This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File:                     qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier:          xAqjpYUdslfhDzCz99JOOT/uo0kK31oawlpBt3Tk5EQ=
Subject key identifier:   DD:21:8C:6A:B6:80:F2:18:5F:20:3C:96:D5:42:2F:E4:80:57:71:4B
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer:       /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial:       019C44D9D3B88594D688201D6597DCCEC225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number:          17EA
Signing time:             Tue 10 Feb 2026 00:00:52 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:52 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:52 +0000
Files and hashes:         1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
                          2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: qpOsQafFXoK3UQA9txF/shQ3bTgOozfywreegdPhjO4=)
                          3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:d3:b8:85:94:d6:88:20:1d:65:97:dc:ce:c2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
        Validity
            Not Before: Feb 10 00:00:52 2026 GMT
            Not After : Feb 11 00:00:52 2026 GMT
        Subject: CN=dd218c6ab680f2185f203c96d5422fe48057714b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:c2:37:cf:10:cc:54:ff:ea:48:79:17:ae:
                    85:1c:69:7b:b0:a1:9b:24:08:32:46:d1:e4:b3:35:
                    c7:84:e5:05:dc:a9:38:f2:59:cd:6b:ca:9d:c6:14:
                    4f:ea:6b:c3:ff:9d:6f:d5:50:4f:dd:7e:a7:af:8c:
                    fa:85:87:55:77:7c:1f:78:b0:32:7c:8d:99:ec:a7:
                    a9:77:14:78:ee:a8:89:40:46:69:3f:bc:9d:e3:43:
                    16:87:bd:3f:bf:72:34:58:10:8c:03:c0:c5:a7:c2:
                    df:ea:65:ba:d9:b8:72:ed:18:f4:4d:ab:c2:2f:d5:
                    43:25:c8:15:f2:88:f8:26:e1:90:32:3e:19:f8:ef:
                    ac:76:2f:12:ee:c4:69:a8:a1:af:61:a6:77:4a:7d:
                    84:b1:14:fc:12:4a:24:e7:1f:2f:fa:df:49:ad:af:
                    b5:3f:39:aa:b7:00:ff:14:bd:09:74:fc:b0:88:40:
                    c8:97:dc:5b:92:d9:f5:39:88:8a:da:2e:f0:35:a8:
                    ae:2f:b4:98:3e:9a:4f:49:66:38:18:65:89:81:5f:
                    a5:e4:5d:f0:60:7c:81:ab:3f:49:e7:b7:c9:d9:e3:
                    e9:88:a6:34:90:6a:b5:0b:7f:7d:a2:69:7e:91:06:
                    b8:31:04:ce:10:bf:41:83:da:15:db:d0:b2:08:06:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:8C:6A:B6:80:F2:18:5F:20:3C:96:D5:42:2F:E4:80:57:71:4B
            X509v3 Authority Key Identifier:
                keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:53:ae:c5:32:8b:ea:50:10:c4:16:a7:e8:08:14:8a:ee:e6:
         19:27:f7:cd:36:ac:28:8d:ea:ba:33:40:6a:e3:f0:d6:45:6d:
         c6:b6:d8:ac:28:2b:03:a9:0d:91:2d:9a:24:b2:b0:82:d9:8c:
         d1:72:ee:08:8b:23:b4:ff:42:39:e1:8c:20:b3:07:29:d9:45:
         a0:84:4b:78:a6:df:71:a1:1e:53:51:10:aa:26:1d:af:d4:e6:
         e8:3e:38:ee:d7:62:92:99:2c:b4:d1:ad:d7:19:57:11:fd:4e:
         a9:ff:84:96:85:a9:47:41:5e:f2:24:2d:7f:c8:f7:09:e5:cd:
         ba:b5:75:9d:04:cd:34:86:93:67:bd:6e:b6:19:58:e3:62:f2:
         18:9b:20:cb:9e:fc:f9:df:82:e6:e1:3a:19:9c:91:4c:00:00:
         b0:d4:9e:4b:13:69:c4:33:de:15:a8:22:b9:d5:2f:67:a8:9c:
         a2:0a:25:00:e9:d4:78:8e:c6:ba:2a:55:a2:bb:e2:e6:da:5e:
         f6:cc:49:80:0f:5e:95:ac:f4:48:d6:4d:d4:68:f0:bf:eb:2b:
         6b:25:57:a9:6b:7f:3a:91:d6:85:2a:f9:54:28:33:4d:44:b7:
         43:94:2f:03:e8:c7:e4:e7:77:7f:8e:48:a9:b8:ad:aa:4c:ed:
         db:8b:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:52 2026 by rpki-client