This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File:                     1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier:          vmZwAuxs2woPBcsjGjuxYi26yEsciLobNkPpklFHtb8=
Subject key identifier:   4B:BD:73:E7:AE:0B:64:AF:64:1C:99:FD:72:BB:32:CC:EE:D9:68:BD
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer:       /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial:       019C424638E300747EF697FE6F366E9CC8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number:          153F
Signing time:             Mon 09 Feb 2026 12:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:23 +0000
Files and hashes:         1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: 4JwYmal9q1Eaxe50G9dFfXhGFlrMSkqU8vK8ko04tWk=)
                          2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
                          3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
                          4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:38:e3:00:74:7e:f6:97:fe:6f:36:6e:9c:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
        Validity
            Not Before: Feb  9 12:00:23 2026 GMT
            Not After : Feb 10 12:00:23 2026 GMT
        Subject: CN=4bbd73e7ae0b64af641c99fd72bb32cceed968bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:d2:97:32:c9:69:27:2c:4d:0b:21:3f:e8:
                    ca:7e:17:0e:a3:63:cb:d4:4f:c5:01:8c:35:c1:c5:
                    70:f5:db:29:f8:f4:a9:a3:4c:c9:6f:7c:69:5a:43:
                    7b:75:02:40:d4:49:a6:31:59:b7:5a:31:01:88:74:
                    22:96:f7:a7:3b:81:e5:38:ab:dd:90:ff:1d:a1:cf:
                    2f:10:18:03:b3:96:de:58:b1:fb:bb:3f:59:69:f0:
                    57:a3:91:05:07:dd:41:3b:e3:83:29:1e:76:16:86:
                    65:d9:de:ba:61:39:e3:64:fe:c5:e4:c0:00:7d:2d:
                    09:2e:3b:be:55:54:be:b5:c3:eb:07:24:e3:25:0b:
                    dd:ad:26:fc:93:9e:40:fb:ce:86:e2:08:51:e1:62:
                    04:2c:fb:b8:d5:d1:97:46:f6:73:b4:25:95:5c:2a:
                    35:f3:9d:75:71:7d:11:d1:24:b1:a5:5a:2b:2a:d8:
                    3d:7e:da:32:0c:b6:55:18:65:b9:78:ea:ee:11:e5:
                    c4:3f:8f:86:bf:00:fc:08:f7:65:77:9b:c0:a9:d6:
                    ac:a7:42:27:1e:0b:0f:19:55:41:1e:3a:58:92:d4:
                    bd:35:1b:c4:9f:f6:3b:1f:55:af:f8:42:73:a6:76:
                    d2:26:55:61:8e:6b:f6:84:55:95:b4:a8:f4:69:a4:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BD:73:E7:AE:0B:64:AF:64:1C:99:FD:72:BB:32:CC:EE:D9:68:BD
            X509v3 Authority Key Identifier:
                keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:27:93:56:8e:29:9d:66:5b:b1:0c:56:9b:f8:45:ac:9d:
         de:d0:0e:59:03:4b:da:2e:72:54:bd:23:aa:bb:84:9e:4b:15:
         ec:11:be:17:3f:04:c6:4c:14:f1:28:a0:d5:e1:da:42:62:b3:
         11:b6:71:e9:3b:b8:91:7c:ce:73:2c:dc:99:40:f0:22:ac:7d:
         6a:ec:4e:37:59:07:9b:a3:f6:0e:df:29:0d:5f:24:45:14:af:
         19:80:f4:71:4a:f7:23:6e:03:3e:4f:25:40:15:1f:5c:57:b9:
         b1:70:14:65:e9:0c:c7:f1:38:d0:58:ca:4e:9f:da:b7:21:65:
         cd:8d:12:d3:05:ef:28:45:e3:05:31:e6:a2:87:05:b6:4b:13:
         6a:44:a1:f2:de:07:72:35:bc:8e:1d:ee:bf:18:71:fb:53:cc:
         da:85:f9:c6:d7:9a:f7:69:53:50:fc:28:bb:53:22:df:3d:c6:
         85:9c:39:21:82:eb:6d:06:72:46:4f:09:69:9c:b3:24:1a:9d:
         69:5d:eb:c5:3f:a9:c7:47:15:78:8b:4b:e2:63:cb:52:56:52:
         67:0c:5a:d1:3f:be:c9:16:60:88:38:f7:80:ae:77:ad:4f:34:
         f3:00:1d:1b:b2:b7:af:f4:f5:5f:c5:47:b0:90:f3:06:b3:e8:
         6f:23:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:23 2026 by rpki-client