This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File:                     qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier:          p9T2A1//obSPuyGR+viNiqCNmCEux+gksDvkUjizRgk=
Subject key identifier:   F0:E3:66:23:F4:A2:99:AD:79:2D:70:45:40:33:BA:28:73:77:14:82
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer:       /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial:       019C42EBA5828D6011D26C09CC0BFB29E5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number:          13F9
Signing time:             Mon 09 Feb 2026 15:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:05 +0000
Files and hashes:         1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
                          2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
                          3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: eVEfTHpOnp0vWL2H6p6bxzAXdSxMfv8x7EokT8ThA4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a5:82:8d:60:11:d2:6c:09:cc:0b:fb:29:e5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
        Validity
            Not Before: Feb  9 15:01:05 2026 GMT
            Not After : Feb 10 15:01:05 2026 GMT
        Subject: CN=f0e36623f4a299ad792d70454033ba2873771482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:be:a7:ee:6a:a8:9d:1b:b3:7e:1e:96:28:
                    00:24:5d:60:06:97:09:e6:b4:fa:32:27:c5:b1:c2:
                    91:7d:2f:f2:55:f9:6f:e0:22:ec:4c:d8:2f:b1:3f:
                    13:3e:ac:3e:28:d3:57:9e:f6:a2:a4:d9:2b:7c:4f:
                    64:5b:1a:07:db:57:f4:cb:5f:f9:10:a0:e0:8a:87:
                    ad:d0:a7:cf:41:e1:27:58:21:7b:56:ba:57:8e:c2:
                    76:2e:0f:a7:1e:3e:18:33:66:40:97:ce:c5:63:44:
                    38:df:6c:cc:95:d0:15:22:30:93:9d:44:db:9f:d0:
                    5c:ba:05:a2:9c:ca:e5:48:a9:d6:60:a3:76:cb:a4:
                    f0:0b:21:ac:db:c0:59:31:7d:ca:ff:1b:6d:8f:89:
                    34:88:e5:74:f0:5c:4b:cb:73:85:1c:27:7d:df:2e:
                    05:c3:d8:9d:5a:f4:75:9b:c3:d4:11:c5:5e:00:38:
                    c6:2f:51:04:5b:02:99:85:09:6e:8b:9c:8a:17:9e:
                    c1:7c:b8:3d:b8:fe:ba:8c:f7:bd:b6:5f:7b:e6:91:
                    95:48:71:95:af:17:ba:85:e9:4c:91:bc:3f:3a:f5:
                    9d:19:02:6c:1d:91:da:c8:f9:8a:d4:ab:e1:c6:b0:
                    e1:22:e1:af:d6:27:e4:23:ba:5a:9a:8e:91:66:f5:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:66:23:F4:A2:99:AD:79:2D:70:45:40:33:BA:28:73:77:14:82
            X509v3 Authority Key Identifier:
                keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:07:e2:e5:4a:ca:68:0c:02:75:f8:21:68:1a:9d:d2:87:77:
         77:e4:9e:57:32:55:e9:e9:cb:02:3d:5b:0d:de:d4:ce:2f:71:
         7f:8e:d2:ff:7f:8d:ad:ca:ed:99:ac:21:64:11:a9:e6:6b:6d:
         96:6a:75:9c:db:2b:08:29:92:cf:0d:a1:2e:47:2a:43:c8:24:
         63:24:45:d0:1a:6f:7b:33:34:98:79:de:2a:0e:3c:6e:b6:f8:
         ec:2f:ba:ec:5a:65:78:64:90:30:fd:55:71:90:5c:6c:7b:f1:
         c2:b2:7c:40:c1:2a:cb:17:ba:7d:b5:46:d5:53:84:aa:1a:73:
         b0:ef:d0:2d:67:f6:b2:b2:c6:e9:59:b9:23:e6:68:30:09:cb:
         e4:be:d4:e1:86:e5:ce:be:23:c0:99:a9:75:84:4e:6b:24:fb:
         92:43:f9:fe:06:65:07:61:c8:e2:d3:e4:d0:ee:99:6d:1b:fe:
         01:f0:63:1d:c7:ec:88:10:a1:76:a9:f8:3b:e1:ac:43:b8:8b:
         66:c0:e8:4c:c4:6f:95:e3:86:20:71:0e:4c:6e:0c:fe:43:a2:
         3e:88:c4:2f:52:f0:be:8c:80:df:e8:16:94:97:6b:2a:13:78:
         e3:5c:a2:91:c5:dd:d1:c1:a6:06:78:38:de:7f:53:97:6a:9d:
         d5:30:27:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC66WCjWAR0mwJzAv7KeXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjYwMjA5MTUwMTA1WhcNMjYwMjEwMTUwMTA1WjAzMTEwLwYDVQQD
EyhmMGUzNjYyM2Y0YTI5OWFkNzkyZDcwNDU0MDMzYmEyODczNzcxNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2+p+5qqJ0bs34eligAJF1gBpcJ
5rT6MifFscKRfS/yVflv4CLsTNgvsT8TPqw+KNNXnvaipNkrfE9kWxoH21f0y1/5
EKDgioet0KfPQeEnWCF7VrpXjsJ2Lg+nHj4YM2ZAl87FY0Q432zMldAVIjCTnUTb
n9BcugWinMrlSKnWYKN2y6TwCyGs28BZMX3K/xttj4k0iOV08FxLy3OFHCd93y4F
w9idWvR1m8PUEcVeADjGL1EEWwKZhQlui5yKF57BfLg9uP66jPe9tl975pGVSHGV
rxe6helMkbw/OvWdGQJsHZHayPmK1KvhxrDhIuGv1ifkI7pamo6RZvXdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDjZiP0opmteS1wRUAzuihzdxSCMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQfi5UrK
aAwCdfghaBqd0od3d+SeVzJV6enLAj1bDd7Uzi9xf47S/3+NrcrtmawhZBGp5mtt
lmp1nNsrCCmSzw2hLkcqQ8gkYyRF0BpvezM0mHneKg48brb47C+67FpleGSQMP1V
cZBcbHvxwrJ8QMEqyxe6fbVG1VOEqhpzsO/QLWf2srLG6Vm5I+ZoMAnL5L7U4Ybl
zr4jwJmpdYROayT7kkP5/gZlB2HI4tPk0O6ZbRv+AfBjHcfsiBChdqn4O+GsQ7iL
ZsDoTMRvleOGIHEOTG4M/kOiPojEL1LwvoyA3+gWlJdrKhN441yikcXd0cGmBng4
3n9Tl2qd1TAnog==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:48 2026 by rpki-client