This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File:                     qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier:          0WFGr0mw/Y3HWqM6d0IfOCucaGqKGqmVKK3h9lxLbYo=
Subject key identifier:   DB:50:13:C6:93:1C:6B:43:3F:23:98:03:E6:85:30:90:D3:52:14:D9
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer:       /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial:       019C427D7EC954DA4B48FB96398FAB7B573B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number:          0E62
Signing time:             Mon 09 Feb 2026 13:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:46 +0000
Files and hashes:         1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
                          2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
                          3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: kj9b6uh+MbXeK4IcXtCO8jnINVaTTJ4sRhYXR2CcgiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:7e:c9:54:da:4b:48:fb:96:39:8f:ab:7b:57:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
        Validity
            Not Before: Feb  9 13:00:46 2026 GMT
            Not After : Feb 10 13:00:46 2026 GMT
        Subject: CN=db5013c6931c6b433f239803e6853090d35214d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:ce:5c:66:36:ff:5c:6c:78:41:40:30:31:
                    04:60:65:f1:10:9e:55:92:33:1b:e6:a4:eb:c8:9d:
                    67:c1:ad:fb:8d:3e:ed:45:9a:b9:b1:69:d6:0e:2a:
                    f8:99:78:61:59:06:1e:73:6c:f9:79:67:46:a0:d5:
                    0a:1c:c9:00:03:81:b5:be:4b:bc:46:2d:42:e1:3a:
                    0b:91:72:03:db:a6:23:4b:e8:d2:fb:57:87:52:ac:
                    1c:53:23:3e:79:d4:8e:1e:24:44:bf:2a:69:ec:04:
                    0d:c4:7d:ab:32:74:50:bc:83:1e:b8:40:d0:f5:b0:
                    74:84:34:0d:6c:a4:5e:d7:1b:b3:76:fd:7c:04:1f:
                    51:12:c4:b8:ff:01:af:93:db:1f:50:ea:68:63:69:
                    48:5b:dd:70:04:a8:20:0e:7b:ed:52:b2:c2:23:91:
                    46:0c:6b:78:43:36:36:68:13:ac:29:f6:3e:7e:dc:
                    e0:d7:23:54:8f:d4:bd:03:1a:34:a5:68:8c:e4:cf:
                    65:5c:35:93:00:1a:08:31:ec:66:8a:41:cc:a1:de:
                    17:c1:5f:15:74:28:21:6f:e6:0a:da:06:0d:22:78:
                    57:7c:5a:3a:18:a6:75:c3:20:bd:f6:e1:92:ed:52:
                    f2:89:6f:da:7d:f2:7c:3c:d4:2d:7a:64:87:84:e4:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:50:13:C6:93:1C:6B:43:3F:23:98:03:E6:85:30:90:D3:52:14:D9
            X509v3 Authority Key Identifier:
                keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:cd:a3:1a:bc:9c:8a:c5:2a:69:d8:b9:76:71:96:5e:d5:
         f7:7b:6d:16:e1:93:cc:f2:cd:02:b2:bb:f2:3a:d3:d7:dc:00:
         36:86:33:19:27:86:c1:42:21:21:2b:14:80:66:eb:99:c5:62:
         dd:67:c7:c2:6b:19:2f:9d:b4:25:1a:45:dc:38:cd:d7:8d:ba:
         a3:ab:0d:14:ec:a0:31:89:d5:1d:5f:41:11:05:ba:fe:a3:60:
         9d:02:a9:b4:6c:22:82:c4:b2:f2:59:81:e9:85:ff:65:bd:69:
         a6:d4:16:f0:4f:e7:58:df:ac:74:a9:c1:71:6b:a7:8f:90:2d:
         b2:98:37:f8:b6:f9:b3:50:ca:ea:05:e6:81:70:6b:27:ba:50:
         07:08:05:37:f0:bd:35:24:5e:87:a4:7c:dd:b0:bd:06:cf:86:
         57:e0:40:02:05:fa:90:c3:08:d8:57:93:4e:8e:c9:1d:ea:0f:
         ea:16:72:09:49:62:ab:fc:cb:95:bd:4a:43:e5:cd:20:33:52:
         c0:f5:b2:56:8b:04:52:98:d1:ec:4b:b5:24:46:eb:d0:d6:8d:
         09:f8:2f:cd:62:b4:db:25:bd:76:77:8a:71:bb:0d:77:2b:a7:
         2d:46:b7:86:56:5b:a4:48:57:60:15:5b:fa:e6:56:86:14:1a:
         28:c6:9a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfX7JVNpLSPuWOY+re1c7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NzFkMGJhMDg5ZDllOWY0NmMyOTEzMTk2NzRmYWM4
MTI4ZDAwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD
EyhkYjUwMTNjNjkzMWM2YjQzM2YyMzk4MDNlNjg1MzA5MGQzNTIxNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjPOXGY2/1xseEFAMDEEYGXxEJ5V
kjMb5qTryJ1nwa37jT7tRZq5sWnWDir4mXhhWQYec2z5eWdGoNUKHMkAA4G1vku8
Ri1C4ToLkXID26YjS+jS+1eHUqwcUyM+edSOHiREvypp7AQNxH2rMnRQvIMeuEDQ
9bB0hDQNbKRe1xuzdv18BB9REsS4/wGvk9sfUOpoY2lIW91wBKggDnvtUrLCI5FG
DGt4QzY2aBOsKfY+ftzg1yNUj9S9Axo0pWiM5M9lXDWTABoIMexmikHMod4XwV8V
dCghb+YK2gYNInhXfFo6GKZ1wyC99uGS7VLyiW/affJ8PNQtemSHhOQOuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtQE8aTHGtDPyOYA+aFMJDTUhTZMB8GA1UdIwQY
MBaAFKpbRx0LoInZ6fRsKRMZZ0+sgSjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgt
NmYyZTI1MjliZTgyLzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgtNmYyZTI1MjliZTgy
LzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPvNoxq8
nIrFKmnYuXZxll7V93ttFuGTzPLNArK78jrT19wANoYzGSeGwUIhISsUgGbrmcVi
3WfHwmsZL520JRpF3DjN1426o6sNFOygMYnVHV9BEQW6/qNgnQKptGwigsSy8lmB
6YX/Zb1pptQW8E/nWN+sdKnBcWunj5Atspg3+Lb5s1DK6gXmgXBrJ7pQBwgFN/C9
NSReh6R83bC9Bs+GV+BAAgX6kMMI2FeTTo7JHeoP6hZyCUliq/zLlb1KQ+XNIDNS
wPWyVosEUpjR7Eu1JEbr0NaNCfgvzWK02yW9dneKcbsNdyunLUa3hlZbpEhXYBVb
+uZWhhQaKMaaYQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:58 2026 by rpki-client