This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File:                     QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier:          nCVhP3tJwhSSJbB6+sVqcvGriCJ8aPS6QuONYKIwDio=
Subject key identifier:   FB:D4:9A:7B:B4:AD:E5:F1:0D:5A:05:B3:26:D8:65:AA:E0:5A:17:4A
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer:       /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial:       019C42EB6D9C50AF9E5641D810670B6889C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number:          175F
Signing time:             Mon 09 Feb 2026 15:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:51 +0000
Files and hashes:         1: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: F/hcsAsIXIyJi6jDk22/jNkeBA7NRrKa1jxD2kxa4jI=)
                          2: cQtlxVVPO7JQa_rTQPIvZ0L_JT0.roa (hash: wGTkJ7+XtXJZbWxqtu6wY+OG6HIKs93TJ8T7CJvY3Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:6d:9c:50:af:9e:56:41:d8:10:67:0b:68:89:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
        Validity
            Not Before: Feb  9 15:00:51 2026 GMT
            Not After : Feb 10 15:00:51 2026 GMT
        Subject: CN=fbd49a7bb4ade5f10d5a05b326d865aae05a174a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:41:6f:bf:6f:bd:52:47:68:dd:6d:c0:23:
                    42:4b:3f:54:3d:6a:40:75:6d:24:68:ae:01:8c:70:
                    27:fb:59:60:a4:95:97:56:b3:39:1a:35:d4:a8:eb:
                    79:a7:c8:89:d8:da:34:fa:2d:c7:70:0b:5d:78:2d:
                    05:b6:49:c2:aa:6c:c3:86:41:39:69:6b:3b:79:1f:
                    e4:00:0d:15:94:88:03:05:2b:bb:3d:0e:00:c1:18:
                    54:6e:12:94:43:64:22:35:09:48:b8:e1:ef:2b:81:
                    27:10:7e:bd:cf:c2:90:4b:8c:26:dd:e3:1d:5e:83:
                    b4:4e:41:d9:18:c2:99:aa:0b:fc:b3:1e:8b:be:ca:
                    a8:2c:4d:06:d2:ef:02:c1:e4:43:22:c3:d5:66:4e:
                    14:f0:e9:85:57:03:58:a4:cd:2c:79:aa:f5:9b:a7:
                    a9:28:e0:c5:c1:d0:4a:4c:d5:81:87:c4:06:9e:c5:
                    6d:4e:13:ca:4c:82:57:3a:7d:26:28:07:56:af:1f:
                    54:55:ff:36:72:1f:10:c4:a6:86:bd:38:1c:0d:aa:
                    b9:45:de:cb:e3:8a:db:d3:a9:15:75:93:2c:fd:ee:
                    4a:60:8e:04:61:36:d7:46:fa:2b:be:66:e9:84:10:
                    6b:8a:5b:15:cb:b2:ce:a7:e4:cd:29:aa:8b:3f:e1:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D4:9A:7B:B4:AD:E5:F1:0D:5A:05:B3:26:D8:65:AA:E0:5A:17:4A
            X509v3 Authority Key Identifier:
                keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:77:c0:1b:e8:cf:1b:6d:d3:24:dd:2d:b8:a0:4d:09:eb:
         bd:37:0e:07:da:06:79:bc:df:15:43:d9:2a:70:da:15:2b:06:
         51:8d:b5:69:ef:73:0f:64:1a:e7:40:db:30:77:dd:47:9e:a4:
         8b:fe:09:35:cb:e0:ca:19:24:4f:ea:e7:b3:63:a8:5b:21:a1:
         eb:7b:48:45:88:3b:a2:69:fd:2d:fe:45:e5:fd:c5:e9:ef:7a:
         fc:9a:93:f6:d1:4c:59:15:22:b3:54:95:91:a0:69:c1:dd:36:
         6a:91:e7:5f:c2:b9:c0:62:d8:f5:d3:03:91:c1:db:26:97:c1:
         b2:8f:73:b1:40:61:34:bf:eb:c5:67:c9:36:f2:04:6e:e1:99:
         0f:4e:72:41:17:52:96:79:1f:b7:ed:f7:41:ca:74:a1:d7:2b:
         d1:a8:44:ed:aa:e8:14:12:72:fa:51:6b:38:74:06:8e:9c:b1:
         4b:84:75:5e:be:c9:90:7d:22:94:b6:d7:71:34:68:4e:e9:cc:
         da:67:60:a7:9c:69:50:62:72:e5:4c:8c:83:74:48:ee:a8:cd:
         9e:ab:b9:c2:96:97:f4:24:47:d1:43:e5:89:14:15:76:61:29:
         3b:d0:c4:2e:20:cc:0d:a4:ff:bd:93:af:0c:6b:4e:b6:77:5f:
         52:56:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:33 2026 by rpki-client