This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File:                     QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier:          efnKUsQpzJI5Be9L4D1uGswRb/ZD0CmUGSO3qW6Jqsc=
Subject key identifier:   75:AF:EF:F2:94:A4:F5:9C:0B:AD:54:4C:E9:3A:8E:C1:EE:33:4A:E7
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer:       /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial:       019C45479969FD7493784FB0AF740B22A2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number:          14A4
Signing time:             Tue 10 Feb 2026 02:00:46 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:46 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:46 +0000
Files and hashes:         1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: XHuaNzFHAKviApRh8QDjqi9x+XjxyK9rpKxnr5Lz3Rc=)
                          2: fpHmAafjOGhBaMS1gbhoimd-T64.roa (hash: tNORG3Af35zgXnyNJfcnl9XFHgufLnvK+eM/0nmyONM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:99:69:fd:74:93:78:4f:b0:af:74:0b:22:a2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
        Validity
            Not Before: Feb 10 02:00:46 2026 GMT
            Not After : Feb 11 02:00:46 2026 GMT
        Subject: CN=75afeff294a4f59c0bad544ce93a8ec1ee334ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:0b:7c:ca:b3:ab:d3:61:87:fd:5d:bc:5d:
                    6a:8d:b3:f7:e2:89:04:90:82:d8:6a:cf:51:d7:00:
                    83:57:78:0b:53:fd:ca:be:49:f2:05:4d:48:e7:69:
                    72:00:e1:5f:a0:d7:3c:81:d2:07:01:eb:cf:4b:31:
                    94:75:e6:ff:c7:84:86:9b:49:38:4b:10:fc:02:4b:
                    5a:ac:fd:e2:25:b2:cb:6c:3d:fe:d0:fc:b8:8e:50:
                    02:56:fc:fb:b6:b8:e3:69:6d:ed:e0:df:e8:20:df:
                    f5:bc:a0:f3:60:81:26:1e:9c:da:ad:a2:20:cf:3e:
                    c6:41:75:c2:1b:af:72:ba:25:2b:53:e8:25:5e:bd:
                    ee:7c:13:76:57:4c:d7:46:f1:09:e2:50:c1:2d:c4:
                    af:93:24:00:7c:cf:4f:c3:55:ca:c0:15:95:81:aa:
                    c9:a5:85:6a:c6:d6:60:86:fc:f6:be:2c:f0:0b:2f:
                    ef:70:ac:ec:d6:ef:4a:52:47:e6:b6:50:25:af:e0:
                    7b:66:0c:df:e5:94:4d:fd:78:f2:cf:75:dc:23:c4:
                    ef:f7:49:7b:5a:26:20:70:7c:45:65:24:31:9c:c0:
                    75:d4:5d:7b:7f:35:e7:dd:ef:ea:f1:d0:6f:e0:bd:
                    97:a0:69:21:93:d3:eb:1b:a0:b7:d0:70:f2:13:bd:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:EF:F2:94:A4:F5:9C:0B:AD:54:4C:E9:3A:8E:C1:EE:33:4A:E7
            X509v3 Authority Key Identifier:
                keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:df:9b:f9:2e:12:25:f3:77:36:6e:0c:9e:a6:31:7c:ef:d1:
         42:0f:2b:c3:a9:75:e3:ad:88:d3:86:a8:bf:d8:5e:41:87:69:
         63:8f:04:9f:89:db:43:90:64:91:0d:73:3f:fd:fa:3c:12:7f:
         ce:2b:2f:b2:f5:c7:a9:c4:51:25:03:76:f4:9e:bd:d4:16:f3:
         11:65:04:0a:c1:04:15:89:25:80:23:f7:47:4d:b6:0f:47:97:
         cb:b0:aa:a4:31:14:af:d3:cf:0c:d9:18:b0:c9:7d:2c:e3:67:
         b9:64:13:4b:7d:5b:3f:a5:06:b2:91:e2:29:fc:c3:0a:39:70:
         3f:49:7b:85:cd:26:12:6c:bd:ce:db:5d:26:93:aa:71:3c:99:
         0c:e4:69:7e:8b:0d:d2:b8:62:9a:43:48:94:aa:ef:2a:1e:63:
         ed:56:80:71:8f:df:33:de:ff:e8:c3:4b:4d:f8:6e:34:5a:20:
         f5:78:11:2a:5f:01:4a:c9:70:55:63:cd:3c:18:2a:22:79:00:
         b6:2c:e5:39:0b:f3:d8:ee:7d:b6:68:f0:d7:fc:b1:90:a9:76:
         71:15:5b:40:2a:83:11:56:82:f9:eb:c1:b0:55:e1:07:b9:cd:
         e3:0e:48:b3:49:b1:7d:10:25:14:de:2f:be:07:67:da:65:bc:
         0d:41:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:29 2026 by rpki-client