This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File:                     alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier:          jR+CJDSyqS9MIIlE/IWnZsojQaEEu9Vjbf5hTU9Hdlk=
Subject key identifier:   49:9F:33:18:45:69:EF:5A:AA:02:C1:0F:17:C5:C2:4A:91:CA:CB:AF
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer:       /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial:       019C439019F2069010B5A4AA03B49B8AF26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number:          0504
Signing time:             Mon 09 Feb 2026 18:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:43 +0000
Files and hashes:         1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: eDX/Ar99M1Q3/aeZwW+oRQsfMDVS8NBF8A08b57ZJxY=)
                          2: qW9AF__zUvkNDM1hwnTXNbw4MmE.roa (hash: L8YbidEFG/0Uh1hABI0PUB51vRjUgh6q12O5a/Ue0jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:19:f2:06:90:10:b5:a4:aa:03:b4:9b:8a:f2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
        Validity
            Not Before: Feb  9 18:00:43 2026 GMT
            Not After : Feb 10 18:00:43 2026 GMT
        Subject: CN=499f33184569ef5aaa02c10f17c5c24a91cacbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b8:bb:a5:74:cc:c1:1c:bd:ed:d2:4d:79:94:
                    02:d6:5e:d0:8b:6f:da:35:31:93:a8:ca:cd:7d:a6:
                    1e:c2:d8:02:72:40:7c:ce:9b:19:9f:6d:d0:fa:a4:
                    e3:bb:80:52:2a:79:28:f5:05:aa:99:b3:cd:ba:72:
                    67:e0:dd:f0:d7:9e:26:d8:a8:4f:19:45:08:d1:c9:
                    8b:f9:8a:7e:db:95:eb:f5:bd:d5:fe:a4:12:f0:2b:
                    9d:81:3b:62:ab:b5:0d:45:90:14:1b:58:32:88:cf:
                    a8:47:71:f8:a0:18:26:b3:bb:9c:d7:f8:ab:32:e2:
                    db:9c:69:e1:78:80:99:61:5d:f5:28:45:26:6f:0e:
                    16:96:b5:85:02:b5:54:a8:90:f4:8b:54:32:f2:eb:
                    28:f6:c0:c7:9e:3e:06:11:1c:b1:7c:97:1e:e7:67:
                    3d:34:d1:68:d4:66:e0:80:68:60:83:98:14:82:a2:
                    78:19:b9:e1:7c:e7:d4:78:83:95:79:00:6f:db:55:
                    7e:3d:c2:14:75:7b:ad:ed:66:ee:97:41:9c:e9:6f:
                    b9:0a:c9:0d:df:dd:08:2d:ba:ea:81:a7:0d:42:81:
                    1c:ea:41:70:08:e9:76:8f:71:ec:ce:e0:f3:aa:41:
                    83:70:9e:cb:f2:5d:5b:22:18:75:9d:14:e5:ce:cd:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:33:18:45:69:EF:5A:AA:02:C1:0F:17:C5:C2:4A:91:CA:CB:AF
            X509v3 Authority Key Identifier:
                keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:7a:a9:a9:7c:bd:da:1c:40:fe:30:30:20:a4:25:96:45:
         68:b7:52:c9:a4:5f:e9:e3:10:40:90:0f:79:a0:4e:19:1b:08:
         a5:f9:c6:ef:a7:6d:74:71:be:2b:fa:3f:cd:db:7a:07:a2:56:
         61:58:56:b5:47:ba:de:fd:ac:62:93:68:3c:03:9c:af:d8:7b:
         30:12:1f:ba:bd:67:a2:16:72:7d:58:c2:01:7a:b6:1c:e6:b8:
         6d:42:f8:00:68:5d:98:27:57:cd:ce:d1:52:ec:2c:a0:da:88:
         37:fa:46:80:ed:24:00:c3:dd:84:fe:20:46:61:57:52:9f:20:
         f3:0e:df:4f:ac:9e:a4:ec:d7:13:97:48:d6:20:86:de:0c:6e:
         3f:fc:cd:87:8a:5a:e2:79:90:89:20:39:c2:37:0e:69:bd:54:
         f3:c0:e5:3f:cd:a7:a5:d0:44:c1:1c:f7:a1:25:bf:0d:cd:15:
         51:85:27:af:a4:14:7d:ad:6d:94:99:3a:62:4c:2b:3e:a0:49:
         b8:83:eb:a9:45:ac:53:ee:31:71:72:bc:66:39:62:f6:8a:62:
         0b:22:81:53:25:29:60:44:70:20:7d:51:ee:3b:e7:c1:2b:2c:
         c1:5c:ea:26:a2:83:83:6b:46:7f:e8:48:5e:2c:49:7f:66:c8:
         2b:e1:11:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:52 2026 by rpki-client