:
         e8:97:42:09:03:3a:8f:1e:87:95:7d:7b:65:6b:de:04:f9:a7:
         ea:54:b4:9d:00:3f:8f:2b:72:ed:48:9a:a0:80:52:af:6e:fa:
         38:f3:24:eb:84:dc:bc:87:7f:d9:c8:43:4c:58:67:ce:3a:ce:
         31:21:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:52 2026 by rpki-client