This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File:                     q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier:          agA1CUdf/kOG7h2P+8cJGNtVn61VtJWWyiEd11cGH9U=
Subject key identifier:   61:92:FF:49:65:86:45:C2:1E:65:D4:1C:1B:DF:F0:83:A1:8D:D0:64
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer:       /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial:       019C42B4444879BCBEE7A173E098994475D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number:          045F
Signing time:             Mon 09 Feb 2026 14:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:36 +0000
Files and hashes:         1: 1-DN9R_xhKOI4mV80WkUcPVaagQc.roa (hash: ASJpdR212uLae0GK1ckKJRJ0hpliZAorVI6HruZ1pYo=)
                          2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: QnrLGRQpicVIjNC7ORE4MMR/aGtC908J1wRbDjIsGnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:44:48:79:bc:be:e7:a1:73:e0:98:99:44:75:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
        Validity
            Not Before: Feb  9 14:00:36 2026 GMT
            Not After : Feb 10 14:00:36 2026 GMT
        Subject: CN=6192ff49658645c21e65d41c1bdff083a18dd064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:e3:c3:76:75:3e:f1:7f:5c:2a:57:f4:bf:
                    ca:56:32:b5:6a:b8:64:26:6c:05:d8:52:10:8d:ae:
                    0b:66:ca:ac:b8:5a:f5:e5:a2:e6:9e:0f:5c:19:9d:
                    c8:e2:ee:f7:79:02:9e:cd:30:33:dd:28:9d:16:f2:
                    45:ad:f0:88:4c:74:cd:74:8a:4a:19:18:aa:2e:ab:
                    f0:a6:b8:fa:6c:56:ac:34:83:9e:c7:d4:d3:6c:bf:
                    35:4a:06:46:96:cb:ad:bf:d0:da:7e:ad:a3:57:99:
                    ae:dd:34:cb:7e:74:f7:a5:d4:9c:64:cd:2b:6e:e8:
                    3e:6c:02:17:f9:c2:d4:c2:27:7b:5c:1f:6c:fe:d6:
                    3c:20:fc:fc:1d:c6:df:4d:6f:8d:59:40:cd:7d:b4:
                    b2:d9:75:bf:ca:64:bb:cd:6a:f8:3c:f5:98:af:44:
                    d6:21:3f:9c:96:e2:05:a4:c5:23:1b:f8:92:a2:bc:
                    70:33:7b:30:5f:af:1d:d1:7c:4f:b9:1a:2b:33:dc:
                    c4:df:a8:72:d1:d2:70:0a:f8:3d:7d:67:3a:69:f5:
                    56:ca:8c:69:1e:b6:e8:61:82:ed:87:84:d3:08:21:
                    1b:ee:eb:7a:8b:da:28:8c:f2:d6:b2:25:a2:c5:02:
                    05:77:99:22:19:90:b5:5c:8e:59:fc:32:c1:cf:bd:
                    8d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:92:FF:49:65:86:45:C2:1E:65:D4:1C:1B:DF:F0:83:A1:8D:D0:64
            X509v3 Authority Key Identifier:
                keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:eb:f2:64:26:ea:fe:5b:23:53:60:cc:fe:66:89:0a:b3:
         af:12:87:eb:24:e5:57:a6:a7:09:ae:3b:8d:d3:13:1e:bb:55:
         54:33:a0:8d:b1:0d:66:d7:3c:3c:96:e9:d5:cc:2b:74:fb:aa:
         b1:2c:71:b8:78:c9:a3:16:0b:31:cd:58:82:a9:ec:0e:b0:41:
         73:ca:33:66:d4:44:4e:3c:73:41:eb:c3:b4:4d:b2:b7:da:1f:
         af:bc:6e:43:eb:4e:b3:78:79:1e:b7:c1:49:3f:ba:95:95:8c:
         42:ab:f9:6d:8e:55:da:5a:0c:c6:6e:70:e4:dc:ee:54:9e:63:
         52:c4:a8:f7:ad:d0:73:ac:49:43:40:52:11:76:8c:4c:16:6a:
         b7:3d:4f:f3:ca:75:f2:b2:18:be:95:87:3a:36:38:28:7b:8d:
         4b:06:a7:d7:31:49:e8:6f:96:ae:af:ab:5a:11:77:39:48:7d:
         07:20:e2:1d:de:14:fe:cf:03:b9:c1:b7:eb:1c:ac:2b:57:25:
         42:d3:73:9d:7e:6c:b2:36:56:46:99:50:3d:ae:63:26:ed:04:
         b5:e6:28:21:45:97:81:a4:5c:a7:18:9d:c4:16:46:e7:19:bf:
         7c:98:11:12:4b:c1:9f:12:9f:cd:9a:5b:d9:7d:89:14:ac:1d:
         5b:01:c4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtERIeby+56Fz4JiZRHXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDk2YWFlODhlZjk5YjRkNTBlNDllY2FlOWNhZTQ4ZjM3
ODgxZjcwHhcNMjYwMjA5MTQwMDM2WhcNMjYwMjEwMTQwMDM2WjAzMTEwLwYDVQQD
Eyg2MTkyZmY0OTY1ODY0NWMyMWU2NWQ0MWMxYmRmZjA4M2ExOGRkMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXvjw3Z1PvF/XCpX9L/KVjK1arhk
JmwF2FIQja4LZsqsuFr15aLmng9cGZ3I4u73eQKezTAz3SidFvJFrfCITHTNdIpK
GRiqLqvwprj6bFasNIOex9TTbL81SgZGlsutv9Dafq2jV5mu3TTLfnT3pdScZM0r
bug+bAIX+cLUwid7XB9s/tY8IPz8HcbfTW+NWUDNfbSy2XW/ymS7zWr4PPWYr0TW
IT+cluIFpMUjG/iSorxwM3swX68d0XxPuRorM9zE36hy0dJwCvg9fWc6afVWyoxp
HrboYYLth4TTCCEb7ut6i9oojPLWsiWixQIFd5kiGZC1XI5Z/DLBz72NQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGS/0llhkXCHmXUHBvf8IOhjdBkMB8GA1UdIwQY
MBaAFKvZaq6I75m01Q5J7K6crkjzeIH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTIt
N2MzZjhjNDBjNTEwLzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZjk2MTktNGJkMC00YWJhLTkwZTItN2MzZjhjNDBjNTEw
LzEvcTlscXJvanZtYlRWRGtuc3JweXVTUE40Z2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlzr8mQm
6v5bI1NgzP5miQqzrxKH6yTlV6anCa47jdMTHrtVVDOgjbENZtc8PJbp1cwrdPuq
sSxxuHjJoxYLMc1YgqnsDrBBc8ozZtRETjxzQevDtE2yt9ofr7xuQ+tOs3h5HrfB
ST+6lZWMQqv5bY5V2loMxm5w5NzuVJ5jUsSo963Qc6xJQ0BSEXaMTBZqtz1P88p1
8rIYvpWHOjY4KHuNSwan1zFJ6G+Wrq+rWhF3OUh9ByDiHd4U/s8DucG36xysK1cl
QtNznX5ssjZWRplQPa5jJu0EteYoIUWXgaRcpxidxBZG5xm/fJgREkvBnxKfzZpb
2X2JFKwdWwHEBQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:56 2026 by rpki-client