This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File:                     QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier:          AAb4Mxyrpqoxgf2Wm0Dp8Tj/reSk/LP6LBtrSFyQusU=
Subject key identifier:   6B:4A:FD:86:BD:E0:55:22:06:2E:F5:12:00:AF:56:E6:66:CC:53:E1
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer:       /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial:       019C42EAF8D55C4A9EA4FBDDF63BFF5567AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number:          04FA
Signing time:             Mon 09 Feb 2026 15:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:21 +0000
Files and hashes:         1: BIcN5aoAOl1KvHqrpwSgfpe3bKQ.roa (hash: lnNlQg8amQO6kFSvzSOC3nKLC4UQiHYnnxg5VQ58z58=)
                          2: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: Eu7nCrgqgYmgXhDGdFX6Lh4y3B7fg7NvecOaRWFAeS0=)
                          3: mFfXpLKFugPnpjv01dOdi4FA4Gw.roa (hash: 3g2SXGJpuzV1vU10pMqGPocyoDuCUv6hUHSIZHwoqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f8:d5:5c:4a:9e:a4:fb:dd:f6:3b:ff:55:67:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
        Validity
            Not Before: Feb  9 15:00:21 2026 GMT
            Not After : Feb 10 15:00:21 2026 GMT
        Subject: CN=6b4afd86bde05522062ef51200af56e666cc53e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:93:12:9c:59:2b:b0:64:89:ce:10:35:6f:
                    d8:79:9a:a6:a0:83:61:05:4e:9a:fd:5c:d3:04:7d:
                    e5:d9:9b:b7:bd:77:a9:28:7b:4c:64:61:67:49:83:
                    59:f7:08:51:6c:dd:c6:03:57:ea:32:15:dd:88:ba:
                    73:ba:e0:7a:ab:e3:42:26:6b:0f:20:32:59:7d:7f:
                    98:54:56:d6:ad:c1:e5:f0:bf:b3:e0:80:6f:90:c9:
                    89:f9:47:07:14:6f:78:79:52:ec:83:42:f5:aa:e7:
                    da:7b:9f:55:a8:5c:5b:5c:53:8a:8e:27:da:6e:7c:
                    d1:a3:60:2f:72:f6:82:7e:5f:30:40:61:c5:60:57:
                    bf:05:66:de:c1:d7:b5:a1:c6:d6:ee:f8:4a:85:45:
                    4e:02:41:20:9d:83:12:c3:dc:52:f2:b5:46:f0:b7:
                    18:ba:68:dd:26:33:c8:5a:78:d0:d3:d8:62:1b:f5:
                    09:1b:ce:96:e9:55:50:3c:5a:9a:db:30:b3:15:6f:
                    71:af:5c:77:16:ca:1f:fe:81:06:e2:1c:c1:b5:c4:
                    6d:94:fc:ee:1c:1f:63:61:20:30:9c:b9:f0:8d:65:
                    6a:0c:f3:fc:fd:87:be:d9:ef:e7:3c:54:b0:d3:ed:
                    7f:a9:9f:50:f5:58:b8:3e:64:ba:85:ab:53:d1:af:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4A:FD:86:BD:E0:55:22:06:2E:F5:12:00:AF:56:E6:66:CC:53:E1
            X509v3 Authority Key Identifier:
                keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:59:1e:38:24:d4:0c:d0:df:ff:3d:a8:57:1b:c0:cf:5c:
         36:01:7a:da:5b:24:fd:93:a1:78:01:6d:0c:99:bf:12:3e:a1:
         9e:c8:a5:73:25:1e:04:03:c8:08:b7:85:e8:27:bb:00:36:b3:
         19:62:c2:fe:ed:05:de:9c:91:0f:f4:2b:1c:fa:fd:1c:c0:16:
         81:a7:4b:2b:38:7d:b6:d9:94:d0:1a:8e:d7:96:da:19:5c:0c:
         4d:86:e3:7f:39:20:bf:5a:60:47:13:31:25:b1:be:fe:1a:a4:
         a7:b1:fa:eb:da:59:83:92:f8:77:56:1d:82:25:96:9e:1a:19:
         f0:b7:eb:27:df:3c:15:85:97:cd:89:bc:ba:c4:53:ce:63:28:
         28:c4:83:df:97:79:d2:b1:9e:ec:6a:f1:52:f1:d5:ab:d9:c5:
         ab:58:d6:ee:40:66:4f:e0:33:23:fb:a3:87:41:d2:d9:0e:64:
         d9:c6:ac:e0:76:4d:8a:3d:f5:cb:01:6a:8e:cd:f2:24:91:6c:
         3d:be:20:00:7a:91:07:29:0a:53:70:ad:48:c4:41:bf:45:6c:
         a6:fd:c7:8b:07:f2:7f:14:5b:8a:30:ac:dd:e9:f5:6b:64:1b:
         97:9c:40:2d:f1:a2:76:f1:c5:1c:e1:3e:f5:a9:b5:2e:bb:b1:
         24:17:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:40 2026 by rpki-client