This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          jjGzWD1MagZvJF7jK1AkoiwcU1VXgBW+b/BwsbSrqww=
Subject key identifier:   8B:3F:05:32:48:07:2C:7F:5B:A3:B2:D7:6B:52:B6:0A:01:0D:84:C8
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       019C40FCC86DD43597E7FDB6D7DE34EF3CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          14EA
Signing time:             Mon 09 Feb 2026 06:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 06:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 06:00:34 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: hgEUf9OYD4jalH9NG0vp82thHaN0nToFpX6/VvThZEQ=)
                          2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fc:c8:6d:d4:35:97:e7:fd:b6:d7:de:34:ef:3c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Feb  9 06:00:34 2026 GMT
            Not After : Feb 10 06:00:34 2026 GMT
        Subject: CN=8b3f053248072c7f5ba3b2d76b52b60a010d84c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:17:f2:68:6c:68:05:73:c8:83:14:35:03:
                    7d:d6:14:49:58:da:cb:5c:b5:d7:22:ef:1e:25:12:
                    59:8f:1f:bc:ca:f9:0b:02:ac:11:98:64:5f:59:44:
                    98:21:f3:db:7a:35:6b:21:0f:41:9a:b8:63:fd:55:
                    4b:7a:57:88:15:b6:72:33:06:c6:b2:27:eb:74:19:
                    81:e3:eb:d0:6f:01:4a:e0:7e:05:4e:a2:e3:59:fe:
                    9b:83:d0:e3:c8:7b:28:2b:52:6d:70:e2:aa:b3:83:
                    fe:8e:a9:19:50:e1:d5:f6:7c:77:91:be:9a:70:d6:
                    47:8f:20:06:e7:e2:8e:71:14:ed:3a:af:cb:c9:14:
                    e5:26:7b:7f:48:57:03:16:72:2b:cb:a4:91:f7:e6:
                    a0:db:a4:59:0c:d2:3b:cd:35:2c:08:0d:d4:08:24:
                    b4:84:d3:03:74:a1:0a:f1:5e:d2:70:69:6c:26:b9:
                    e4:9d:01:aa:2d:55:c7:6a:9e:02:21:a9:f8:e5:93:
                    6b:07:5b:4d:d4:94:42:48:6d:b5:93:54:e6:9b:0e:
                    34:22:31:75:0b:34:db:34:e1:17:f0:0c:a3:fd:aa:
                    10:bf:66:35:62:b5:b5:8e:8f:91:69:60:a1:03:21:
                    da:23:d4:39:c0:af:3c:8f:bd:68:d4:5c:62:19:54:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3F:05:32:48:07:2C:7F:5B:A3:B2:D7:6B:52:B6:0A:01:0D:84:C8
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:4e:e3:b5:cb:35:35:ee:65:b8:0c:0f:cc:5d:d6:91:27:
         3a:a3:9c:30:88:42:cb:b7:99:ec:75:02:e9:35:39:8f:39:96:
         6a:67:91:97:1c:74:37:d3:69:80:ec:08:39:88:6a:03:e7:98:
         a1:48:7f:a4:d5:d4:56:f2:20:a5:3f:37:8f:1f:5a:40:a0:61:
         d4:5d:0c:07:7a:a4:a3:16:bd:4e:75:94:6d:1d:a5:cd:e4:6f:
         bb:10:7b:8b:b2:ca:cf:29:fd:76:09:68:fd:3b:89:b3:73:41:
         64:9b:a2:ea:4c:e9:08:5c:57:60:4e:98:59:0c:51:d9:89:77:
         15:ac:03:6f:f1:07:95:cd:c7:82:19:89:13:1d:99:f1:d6:61:
         73:8e:c1:3b:e4:50:7f:3c:ac:33:1f:aa:d7:47:71:c3:16:e8:
         9b:b7:4d:e2:8a:78:a4:38:be:da:9a:38:ba:a2:f1:1d:0e:89:
         a3:02:bd:19:ff:49:c0:4b:42:48:e4:e9:fa:a3:c2:3d:a8:5c:
         bc:5a:a4:7b:8c:35:3c:f8:29:02:dd:5a:36:f6:2b:d2:d4:eb:
         d6:17:4d:a5:74:83:c3:c7:2a:54:e9:df:e3:ab:0c:0a:7b:1a:
         59:af:bd:09:0c:44:d1:d6:58:71:3e:f5:c6:1a:fd:c7:2d:b0:
         f0:65:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:47 2026 by rpki-client