This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          kfyb8iMs5BZ0f04JBnSlkiWAoQGWn6RaD+4ihFI4LaY=
Subject key identifier:   57:7A:07:AB:1A:22:C8:D5:7B:6D:56:4A:97:35:F4:E2:E9:65:67:0B
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       019C42EB7400FFC77EB010637A7B87CC325B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          02D5
Signing time:             Mon 09 Feb 2026 15:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:52 +0000
Files and hashes:         1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: 9Tc4KKSfjJqAyysiqvGCbEDvpfkWWytYwdTHPd77nkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:74:00:ff:c7:7e:b0:10:63:7a:7b:87:cc:32:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Feb  9 15:00:52 2026 GMT
            Not After : Feb 10 15:00:52 2026 GMT
        Subject: CN=577a07ab1a22c8d57b6d564a9735f4e2e965670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:60:c9:32:cf:ff:74:f6:60:4a:08:ce:53:
                    51:0a:3c:ce:ca:3f:a1:12:33:d0:1c:39:6f:69:a6:
                    15:6b:de:b5:93:cd:51:12:25:66:0f:8a:97:2b:66:
                    b0:66:da:e2:01:b9:24:9a:b2:75:de:69:ec:fa:2b:
                    85:06:8d:34:77:d4:a7:5f:f4:a5:85:05:8a:8a:f0:
                    b2:aa:0a:2e:95:e3:17:31:8c:ed:76:e5:19:d2:bd:
                    39:89:70:c9:e4:3a:d0:45:3c:a3:72:2b:29:89:4b:
                    50:dc:5b:24:85:68:68:c3:1f:72:78:44:4f:f3:51:
                    c2:3c:f1:75:2f:f0:6b:f5:ce:45:87:94:72:87:81:
                    cb:3d:93:15:fd:70:59:06:48:ce:2c:8c:6a:f3:2c:
                    61:9b:7a:fa:14:66:22:df:39:51:8b:09:1b:f9:a9:
                    6b:1a:99:1e:83:aa:4c:76:b2:e2:9d:c8:87:2e:6d:
                    1b:9b:28:c3:a5:52:dd:d0:0a:df:af:a3:14:3e:a4:
                    11:d5:9b:51:5f:34:86:dc:56:65:26:79:1d:be:2c:
                    48:a8:26:34:bd:93:57:49:cd:d6:2a:fb:49:26:8d:
                    c2:ae:59:e3:0f:fc:c1:46:04:42:01:98:ed:84:d5:
                    7d:2c:ca:d5:46:aa:b3:a5:f0:9b:84:fa:21:65:05:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:07:AB:1A:22:C8:D5:7B:6D:56:4A:97:35:F4:E2:E9:65:67:0B
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:41:bd:5f:db:4e:7a:5f:ef:2a:0c:8f:b3:fe:8c:23:19:
         64:35:47:9f:35:02:50:8a:4a:84:87:14:30:6c:57:da:a7:d4:
         16:ee:ae:44:99:ff:15:3c:83:f3:95:60:86:2b:84:2a:5e:2c:
         0c:95:68:7b:30:4f:f7:11:17:15:2a:f1:ce:bc:b8:e9:7f:84:
         47:9f:00:6c:2f:c4:91:d0:f5:59:e4:f1:a9:39:7c:be:64:59:
         46:58:55:6e:c9:46:03:c5:c5:02:bc:fc:d3:8e:5c:17:85:96:
         57:c7:c3:5d:bf:56:16:9f:1c:e9:1f:b2:20:f0:76:04:c5:dc:
         dc:f0:0c:b4:28:b7:7c:b7:f2:66:a0:ef:0d:9b:9a:4b:bc:c5:
         aa:1a:c7:83:a1:7b:8d:22:c5:b0:c7:5a:c1:33:99:21:46:41:
         3d:19:3a:8f:df:72:8b:f6:bc:79:27:06:80:ff:61:72:21:a9:
         a9:76:76:16:76:39:5f:8b:a0:8b:ce:71:74:17:47:fc:8d:51:
         24:af:34:2f:6d:21:74:bf:9e:a7:7b:da:7a:88:25:31:8b:74:
         d1:b4:da:d4:1e:56:9e:72:73:d3:2f:59:af:4f:c4:d6:e8:e1:
         5d:fd:89:1e:31:03:28:6c:f0:01:5a:f1:03:65:5c:cd:8b:ac:
         e6:35:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:26 2026 by rpki-client