This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          G23IXq1bxwkC6BBt7k0j52pvl8Xg96bk3Tkp3AOh844=
Subject key identifier:   DB:2A:8A:F3:4B:1E:7A:AC:33:3E:19:EA:32:D2:08:E6:CF:61:6C:84
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       019C43C735A1C99437E1B8217F1FFA9730DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          155E
Signing time:             Mon 09 Feb 2026 19:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:54 +0000
Files and hashes:         1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: 03yP2Sa6wC9pb0Fyv/kXT6Jey15iZXRlPE3ufVdlnCk=)
                          3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:35:a1:c9:94:37:e1:b8:21:7f:1f:fa:97:30:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Feb  9 19:00:54 2026 GMT
            Not After : Feb 10 19:00:54 2026 GMT
        Subject: CN=db2a8af34b1e7aac333e19ea32d208e6cf616c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:e9:c4:d9:59:f3:da:5a:e1:3d:17:29:7c:
                    19:dc:30:b0:bf:e4:99:e4:85:b8:42:f8:e0:12:87:
                    af:7d:67:25:36:29:a0:88:cb:60:7a:a8:47:09:2c:
                    81:d2:0b:99:54:41:73:4f:55:75:4f:74:ae:a8:6a:
                    00:d4:6d:61:ba:d9:05:f0:c5:26:4d:ac:71:99:a2:
                    76:0e:6f:10:c6:ef:0b:0d:89:34:20:a7:ad:f8:32:
                    e9:c1:be:dd:70:b2:b0:cf:19:85:aa:1d:e6:20:32:
                    4e:54:40:ca:cc:19:cc:7f:82:57:87:a6:f2:90:c6:
                    28:e5:f6:96:e1:6b:c5:79:ea:8d:f1:64:c5:23:39:
                    b2:c7:1d:14:60:af:5e:d3:2f:ce:67:c8:82:00:68:
                    45:ef:f1:44:86:99:1f:be:48:6f:ab:5f:06:76:bf:
                    8b:67:6b:c6:4f:34:ca:e0:60:fb:47:4c:a0:d7:33:
                    8e:13:93:54:96:02:4b:ba:99:50:fa:e7:13:f0:98:
                    63:41:ab:a3:84:74:34:f8:ad:c7:d6:95:48:93:51:
                    67:e3:f7:38:34:fa:df:95:c2:2f:45:d8:4e:f3:c8:
                    19:9d:e9:cb:e2:aa:92:ef:e1:94:b4:ad:c0:ed:2c:
                    d5:bf:f5:3f:2b:62:c4:c6:d4:73:d2:7a:14:44:46:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:8A:F3:4B:1E:7A:AC:33:3E:19:EA:32:D2:08:E6:CF:61:6C:84
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7b:cd:59:1f:cc:46:41:ba:7d:41:2e:49:9c:34:8c:ce:b1:
         f8:d1:36:4f:8b:3d:bb:14:6b:26:5e:b4:b5:41:68:81:5f:b0:
         60:cb:6b:87:6f:bc:7e:2e:21:2f:52:6f:1c:e1:de:1f:fe:92:
         0f:a2:ef:1d:19:9e:ca:b6:ee:37:0f:2d:94:26:67:31:83:6d:
         7e:6c:41:cf:e7:56:e4:71:b6:e1:ea:fe:00:6e:dd:4b:32:c8:
         26:5a:c7:1f:f2:1b:d0:a7:62:c6:5c:e6:f9:67:f6:a4:05:0a:
         92:83:f9:80:46:17:9a:3a:c9:26:09:62:a0:d9:75:6d:79:d4:
         31:32:53:9d:67:8e:13:21:f5:ca:e0:f2:d0:41:ae:c2:73:a9:
         b0:cd:23:0f:33:0b:cc:d3:ae:bb:b1:52:21:d3:5e:1d:9d:f1:
         68:fb:49:91:30:95:05:f8:e1:32:9b:28:d7:28:42:50:bd:00:
         0b:23:12:33:b1:63:6a:75:e1:da:7f:60:36:3f:46:15:3a:be:
         eb:8c:2b:2e:c6:06:c1:29:5b:6f:6f:a1:32:17:9b:de:f2:0d:
         82:43:c5:22:6c:0a:6e:9b:ee:2e:34:1b:c3:b0:aa:28:55:57:
         c6:ed:54:9d:d2:56:4e:83:50:7a:df:56:98:c8:f2:13:46:c0:
         d9:81:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:08 2026 by rpki-client