This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File:                     QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier:          xX4yghUXOks5+2gY61J9mKhBVvSCoX3O0TnHPzd0cIc=
Subject key identifier:   EF:2C:02:71:42:A9:D0:39:AE:EB:33:28:93:48:08:16:E2:E7:36:E8
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer:       /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial:       019C43FE824FCA9FC5BD855546DCDF281CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 20:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:18 +0000
Files and hashes:         1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: SU/fqs+HKzItzihs6Uw5hetz6lZSMg5cPfYSpLHobjU=)
                          2: q1-RUpRuUBWbVUTXhumFkZMtJE0.roa (hash: 3qe5W+9kAiScEd0vW+cxVBghgrjhqeOcbbAjhxWvcx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:82:4f:ca:9f:c5:bd:85:55:46:dc:df:28:1c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
        Validity
            Not Before: Feb  9 20:01:18 2026 GMT
            Not After : Feb 10 20:01:18 2026 GMT
        Subject: CN=ef2c027142a9d039aeeb332893480816e2e736e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:59:b7:2b:4f:07:09:7f:e7:21:70:c6:62:
                    58:6d:ec:21:12:17:b7:2c:e9:a4:d8:25:11:35:64:
                    bf:56:62:9c:d1:4d:50:b0:23:84:78:71:dc:60:35:
                    f2:bd:3d:6e:6e:3c:98:68:d7:e0:cb:a6:0c:d3:a2:
                    b8:13:ed:6f:53:8a:12:5b:51:26:3a:94:9b:b4:c0:
                    50:4e:e8:0f:b4:e6:61:dc:33:10:45:c2:99:66:fd:
                    1a:ed:6f:62:1a:f5:b0:03:b2:36:44:7d:d2:5c:20:
                    4f:70:38:14:8e:a4:84:ad:9e:9f:be:e9:ee:5d:43:
                    2a:1f:a4:7b:1b:48:69:12:ee:aa:87:e1:30:36:2c:
                    86:d0:0b:f7:43:fc:6d:a4:1f:69:08:d5:62:83:20:
                    bf:0e:be:ed:9f:29:76:d9:9f:28:00:fe:73:67:d8:
                    a6:34:49:4f:22:68:bd:cd:3d:53:ef:06:64:06:87:
                    96:17:f3:76:a7:43:a0:99:6c:c0:3f:2c:a2:ed:22:
                    d5:d9:1d:01:39:8e:7c:f1:e5:31:12:e0:50:a3:48:
                    06:b2:eb:d6:26:f3:1b:9f:cf:b4:10:75:9f:71:52:
                    8f:d5:29:a8:77:a1:32:a7:c9:1f:39:05:19:49:e4:
                    89:b8:4d:0e:b4:30:0e:c5:21:cd:a1:65:b9:36:56:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2C:02:71:42:A9:D0:39:AE:EB:33:28:93:48:08:16:E2:E7:36:E8
            X509v3 Authority Key Identifier:
                keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:9e:84:8d:2e:f8:10:d8:5c:ac:7f:8e:a0:43:ed:db:b8:
         e5:42:88:4f:89:49:90:b4:bd:15:d6:a4:a0:16:39:fa:f2:61:
         96:d3:be:3d:7f:fe:ce:a3:d8:95:3b:be:b2:ee:c3:54:cc:55:
         4c:4c:fb:b9:6d:35:88:b5:5a:b8:3a:c2:6c:e8:f1:54:a6:44:
         c3:75:07:dc:90:d1:17:59:60:65:fa:fa:26:98:2d:74:6d:2b:
         d2:c1:6b:57:48:22:25:68:72:86:68:c4:67:ce:0a:7e:34:ac:
         73:8a:9a:a5:06:b6:32:e5:30:bc:14:65:b8:b9:c3:e9:77:3f:
         f1:bf:f1:83:0d:29:62:19:99:45:94:9a:61:d9:90:c3:39:3b:
         cc:b7:12:42:43:e8:c8:48:df:64:72:a1:74:ad:34:f0:27:c6:
         d4:18:4d:1c:fa:71:e9:6c:e2:89:29:d3:6d:9f:d6:b6:78:14:
         7f:d7:22:82:40:7b:be:b9:cd:95:1a:e6:b0:c6:85:df:c4:46:
         fa:0d:27:be:e4:21:51:dd:25:37:1e:15:68:b2:69:59:45:7c:
         83:85:7d:c8:8b:32:ab:35:d8:a5:63:e6:9f:a2:50:ec:48:93:
         5a:71:52:9e:d4:77:35:8d:24:2f:f5:ff:9e:9c:83:f5:ab:11:
         79:41:28:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/oJPyp/FvYVVRtzfKBzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi
Y2Q2OWEwHhcNMjYwMjA5MjAwMTE4WhcNMjYwMjEwMjAwMTE4WjAzMTEwLwYDVQQD
EyhlZjJjMDI3MTQyYTlkMDM5YWVlYjMzMjg5MzQ4MDgxNmUyZTczNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AJZtytPBwl/5yFwxmJYbewhEhe3
LOmk2CURNWS/VmKc0U1QsCOEeHHcYDXyvT1ubjyYaNfgy6YM06K4E+1vU4oSW1Em
OpSbtMBQTugPtOZh3DMQRcKZZv0a7W9iGvWwA7I2RH3SXCBPcDgUjqSErZ6fvunu
XUMqH6R7G0hpEu6qh+EwNiyG0Av3Q/xtpB9pCNVigyC/Dr7tnyl22Z8oAP5zZ9im
NElPImi9zT1T7wZkBoeWF/N2p0OgmWzAPyyi7SLV2R0BOY588eUxEuBQo0gGsuvW
JvMbn8+0EHWfcVKP1Smod6Eyp8kfOQUZSeSJuE0OtDAOxSHNoWW5NlYCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8sAnFCqdA5ruszKJNICBbi5zboMB8GA1UdIwQY
MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt
MWMyMmRhNDRhMjJkLzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk
LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVWehI0u
+BDYXKx/jqBD7du45UKIT4lJkLS9FdakoBY5+vJhltO+PX/+zqPYlTu+su7DVMxV
TEz7uW01iLVauDrCbOjxVKZEw3UH3JDRF1lgZfr6JpgtdG0r0sFrV0giJWhyhmjE
Z84KfjSsc4qapQa2MuUwvBRluLnD6Xc/8b/xgw0pYhmZRZSaYdmQwzk7zLcSQkPo
yEjfZHKhdK008CfG1BhNHPpx6WziiSnTbZ/WtngUf9cigkB7vrnNlRrmsMaF38RG
+g0nvuQhUd0lNx4VaLJpWUV8g4V9yIsyqzXYpWPmn6JQ7EiTWnFSntR3NY0kL/X/
npyD9asReUEogQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:54 2026 by rpki-client