This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File:                     QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier:          KeOOpKE/X0IVZhLLFdJxG9zCWqon5TPT+e7dOBhGh8o=
Subject key identifier:   9B:60:2C:A0:DC:60:F9:FB:6A:92:C9:2B:D0:37:9F:D3:8E:F7:E6:8B
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer:       /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial:       019C40FCDB2015CEF0C54CAF27B84388D5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number:          078E
Signing time:             Mon 09 Feb 2026 06:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:38 +0000
Files and hashes:         1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: y4JrBdFJjLKA4M6ow3hX6AB/oJbXZJfJij4BZemi6fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:db:20:15:ce:f0:c5:4c:af:27:b8:43:88:d5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
        Validity
            Not Before: Feb  9 06:00:38 2026 GMT
            Not After : Feb 10 06:00:38 2026 GMT
        Subject: CN=9b602ca0dc60f9fb6a92c92bd0379fd38ef7e68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:b3:2c:34:d3:6b:c0:be:5f:eb:01:d3:01:
                    b7:8c:5b:7e:8c:93:ba:a9:75:fd:b9:94:78:12:fe:
                    fa:51:27:19:ec:5b:29:86:48:50:6c:67:49:e3:de:
                    5f:21:f3:d2:e2:58:c9:e0:64:8e:c1:a2:07:4c:35:
                    85:ee:a3:9e:0e:70:31:21:10:75:4e:d3:14:98:d2:
                    88:62:6c:91:37:86:f0:80:cb:be:1f:e4:21:56:ed:
                    26:6e:0e:05:e7:6f:6c:41:2e:04:17:a5:d7:67:92:
                    10:17:de:19:73:b3:78:b7:c1:60:9e:28:6e:99:9c:
                    cc:25:70:cc:26:02:92:0b:a6:e7:6b:31:ca:c6:88:
                    9a:62:e6:64:cc:d9:e1:aa:37:93:d1:24:25:41:9d:
                    94:a4:79:fa:53:2f:75:35:be:b7:12:b7:2a:ee:be:
                    60:a7:65:2b:a6:b5:f0:eb:05:b7:97:d1:b1:60:8b:
                    3b:3f:5f:a1:43:0d:f3:0d:f3:2c:5e:c2:2a:9b:35:
                    9a:95:de:98:3d:8d:3e:f5:a4:37:d4:24:86:b2:31:
                    29:d9:42:25:6a:ba:f1:99:72:e4:ad:61:b1:df:08:
                    6a:ff:94:1a:21:3a:1e:ba:3b:64:3f:0b:8e:64:43:
                    0e:af:e0:a6:42:26:43:e6:06:e1:0c:b9:b4:eb:2a:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:2C:A0:DC:60:F9:FB:6A:92:C9:2B:D0:37:9F:D3:8E:F7:E6:8B
            X509v3 Authority Key Identifier:
                keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:ae:77:9e:93:5a:04:d2:c8:0e:e8:40:59:aa:58:67:81:
         7b:0c:0d:29:a3:da:e0:b7:ba:04:08:47:56:e3:f0:cc:d3:89:
         16:58:34:27:9a:aa:1e:0a:31:cb:a8:ac:bc:58:22:e3:23:ff:
         d6:0d:6b:b5:ac:29:2c:79:6b:8d:00:ad:f6:70:5d:22:6d:49:
         3f:93:83:e1:68:26:e1:66:6f:e9:ea:a7:70:79:79:96:01:17:
         90:d9:2e:91:f8:13:c4:bb:bd:41:7a:72:a1:9a:18:05:8c:b3:
         54:c9:62:cc:98:50:7d:ea:69:48:e4:29:59:c9:69:09:5b:ea:
         d2:04:5a:30:6a:a7:13:41:bc:e9:4c:cd:80:63:b7:64:c6:77:
         04:78:fe:c3:4b:5a:d5:14:6a:c4:7b:08:f0:c3:43:22:6a:32:
         5a:4e:d7:32:e0:7a:59:0a:fa:eb:13:5b:fb:c2:ce:7d:66:cc:
         69:a4:e9:60:67:9e:d2:c0:a2:0d:04:35:23:d9:a5:9c:9c:60:
         27:d6:4f:31:dc:2d:59:a5:f1:67:6e:e6:70:07:14:8e:16:9d:
         ed:e5:58:46:fd:59:3e:90:51:8d:01:58:0b:6e:39:31:83:4c:
         ad:10:06:8f:3a:62:b8:54:45:da:3b:a8:41:d0:9d:a6:3c:6a:
         a9:6f:be:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/NsgFc7wxUyvJ7hDiNXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjYwMjA5MDYwMDM4WhcNMjYwMjEwMDYwMDM4WjAzMTEwLwYDVQQD
Eyg5YjYwMmNhMGRjNjBmOWZiNmE5MmM5MmJkMDM3OWZkMzhlZjdlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77qzLDTTa8C+X+sB0wG3jFt+jJO6
qXX9uZR4Ev76UScZ7FsphkhQbGdJ495fIfPS4ljJ4GSOwaIHTDWF7qOeDnAxIRB1
TtMUmNKIYmyRN4bwgMu+H+QhVu0mbg4F529sQS4EF6XXZ5IQF94Zc7N4t8Fgnihu
mZzMJXDMJgKSC6bnazHKxoiaYuZkzNnhqjeT0SQlQZ2UpHn6Uy91Nb63Ercq7r5g
p2UrprXw6wW3l9GxYIs7P1+hQw3zDfMsXsIqmzWald6YPY0+9aQ31CSGsjEp2UIl
arrxmXLkrWGx3whq/5QaIToeujtkPwuOZEMOr+CmQiZD5gbhDLm06yo04QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtgLKDcYPn7apLJK9A3n9OO9+aLMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaSud56T
WgTSyA7oQFmqWGeBewwNKaPa4Le6BAhHVuPwzNOJFlg0J5qqHgoxy6isvFgi4yP/
1g1rtawpLHlrjQCt9nBdIm1JP5OD4Wgm4WZv6eqncHl5lgEXkNkukfgTxLu9QXpy
oZoYBYyzVMlizJhQfeppSOQpWclpCVvq0gRaMGqnE0G86UzNgGO3ZMZ3BHj+w0ta
1RRqxHsI8MNDImoyWk7XMuB6WQr66xNb+8LOfWbMaaTpYGee0sCiDQQ1I9mlnJxg
J9ZPMdwtWaXxZ27mcAcUjhad7eVYRv1ZPpBRjQFYC245MYNMrRAGjzpiuFRF2juo
QdCdpjxqqW++FA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:47 2026 by rpki-client