This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File:                     qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier:          ui5/LWfGvp+8aRaeiBn9evfjfGkC5jZOn/fX32RARo4=
Subject key identifier:   2B:F0:CD:20:90:FA:D4:84:E6:D6:9A:2E:F9:4E:4C:CA:5F:06:87:EA
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer:       /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial:       019C42EBA20CDEA20ACA811595DF7758978C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number:          03FD
Signing time:             Mon 09 Feb 2026 15:01:04 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:04 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:04 +0000
Files and hashes:         1: BXXFULcigDb5p-TWyxWoIQ6jZxg.roa (hash: +TJHe9rjVEZ47iPSt4ggCrDY9EnLTa/nFFdzzuzo8HA=)
                          2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: cjQWbMucBlmLANmQ0UxZtqr2lW4B/FEPNwUpN3nZa7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:a2:0c:de:a2:0a:ca:81:15:95:df:77:58:97:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
        Validity
            Not Before: Feb  9 15:01:04 2026 GMT
            Not After : Feb 10 15:01:04 2026 GMT
        Subject: CN=2bf0cd2090fad484e6d69a2ef94e4cca5f0687ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:3b:12:40:60:18:1b:87:d7:33:26:47:7e:
                    6e:14:4f:d8:2d:1a:02:5b:ab:e7:6e:c6:43:b4:ad:
                    db:60:77:bf:59:2f:54:27:76:27:34:c1:b5:e1:37:
                    8e:e0:05:fc:15:53:46:67:98:14:03:74:4e:df:f0:
                    c6:23:6c:78:65:32:0f:6a:38:0c:b9:92:31:33:13:
                    4a:64:02:e1:1f:fa:23:2b:b6:71:81:df:12:44:84:
                    a8:a3:a2:8c:61:71:c4:ca:bc:69:a7:16:36:54:4a:
                    ae:31:e6:b5:da:80:43:d5:2b:22:59:f4:2f:98:71:
                    68:a7:40:81:ba:fa:c2:a3:93:a7:58:34:09:a8:49:
                    73:e5:3a:28:85:2f:18:f3:09:fe:f9:81:fa:09:13:
                    99:05:1c:49:de:97:e2:28:9f:f9:cf:cc:7e:98:71:
                    6f:f2:97:82:89:16:db:d0:a3:f9:5d:de:e7:65:ea:
                    b0:2a:c3:7c:71:ca:dc:0b:a0:3f:f2:ca:2f:cb:3b:
                    50:4f:cd:7b:73:bc:66:e6:78:07:20:81:36:6a:10:
                    64:94:dd:d2:2b:43:bf:ee:d1:4f:c2:80:ed:16:03:
                    af:5f:fe:0f:ee:d4:b5:ee:4c:f7:ff:0c:02:8e:64:
                    85:7a:09:5e:84:07:f0:37:7f:02:9e:a7:35:44:35:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:CD:20:90:FA:D4:84:E6:D6:9A:2E:F9:4E:4C:CA:5F:06:87:EA
            X509v3 Authority Key Identifier:
                keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4c:5e:7d:6f:7b:e5:41:4b:fc:35:4f:99:de:27:58:b1:d7:
         bb:7d:90:0d:a3:22:eb:05:e8:02:2f:f3:16:1f:6c:75:c9:5e:
         95:81:23:26:fd:41:f9:23:94:98:a9:3a:4e:64:5f:c2:a4:c0:
         a9:50:47:6a:66:9c:d5:4c:7a:9f:f7:b2:a1:1b:2b:7c:87:62:
         ba:fa:98:eb:66:c1:58:3d:b0:19:e7:af:30:33:fb:18:00:14:
         e1:7d:8c:3d:3f:d5:7a:30:4b:d6:1c:26:08:da:d1:e5:9e:c4:
         f5:ae:d0:7a:09:7a:f1:fe:85:39:ea:cf:06:76:70:1a:38:15:
         3f:0c:64:12:43:5b:0e:8f:cf:25:5f:27:63:2b:1a:89:95:dd:
         6b:d0:5c:63:4c:f5:8c:38:f3:34:88:5e:73:de:77:11:ba:59:
         c9:07:9f:d5:3c:d3:bd:db:89:28:c5:2f:ff:82:58:e1:d3:df:
         30:da:71:00:02:dd:dc:aa:be:a1:06:0a:9c:33:8b:5f:26:cd:
         b3:cc:3d:ee:b4:ad:e6:71:96:f1:e5:a8:24:c9:79:4b:83:44:
         70:d7:67:d9:2e:e6:5e:41:1f:48:61:6b:80:35:67:e6:e6:82:
         42:75:d1:14:43:7d:b4:0d:ed:65:17:d9:8c:ce:4f:df:9e:82:
         cb:41:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:59 2026 by rpki-client