This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File:                     tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier:          YpJW4Hx5HFw5YXb0Bpw3OlA3GxWIXHbc0VM9+Q2IjHY=
Subject key identifier:   08:DF:54:F4:B6:DE:16:46:F2:5A:69:50:34:10:24:E1:DE:09:35:16
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer:       /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial:       019C416AE5C341C320E4B7DB78240B59A601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number:          15B0
Signing time:             Mon 09 Feb 2026 08:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:50 +0000
Files and hashes:         1: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: KMd8sG0Q2rBQE6JGXOj8L/4YL2CqcKKgslThBBfF4Lo=)
                          2: vIC9OJp6vwhWqdc81j14JoQUKx8.roa (hash: jB6UoCFQZz2b8pZgCJew4WFZOuGss5ssZCVbFkKzZ1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:e5:c3:41:c3:20:e4:b7:db:78:24:0b:59:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
        Validity
            Not Before: Feb  9 08:00:50 2026 GMT
            Not After : Feb 10 08:00:50 2026 GMT
        Subject: CN=08df54f4b6de1646f25a6950341024e1de093516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:e9:b8:a7:5c:85:e6:17:6b:ae:f5:96:ab:
                    22:35:30:38:34:e1:7c:f3:52:0c:22:37:8b:7e:a7:
                    35:6e:f6:f1:c7:aa:b1:2a:0f:b8:45:55:f8:5f:b3:
                    7b:a4:ae:94:de:9c:26:25:f0:9f:7c:d2:cd:08:a0:
                    6e:21:b7:e6:57:08:a9:fe:e0:70:f8:02:6b:ba:e1:
                    92:18:d8:39:46:88:ab:85:24:93:cb:b9:ba:ab:e2:
                    68:9e:3f:6c:64:c9:c1:6c:e1:8e:a0:92:28:85:46:
                    8b:ca:1f:fc:68:53:25:bc:09:9a:5b:fe:9f:5f:ff:
                    33:62:94:e9:10:6c:47:0f:88:0a:47:5d:85:4e:42:
                    7c:49:82:d6:18:b1:e6:ba:bd:f1:d0:a9:bf:ff:4c:
                    07:87:0f:40:c3:c2:ae:d6:a7:44:f8:5b:8e:88:8e:
                    92:99:15:eb:fc:5a:8d:bd:9e:f8:b9:26:1b:8d:8a:
                    52:af:42:bc:b8:ed:5c:86:4d:2d:1d:27:46:27:87:
                    97:30:79:9e:b2:63:0a:2c:0e:a8:86:88:18:28:bc:
                    79:86:fa:f0:63:ab:8f:30:c5:88:17:82:46:c8:56:
                    5e:43:6d:4d:39:6b:5e:79:b6:6b:e2:4b:1e:fd:57:
                    78:9a:9a:d6:c6:f5:42:2e:3d:14:c2:b0:16:cf:07:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:54:F4:B6:DE:16:46:F2:5A:69:50:34:10:24:E1:DE:09:35:16
            X509v3 Authority Key Identifier:
                keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:2f:5f:77:a4:3f:96:16:81:59:68:9a:c0:65:7f:d6:54:41:
         20:da:43:80:8e:be:d6:70:8e:49:8a:da:4a:52:73:37:cb:a3:
         6a:18:fb:8e:8d:e2:e6:7b:52:28:fa:7a:56:f0:f3:8a:4a:7d:
         61:40:7d:4d:4e:ba:67:a8:5d:be:88:50:d1:77:82:49:d3:f8:
         25:c8:8d:9a:6b:07:f8:92:44:51:ad:7f:46:28:35:75:ff:83:
         89:9e:c7:20:a1:01:0a:15:3e:8e:6c:fd:74:fd:d9:b9:c6:aa:
         eb:55:97:ed:0e:65:c7:0e:7c:d4:b7:e3:f4:77:2e:b7:e1:c3:
         f4:31:32:cb:e8:68:61:da:63:57:c1:0b:b5:e0:51:4c:98:d2:
         cf:12:90:84:35:d8:75:50:96:88:c3:c5:c4:af:14:e6:b6:2b:
         14:7b:1c:54:86:e4:62:0b:2b:8d:2d:8c:00:7a:a9:19:57:63:
         98:7d:93:e7:af:23:5e:f0:04:69:eb:18:55:f1:2b:71:91:fc:
         af:3b:f0:a3:1f:bb:42:b1:58:9c:d0:d1:65:d5:d5:eb:3b:e1:
         ed:01:0b:2f:00:c3:3d:67:41:b1:f3:01:44:ab:78:af:34:e4:
         a1:d6:4a:61:23:82:75:12:bc:60:41:72:3d:4f:b2:21:c6:a7:
         4a:ca:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:10 2026 by rpki-client