This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File:                     qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier:          bogdmYwCPJrtFIM3un5kV08GklG82rUmh8DqHbs3jMk=
Subject key identifier:   88:3E:C9:73:C2:B0:E6:5C:72:96:7C:25:04:DE:F3:A0:E5:4C:B9:D2
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer:       /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial:       019C424621402988929E729EB4FC76C94E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number:          1552
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: b0EdgXD6+p4/LNDjQAtS/RVvr9zBikjBM+dMv1OKap4=)
                          2: tI5Q_pHNppa9IygLbs0z0gxs4tQ.roa (hash: 42laiJa6YC1H/CwPJuianhlbqJN55nJRIX5XgJoyuRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:21:40:29:88:92:9e:72:9e:b4:fc:76:c9:4e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=883ec973c2b0e65c72967c2504def3a0e54cb9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:fb:1d:e3:63:5e:45:55:7b:07:34:f1:7a:
                    b6:bd:a4:0d:51:1d:00:b8:ea:6b:90:ab:65:ba:18:
                    db:36:93:31:88:5c:da:a0:5b:e8:41:55:3c:a4:89:
                    85:02:a6:65:91:4a:24:0d:54:13:f1:9e:54:81:e1:
                    09:17:a8:0d:2a:fc:2a:74:aa:e1:2e:d6:38:ab:0c:
                    b5:d8:8e:e8:e6:13:fa:2e:42:9f:6a:cf:74:b9:ca:
                    36:cd:99:a3:9c:bd:6a:36:5c:5e:32:ce:05:c5:17:
                    1b:27:50:6b:95:64:1f:22:82:f0:0e:86:7f:ca:1a:
                    00:ba:a2:65:7c:60:a8:e5:41:d4:92:e4:d2:0a:4d:
                    40:a1:80:58:e9:0c:23:67:aa:07:da:96:22:79:65:
                    a5:8f:c8:c9:61:d4:1c:08:fd:e0:86:7a:22:62:55:
                    94:5c:15:3a:e3:2f:df:97:e1:9f:82:86:4f:24:2a:
                    2c:58:6d:5c:6e:3e:27:3a:6a:c9:e1:40:7e:17:59:
                    13:32:87:46:2d:6a:81:2e:41:41:d1:7f:78:c2:1b:
                    a8:7c:6c:6b:99:8c:ef:45:cc:bb:cc:f9:fd:4a:24:
                    ec:e5:58:2c:7c:b8:33:e9:63:37:b4:78:70:f9:3f:
                    f0:90:6a:ce:71:79:85:d9:0b:78:0c:74:be:f2:e6:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:C9:73:C2:B0:E6:5C:72:96:7C:25:04:DE:F3:A0:E5:4C:B9:D2
            X509v3 Authority Key Identifier:
                keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1d:7b:33:e0:c9:64:e5:2f:2e:28:3c:b2:19:64:ca:ed:c0:
         83:97:86:6c:b0:3f:83:75:a0:40:06:30:4f:22:e7:e0:42:f8:
         cf:4f:60:ea:0c:d0:50:d1:96:6c:f8:c7:38:56:8a:80:a9:f4:
         84:4d:d1:60:dc:3d:10:f3:55:78:54:c2:bf:96:22:48:7e:a7:
         30:c0:35:c8:d5:7f:c1:ce:ad:f2:38:b7:38:13:0d:41:5b:ed:
         9e:ad:2a:67:80:1e:a9:ec:49:f0:d8:b8:57:50:3c:df:9a:bf:
         f2:7e:50:5c:8e:e0:f7:88:f0:3a:72:1f:0d:87:41:c5:70:a6:
         bc:74:c0:44:81:03:cb:42:ec:fe:fb:78:6f:32:14:0f:fc:dc:
         ef:b7:a2:4d:cc:be:cb:fe:b7:5a:5d:01:26:f9:81:f2:46:91:
         26:e4:d6:37:2c:f9:26:de:d6:6a:b2:6a:5d:42:5c:e7:0a:6b:
         ba:0a:81:83:08:00:f6:f6:54:3a:b0:45:27:c7:51:db:77:66:
         eb:c8:ad:5f:59:77:30:8f:a9:31:68:a2:10:03:89:e2:6b:93:
         80:d7:22:6c:ed:f7:cd:10:71:92:6b:fc:88:54:f3:df:d3:12:
         66:7f:1c:ee:35:c8:12:b5:67:ce:b4:8c:e1:e2:eb:3c:bc:5a:
         2f:39:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:20 2026 by rpki-client