This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          41HLDLLY+MRAZxaHC1e6JwCTHrzl3IIx4ejVcSlq2OE=
Subject key identifier:   08:77:26:E3:B9:DA:41:BF:9E:D0:5C:0C:A8:75:EB:12:92:46:F8:20
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019C41D8371FF29AE2DEB444D30BDCA6CF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          1777
Signing time:             Mon 09 Feb 2026 10:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:14 +0000
Files and hashes:         1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
                          2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
                          3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: zSs4u55XZ2YaWJTezikZG25JnzfSMqU99U4VbfQpW34=)
                          4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:37:1f:f2:9a:e2:de:b4:44:d3:0b:dc:a6:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Feb  9 10:00:14 2026 GMT
            Not After : Feb 10 10:00:14 2026 GMT
        Subject: CN=087726e3b9da41bf9ed05c0ca875eb129246f820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:a5:d8:60:b4:6b:20:9a:24:ed:b9:b7:ba:
                    4b:4b:4a:3a:72:69:80:bb:cc:da:aa:b0:34:cc:4b:
                    27:a4:07:fc:4a:2b:8a:fa:3a:9c:34:bb:af:5b:0b:
                    26:7e:f4:55:65:32:16:46:76:ba:5e:c7:3a:60:70:
                    37:0b:5b:dd:d7:5e:03:0c:53:99:6e:f9:23:d5:8e:
                    14:05:80:9e:4d:17:96:9e:57:91:e3:8d:44:a1:8a:
                    7f:6c:e8:bf:4c:43:b4:9f:e0:89:31:99:27:5e:0e:
                    9e:4f:45:1c:f6:ab:1d:5c:f4:e7:14:42:8e:eb:61:
                    5f:f3:f2:a2:56:51:66:c1:9e:b7:7d:34:51:7a:5b:
                    1f:6d:6c:40:63:63:f9:75:8f:ed:10:f7:bc:95:4c:
                    83:19:73:f2:de:4c:f8:2d:9b:0b:54:df:89:08:12:
                    96:f9:18:8e:17:34:12:d1:47:0b:b8:24:27:1e:c4:
                    8d:53:8d:e3:de:1a:22:89:95:71:0d:f7:e4:98:21:
                    dc:e9:47:8d:1f:87:3d:e6:4f:d1:59:ad:a0:c1:49:
                    9f:f0:ff:bf:56:62:78:78:40:ba:ac:14:fe:51:83:
                    93:aa:75:10:57:16:42:11:09:b5:ee:1b:a9:30:b4:
                    ef:2b:ac:92:ad:75:85:e1:37:9b:4d:5b:c3:a9:41:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:77:26:E3:B9:DA:41:BF:9E:D0:5C:0C:A8:75:EB:12:92:46:F8:20
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:09:61:71:90:cd:12:46:a3:16:7b:ae:79:1e:51:8b:c3:56:
         c8:eb:ad:75:c2:db:45:f9:4a:c9:46:51:7a:7a:38:d6:b1:a2:
         11:19:2a:75:8c:98:f9:ae:13:70:c3:17:1b:ff:f4:07:1b:22:
         41:4f:bc:7e:dd:80:6c:a0:b1:7e:0d:22:1c:f2:23:f7:6f:e4:
         57:a9:3e:8a:3b:47:d4:bf:89:0c:8f:60:05:ed:2f:72:97:42:
         f9:4e:ea:2f:ed:d9:e0:13:b4:78:7c:bc:69:d9:7a:72:cb:2a:
         1e:86:77:b8:e1:24:8c:32:f5:06:66:b7:eb:78:c3:2e:79:1c:
         84:7a:e6:c5:0f:76:ff:a4:62:b8:e8:ed:8f:f9:6a:a4:ba:3b:
         de:1b:5d:a2:61:bf:0c:0e:67:ce:a0:c1:ad:00:4d:79:38:d6:
         d6:26:19:fb:cf:10:dc:48:ee:b6:03:cb:57:e3:fa:b3:d0:41:
         31:e1:2d:64:cd:23:54:3f:25:15:4f:19:25:85:89:98:7d:a4:
         2c:b1:d1:6c:ea:5b:17:87:0f:6c:80:fd:06:74:66:44:6e:f1:
         70:f9:72:42:e2:d8:b7:34:73:ba:bd:97:e6:6f:cb:93:6e:2c:
         6a:4a:90:32:f2:02:5a:f4:a6:94:e9:92:e8:38:5e:67:ad:5b:
         05:d3:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:48 2026 by rpki-client