This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          EHtxqwyWwhR5rE2C6tUsGvaJErUrrWCBaX3GDVIwyeY=
Subject key identifier:   DA:73:E8:E0:66:73:64:8F:6C:4E:38:81:EA:2E:F7:D7:45:9D:A0:B2
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019C4358C927089088E327CE3CC4EF48E9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0EE7
Signing time:             Mon 09 Feb 2026 17:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:17 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: GA5V8+i3rFuqGNP7EY5JtxQb7/4zbzYeMaK+SptfIJ8=)
                          2: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (hash: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c9:27:08:90:88:e3:27:ce:3c:c4:ef:48:e9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Feb  9 17:00:17 2026 GMT
            Not After : Feb 10 17:00:17 2026 GMT
        Subject: CN=da73e8e06673648f6c4e3881ea2ef7d7459da0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:44:39:e3:65:8b:5e:55:84:78:8c:09:76:
                    e7:55:b4:c7:0d:5c:46:91:09:ed:af:f5:64:a6:58:
                    39:dc:ab:b4:c1:7e:0d:b6:d6:f4:b6:ce:96:3b:51:
                    77:46:82:c7:7e:c9:4d:2b:bb:0e:66:c6:33:e6:34:
                    a8:a4:9e:22:f2:34:e5:e2:4e:3e:75:32:a4:11:8f:
                    05:ef:fb:45:37:80:9b:2f:d9:bd:01:1a:e0:bf:d6:
                    8c:43:28:63:08:0f:76:3d:20:dc:81:f8:34:6a:ad:
                    3f:86:e2:ff:01:9c:93:0b:1c:26:d4:b1:1f:e5:83:
                    20:64:e1:93:30:35:6e:a6:18:09:98:87:90:fc:42:
                    3f:1e:7a:23:d1:d3:11:a0:c5:95:fc:0a:d8:86:d5:
                    10:d1:fc:1b:63:fd:46:56:cf:10:c4:a5:06:7b:fd:
                    fd:9e:c0:d2:b4:bd:32:d9:bb:60:97:9c:c3:66:3a:
                    4a:d5:ff:00:3b:0c:f7:27:90:be:42:d0:b1:2c:3f:
                    3d:71:b0:16:71:8a:cb:08:a1:20:84:c6:55:dd:83:
                    e3:7b:4b:c8:8f:a0:9f:2c:83:bb:92:c4:e7:99:c4:
                    e8:21:32:91:1b:3b:20:25:51:6a:9e:3d:98:2a:10:
                    a6:58:a9:60:fc:96:07:72:a9:a4:36:de:af:1d:9f:
                    09:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:73:E8:E0:66:73:64:8F:6C:4E:38:81:EA:2E:F7:D7:45:9D:A0:B2
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:15:53:b1:d9:70:6b:c5:11:95:31:b2:58:92:70:8c:b0:c9:
         47:12:3e:71:46:d3:57:f5:11:6c:88:2e:7e:18:12:a4:d0:26:
         28:5a:6c:5f:01:1a:ce:06:b1:32:26:2d:67:06:02:55:49:60:
         2c:1a:d6:fa:94:5f:63:c4:3f:5d:49:eb:cc:ea:c7:d8:8a:13:
         13:a1:7f:60:6c:af:e7:fb:f1:01:fa:9b:30:11:92:fb:fd:b4:
         7f:2d:48:31:1a:36:d1:30:7f:46:34:c4:fa:b4:a5:5e:17:e8:
         c2:55:85:d0:85:de:ab:27:7c:05:cc:d0:98:19:b6:05:40:88:
         32:2f:81:aa:aa:b2:b1:0e:1f:fd:a1:05:13:78:eb:35:bd:25:
         1a:64:cd:d1:d2:f9:b3:c9:b4:89:5a:e2:63:8b:a6:ac:c3:7f:
         d1:71:9f:34:d7:d6:2c:0f:a4:47:77:07:a7:b1:97:8d:00:57:
         38:0d:73:85:18:76:85:9f:32:2c:e5:00:a9:de:d6:0c:ce:c7:
         19:96:72:ac:50:e2:e5:6d:e3:37:65:fc:a6:59:94:0d:9d:46:
         19:cf:97:d1:64:0e:8e:4a:d5:1c:20:83:0a:90:c0:c5:af:f1:
         3a:fe:31:4b:06:2d:65:f6:a9:6f:22:bc:b2:e6:65:43:45:c4:
         5e:10:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:15 2026 by rpki-client