This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          GLF/1jlxiJiMewnBpEQI1HaDFaMJybYOxbnV2W1ACE4=
Subject key identifier:   58:33:16:CC:46:61:51:5F:31:5E:98:AE:75:26:03:5A:9B:7D:9D:A9
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019C42EB1D691F315ACCD3C8E6E94E6E5341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0BE1
Signing time:             Mon 09 Feb 2026 15:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:30 +0000
Files and hashes:         1: 9Q-wIj12he9wXDbL67TYYvZ_2cI.roa (hash: TjJ3yUQRLm+yE/F996Jy9BjBIBFcfqDfS+QMH9VjHSM=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
                          4: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
                          5: hzWUkbNBR4BJdeJ1_o3ZU9cZ3ew.roa (hash: inLNqatIBR7g5h8QpHPp8LrXvRaSA4dGEVg1gYl4btM=)
                          6: kQmmX2shYiBrgwj4WH6KjhEq6dk.roa (hash: 0WkUmsljE+3CRDhGKei4uM+g06ozmYAGysnQVZuM58Y=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: /rZ90reOqN96t1nkGYV8DAiCN32s/BQ9H7tYVKncvlo=)
                          8: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
                          9: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:1d:69:1f:31:5a:cc:d3:c8:e6:e9:4e:6e:53:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Feb  9 15:00:30 2026 GMT
            Not After : Feb 10 15:00:30 2026 GMT
        Subject: CN=583316cc4661515f315e98ae7526035a9b7d9da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:b4:12:9a:1e:a2:b6:66:19:b1:10:1f:a3:
                    03:48:78:3c:7d:bd:46:db:3d:91:4f:eb:93:4c:59:
                    dd:53:7e:f0:44:6a:9f:ab:e9:e4:67:e6:c2:c3:fc:
                    56:15:c0:54:26:84:2a:16:de:b7:1b:a0:92:9b:d9:
                    da:d1:9a:06:a3:bd:54:62:b7:5e:b7:ed:b6:b0:40:
                    94:a9:78:9e:ee:55:c5:d2:44:2e:7c:b7:2e:7d:28:
                    3a:78:2e:bd:48:c5:a6:b1:f9:4c:35:4e:b8:61:46:
                    35:b7:0c:0e:b1:74:b2:67:ac:17:00:57:91:a2:26:
                    62:ff:a6:73:3e:7e:1f:8e:04:91:ea:91:02:2e:e4:
                    b4:2f:35:0a:18:3c:41:d0:be:4f:68:7d:85:b4:65:
                    35:6e:44:df:ce:44:f3:53:8f:14:65:7e:e8:dc:9e:
                    fb:0b:65:2b:3b:2d:cd:ce:e1:84:df:a5:b5:41:d3:
                    db:67:0c:60:14:e5:8a:db:c8:88:97:14:44:cf:e3:
                    88:05:fe:75:62:eb:fd:22:b8:75:32:21:d4:9a:d9:
                    23:4c:3b:c2:4b:eb:e2:29:6e:41:b1:37:d1:af:20:
                    8b:6a:c2:b6:5f:ab:6a:13:69:87:92:1a:24:13:44:
                    14:a4:f9:f6:82:56:53:6e:f1:45:14:a4:35:a2:4f:
                    48:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:33:16:CC:46:61:51:5F:31:5E:98:AE:75:26:03:5A:9B:7D:9D:A9
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:81:64:79:10:b1:64:cb:68:53:fc:c4:9a:54:4a:4a:21:21:
         77:24:fc:a5:31:23:67:c1:b7:99:72:73:78:11:95:64:74:46:
         41:6d:1a:dc:f1:e6:8c:b4:3e:d5:fe:26:9b:4a:5f:ce:06:8a:
         59:45:fb:7b:61:c2:63:2f:35:d6:a9:ff:de:71:3f:82:1e:27:
         52:55:0d:84:5a:91:0c:ab:84:01:9e:dd:80:eb:20:6d:c7:22:
         b2:02:fe:eb:08:b5:13:93:a3:e6:48:9d:da:e7:31:ce:2f:87:
         ab:d3:01:98:9b:7a:41:a4:33:50:b7:16:33:63:72:b2:56:6d:
         ba:24:d7:24:c9:94:e2:c8:fe:1f:66:2a:25:77:4e:82:17:51:
         37:f4:59:09:1c:d9:56:e0:35:1f:f0:95:2b:fd:69:78:56:91:
         4e:24:3d:99:72:ed:84:21:4f:b8:f5:8f:0e:5d:e1:52:5f:0b:
         09:cb:c2:33:40:31:c3:e5:a0:2c:9c:34:17:96:9c:f9:44:32:
         40:ce:2e:ac:95:71:93:86:83:ae:aa:e9:9a:b4:9f:fe:92:b6:
         74:8f:13:87:6c:2e:19:27:77:e6:6f:ed:47:5d:75:26:a7:e0:
         87:cf:86:d7:cb:48:3b:30:e2:5b:ff:97:be:13:f0:9a:7e:32:
         d3:8b:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:45 2026 by rpki-client