This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File:                     SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier:          UYj63WYh9PhLqPLeGDXkw55wiLGEA5Jvjnj8PyT7MMk=
Subject key identifier:   5A:61:24:90:F4:58:03:DF:6A:7A:18:E4:3F:92:F3:26:53:6E:2E:B5
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer:       /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial:       019C427D29A0EC84927B81F044390C36FB89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:24 +0000
Files and hashes:         1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: /931tnBJLtv5KM9YSMWOD6lIidgAd8hSYfwt65nhEqs=)
                          2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:29:a0:ec:84:92:7b:81:f0:44:39:0c:36:fb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
        Validity
            Not Before: Feb  9 13:00:24 2026 GMT
            Not After : Feb 10 13:00:24 2026 GMT
        Subject: CN=5a612490f45803df6a7a18e43f92f326536e2eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:35:ce:29:d7:1b:41:7b:fd:7c:1d:3e:51:
                    71:1c:53:2f:e8:9c:e8:31:e1:d7:27:8d:5f:d1:d3:
                    56:73:91:f4:3f:b0:dc:cd:f2:b3:6b:c3:b2:47:71:
                    4a:4e:16:67:31:97:8d:57:88:a4:1f:20:32:43:7b:
                    1a:5d:58:5b:7b:76:54:a5:f6:69:29:fa:53:ac:27:
                    1e:2e:e0:36:e5:57:23:52:9c:54:b8:f2:be:6c:a9:
                    b2:d5:85:7d:df:01:d3:c9:d9:6b:bb:82:6d:ca:62:
                    23:4c:b3:fa:fc:bb:99:6c:4c:3a:42:13:7a:37:d7:
                    86:95:2d:e9:60:1f:67:a4:9c:56:f7:18:8e:e1:47:
                    63:b8:4f:13:46:18:11:b8:32:41:44:07:cd:15:c9:
                    0f:9e:a1:7d:a3:1d:63:6f:a7:91:8e:d0:80:48:fe:
                    2a:12:ec:30:96:e2:ef:29:d6:76:6c:77:a1:81:82:
                    5e:73:45:cd:71:dd:7e:ea:da:06:ba:24:7b:24:99:
                    83:e2:03:f6:ae:aa:cd:8c:6f:ef:7a:b7:d9:51:40:
                    7e:47:53:03:8a:99:ef:77:5f:d3:99:97:60:9f:c7:
                    57:c4:49:cb:c6:20:1f:94:7d:60:83:21:fb:c4:09:
                    42:3e:fa:6e:7e:7c:ac:a4:4b:5d:fc:69:5a:84:9a:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:24:90:F4:58:03:DF:6A:7A:18:E4:3F:92:F3:26:53:6E:2E:B5
            X509v3 Authority Key Identifier:
                keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:f4:b6:52:f2:5c:9d:1b:71:3b:8a:5e:14:9e:69:33:27:
         58:00:36:65:9c:b0:f9:f3:91:7f:59:45:28:45:b8:5c:f3:fb:
         52:ac:25:d4:fa:ec:94:85:63:2b:c1:03:60:90:fc:15:92:fd:
         f4:44:62:bc:e9:1e:b5:4f:5e:45:63:37:cb:4f:50:2b:c6:7e:
         14:72:9b:2d:c4:bd:7d:a0:c1:15:62:18:72:1a:f0:ee:6b:0f:
         62:be:d1:b2:0e:56:c5:90:23:69:e3:94:59:39:1d:39:05:22:
         95:be:25:06:44:ac:b2:20:98:af:c7:ec:a8:4f:58:3d:ec:e2:
         d9:06:a8:12:f8:c3:e7:9e:d7:56:9c:c9:e1:ef:9f:77:f2:04:
         91:4f:ee:9f:6e:a8:f7:03:e1:c3:c8:00:ae:ff:c6:f3:87:64:
         ce:25:bb:03:0c:ec:84:ba:d5:eb:96:6b:bc:eb:ba:4f:1c:fb:
         19:29:39:8f:45:56:22:69:d0:f3:72:9b:a5:d6:e3:90:d3:89:
         6e:27:bc:be:e6:f8:49:94:15:6e:12:6b:47:dd:05:4c:f7:9d:
         6e:65:a0:9f:bc:c0:f1:9b:fc:57:16:06:80:b4:3a:3a:e0:82:
         db:bf:df:30:d4:4d:93:6d:91:fe:40:f7:ad:50:92:5b:35:a9:
         39:d8:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:30 2026 by rpki-client