This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File:                     bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier:          ZUXoqw8mdqrWyeCQl961F7EbgG5WYF5YlpxukCNkQSQ=
Subject key identifier:   9E:5A:6F:C6:FE:E2:24:3C:82:F9:E5:2D:37:70:F5:6D:48:AE:38:E6
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer:       /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial:       019C446BA8361C8B4FE546C7BB5C2EE5334D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number:          1587
Signing time:             Mon 09 Feb 2026 22:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:31 +0000
Files and hashes:         1: SNun1a2zT4vpVsj5URXeOY95E_k.roa (hash: s7UgHAFz2IiBfVzY5/DYD6jONt8Pg1fhCLkKP3Umvp4=)
                          2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: 7lEjirCFO6ObHRQNZ+8GoN9u19GNQ2beFZQ5rtfKYU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:a8:36:1c:8b:4f:e5:46:c7:bb:5c:2e:e5:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
        Validity
            Not Before: Feb  9 22:00:31 2026 GMT
            Not After : Feb 10 22:00:31 2026 GMT
        Subject: CN=9e5a6fc6fee2243c82f9e52d3770f56d48ae38e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:85:ce:01:e0:d2:9b:d2:56:72:92:af:fb:
                    a4:c9:ef:29:32:32:a0:e4:7f:f7:88:eb:49:e4:ae:
                    bc:36:e8:6b:e0:cb:80:33:f2:e4:52:6f:f4:fb:6a:
                    fc:c3:14:c1:70:80:fa:6c:cb:e6:15:84:78:66:0c:
                    06:36:61:20:a4:c3:c9:dc:8e:14:a9:e7:74:32:50:
                    71:7f:4a:3e:cc:ae:bf:6f:40:03:d9:74:60:40:03:
                    60:d8:fb:04:25:0c:26:ef:6e:6c:62:74:ad:c2:46:
                    20:f5:fa:71:2b:2c:e3:e9:da:ce:2d:c3:93:2c:e5:
                    c3:81:62:e4:88:b6:95:b9:9b:34:ec:ef:77:34:4a:
                    e0:69:10:e4:7d:99:ba:8d:d9:2d:a5:3f:e8:58:03:
                    6e:d3:83:40:f1:bc:6c:a2:88:fa:16:66:5b:33:67:
                    dc:00:e7:be:a4:69:dc:8a:a4:f3:a7:94:83:cd:42:
                    71:66:13:ed:74:b0:71:98:40:0b:29:0d:c3:99:74:
                    b6:4d:b1:99:f0:9b:fc:dc:43:dc:7e:85:a9:98:00:
                    33:e7:05:54:15:32:00:92:a9:d8:b0:14:ed:7b:2e:
                    a9:a5:ed:9b:d8:3e:2d:b0:40:13:3c:e2:19:69:a5:
                    88:ea:bf:e5:49:aa:78:8e:e9:de:63:3a:87:56:f4:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5A:6F:C6:FE:E2:24:3C:82:F9:E5:2D:37:70:F5:6D:48:AE:38:E6
            X509v3 Authority Key Identifier:
                keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:87:5c:ea:68:fd:c6:ef:da:82:84:eb:6b:b9:b1:aa:4e:
         08:1d:d5:99:fe:3b:41:fc:f6:ab:58:ff:65:3c:23:70:98:c2:
         30:76:2a:de:30:8a:a1:b9:81:89:b7:3e:0b:4e:5d:5d:59:cf:
         cd:67:56:f7:ab:be:5c:84:94:3a:ef:b8:ae:05:eb:2f:9f:3c:
         91:90:68:83:74:67:ec:01:e7:6d:69:da:31:2a:45:30:1a:9e:
         d9:22:c3:ce:f8:fd:fe:6d:45:52:3e:1f:e9:a5:f8:c3:4b:f0:
         a0:fc:5a:e5:92:5c:51:ae:36:4c:01:29:b1:5d:60:5c:4b:fe:
         55:98:ce:f7:1a:68:a7:0e:d9:b5:67:32:00:11:10:8a:bd:cc:
         36:c1:b0:d3:aa:47:fb:5c:f9:27:51:77:ef:67:15:12:00:7c:
         50:b3:ff:1c:05:20:b0:e9:1d:db:08:f6:d9:60:98:dc:66:3b:
         09:fd:00:22:c2:13:85:b1:e1:1c:19:d2:96:ec:95:dc:2d:20:
         0f:ae:68:95:2b:85:d1:18:0c:7a:f8:3c:e0:f0:d4:84:f1:c3:
         bb:e7:17:9b:5d:25:ef:38:ef:67:7c:65:53:ae:8e:53:8c:70:
         e2:88:48:09:b8:ff:d1:38:fc:39:22:39:7d:be:5d:f0:b6:77:
         ad:99:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:56 2026 by rpki-client