This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File:                     qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier:          Zcm0RhD12/FiLlvcDbwcW9Bhwb92jVqKJQn2YQ+ce4s=
Subject key identifier:   82:10:42:A5:A0:15:0A:FC:EB:A3:DD:E6:A9:5B:DC:6E:E6:F5:18:D9
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer:       /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial:       019C42EBB27F60622C8B3F0BD85AF4830688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 15:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:08 +0000
Files and hashes:         1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: xcnXRz8UXUyiiqmvEgkt9yEWi/KpeYLwixJvyiaXTQQ=)
                          2: u73VKktNNDp99ZZ8-aw2FkAHHqE.roa (hash: 50jFlydOYBg1FIR0dL8Ur0REyQFfT4z/eOZDEpcxAyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:b2:7f:60:62:2c:8b:3f:0b:d8:5a:f4:83:06:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
        Validity
            Not Before: Feb  9 15:01:08 2026 GMT
            Not After : Feb 10 15:01:08 2026 GMT
        Subject: CN=821042a5a0150afceba3dde6a95bdc6ee6f518d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:26:04:54:33:07:71:bf:a1:58:f1:ba:36:
                    5b:ee:56:32:48:1c:7d:93:80:41:59:5f:4c:73:00:
                    84:77:6e:73:52:c6:24:00:bf:49:05:ef:6a:d6:30:
                    bb:ef:db:db:ea:6d:03:ee:c5:cb:d4:bb:b0:ea:a1:
                    34:fa:a2:86:32:39:bd:f3:93:c0:49:25:42:fa:a6:
                    e2:9d:fb:cc:c7:4c:8e:db:1a:9c:63:8d:07:40:87:
                    96:f6:23:96:8a:ab:0e:75:56:91:24:d9:b4:37:59:
                    c3:aa:9e:98:7f:cf:e9:b4:d8:e7:9f:85:ce:03:97:
                    33:74:a7:7d:29:26:88:17:fa:3c:fb:16:73:c4:b7:
                    60:22:15:67:f9:da:4d:87:8c:f6:ff:99:ee:6d:86:
                    a2:24:43:18:33:d1:2a:1b:66:6c:67:88:e8:11:8e:
                    88:d0:88:5d:fc:ed:35:09:eb:1a:50:9b:c3:20:fa:
                    98:f9:58:59:e0:1d:0a:85:72:8b:79:93:74:b3:a1:
                    36:59:08:eb:2c:44:05:f8:7d:45:21:b8:50:f5:b0:
                    04:6d:6d:36:2b:81:2d:d8:e3:25:f5:dd:5e:4d:af:
                    7c:f9:1f:90:53:4f:2e:f3:ca:a8:50:27:da:bd:41:
                    91:a4:be:f1:4d:c6:5a:fc:e3:88:39:39:52:86:7d:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:42:A5:A0:15:0A:FC:EB:A3:DD:E6:A9:5B:DC:6E:E6:F5:18:D9
            X509v3 Authority Key Identifier:
                keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:1e:aa:c3:39:33:39:0b:3f:66:e4:1a:db:80:26:38:2d:
         4d:d4:5c:74:14:6f:c3:91:ee:71:08:d6:bc:d5:21:31:90:21:
         03:93:72:5f:db:33:03:7f:be:97:6e:5f:ed:a0:7e:0f:33:f9:
         42:bb:bc:2f:0d:ea:ca:de:33:b8:99:d9:09:66:8b:66:30:99:
         30:43:92:d4:90:55:29:e3:f5:42:83:bf:7e:76:f7:4e:42:1e:
         03:49:d3:a5:07:66:d7:88:68:92:1b:a2:64:71:8a:9c:64:b4:
         2a:6e:30:31:a5:d9:3c:8e:b4:22:8b:61:ed:90:9b:34:78:43:
         7a:be:46:f8:2e:be:36:71:47:43:06:6f:40:b2:3b:f6:12:f3:
         04:43:46:4b:e5:3f:d3:d0:3f:12:a2:d7:0b:d2:ce:6c:17:24:
         4a:c7:c3:ec:8a:69:a1:5f:0d:67:00:2e:7c:1f:ea:aa:e3:f7:
         20:df:db:52:41:56:72:9b:03:63:23:22:8c:97:aa:05:6d:a6:
         c8:44:51:a7:12:85:2c:00:79:2b:eb:fb:65:20:f9:2d:e7:14:
         7d:60:83:1e:96:2f:7c:85:6a:bf:79:ee:7d:e4:a5:41:b7:e2:
         f8:1d:f1:e0:6c:6a:bf:d9:6d:69:dd:a5:76:f9:4f:f7:22:03:
         69:f9:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:36 2026 by rpki-client