This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File:                     qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier:          wN3ADDmv9YW0+rh/kFAlDesDzffLF2QDAK4BuwtkPEw=
Subject key identifier:   07:19:45:C2:6B:D9:99:DE:47:61:43:A1:6D:4A:FF:49:DB:86:AA:79
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer:       /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial:       019C42102EB38A9B9C12E96C3AA150CF0BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 11:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:22 +0000
Files and hashes:         1: N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa (hash: fc9tBn+6SqJqfSW/GpPBz9lgPSF51UDlJcUc1bmbePQ=)
                          2: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: IvUHhTWkb21nhcRrXaxQ2Rv9wdoQ4tG00k2R+wicpBo=)
                          3: vm0Cb1QlvcUWqTlVtMYvi0tSg50.roa (hash: vUmX5+CcNp91eGp6cheOPjkV7E2OfS28ZKb/y8YQp0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:2e:b3:8a:9b:9c:12:e9:6c:3a:a1:50:cf:0b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
        Validity
            Not Before: Feb  9 11:01:22 2026 GMT
            Not After : Feb 10 11:01:22 2026 GMT
        Subject: CN=071945c26bd999de476143a16d4aff49db86aa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:0a:f0:a5:18:bb:08:a4:72:e2:2e:c5:06:
                    79:87:cb:16:4c:b8:eb:aa:32:b4:ad:47:e7:0b:08:
                    e8:18:f9:3c:d8:58:c4:49:e7:4d:fb:84:70:46:15:
                    e8:df:4c:c9:31:1d:a9:61:52:b5:37:52:b8:64:24:
                    03:03:35:4f:58:2f:17:43:3e:b3:d2:46:99:e3:67:
                    18:ff:2c:20:97:d3:85:be:ba:ae:98:c7:41:25:90:
                    a8:1e:95:57:89:21:ad:38:f6:26:a8:aa:61:c0:c8:
                    3a:3f:c7:7f:c1:5c:75:f4:6c:3a:2d:5a:5f:df:fb:
                    87:e2:ef:b3:18:b1:d1:cf:f8:97:01:d1:e8:77:e8:
                    e9:17:18:a1:3d:22:91:a6:2d:de:d3:53:91:81:b4:
                    ce:37:c8:3f:ed:2d:4a:97:67:ef:1b:1d:43:94:19:
                    72:d4:e2:5b:33:09:9b:4f:fc:a7:07:28:be:01:da:
                    36:f5:fe:32:8c:26:9f:bb:f4:9e:16:eb:ba:2a:6d:
                    6b:ee:1e:a2:c6:13:d5:19:fb:87:31:87:66:85:b2:
                    aa:1a:ac:4e:7c:f6:b6:5e:53:27:45:55:53:55:78:
                    c8:c2:b3:32:f0:33:21:72:c0:2c:ad:a6:65:61:ed:
                    35:a4:b2:c2:fd:30:93:96:a2:c7:d0:80:85:52:81:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:19:45:C2:6B:D9:99:DE:47:61:43:A1:6D:4A:FF:49:DB:86:AA:79
            X509v3 Authority Key Identifier:
                keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:e5:2d:d1:2d:f5:ef:ff:9a:da:e6:ed:38:77:a7:20:32:
         00:f7:af:7e:63:26:9c:57:b5:0b:5d:f6:92:cc:bc:61:2c:08:
         9e:b0:ba:4e:ef:6f:9e:68:aa:a0:1a:41:16:12:47:63:6e:36:
         77:f3:e5:65:2a:a7:76:9c:97:a5:66:67:85:75:a3:30:4e:09:
         0a:63:9d:25:3a:f3:9f:32:ef:1c:f0:4d:79:29:fb:35:6c:26:
         cf:df:9b:a1:ba:a9:28:6c:d2:b7:3a:dc:08:a2:57:c3:7c:92:
         0c:bf:3d:d1:f8:2d:b7:ab:3c:60:c6:0c:bd:5d:c5:21:84:fe:
         e0:e4:45:7c:47:0d:3f:e2:6e:72:d2:fc:c2:2c:5d:5d:f9:84:
         27:44:53:6c:94:96:0b:1d:85:2b:a1:56:ac:7e:e9:28:02:52:
         91:3e:d1:fc:da:9a:5f:a8:83:31:87:76:fb:14:8b:f2:61:1e:
         b3:cc:a2:6b:66:71:35:7c:7e:9b:b4:51:ba:19:1b:c7:93:93:
         e4:2c:69:07:6e:27:89:7d:18:9d:83:21:58:e6:53:a7:fc:e6:
         6b:e4:fe:54:5c:d6:b7:9d:76:84:66:22:32:fd:03:c0:61:bd:
         40:45:15:bd:d6:d3:2c:56:bb:a5:9f:06:57:32:04:64:1a:d8:
         7c:54:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client