This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File:                     qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier:          PRbvdTUJQmUFjHwL5IxGviLXmz0miEA6d5TQN234+f4=
Subject key identifier:   28:EF:56:10:6A:5E:35:70:7E:55:0F:EA:EB:AE:32:BD:12:EF:63:F7
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer:       /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial:       019C43223FB9906F9519239306E85EE1E5EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number:          12F3
Signing time:             Mon 09 Feb 2026 16:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:43 +0000
Files and hashes:         1: 4fAc0qvvbfrjXposwEaaDmGttew.roa (hash: dDNXjXONJp+B+9Oc1+EzvCaLe6IuW2IEvD1Mpunz+gA=)
                          2: b4o7k3ZfFNoPsl0uhtdCY4YGDJ0.roa (hash: FcUiatrGqQsxVpgGRcTbSSEMrQzJpNf+p+3PlDk628I=)
                          3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: f7LHt2B+PyARQZDS3Rkm8uabL/MoBmdfVPy8kqmYeg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:3f:b9:90:6f:95:19:23:93:06:e8:5e:e1:e5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
        Validity
            Not Before: Feb  9 16:00:43 2026 GMT
            Not After : Feb 10 16:00:43 2026 GMT
        Subject: CN=28ef56106a5e35707e550feaebae32bd12ef63f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:2a:4a:b0:97:26:bf:f5:68:3e:72:ce:e2:
                    08:d1:9f:a2:c6:00:a3:b4:1d:a8:54:c4:60:ba:7e:
                    73:05:b9:c0:55:43:79:b9:39:d5:a2:a1:b4:9e:22:
                    08:ff:75:70:a5:76:5c:90:b8:2c:be:06:61:fa:9e:
                    c1:18:8a:60:82:4b:ee:e4:0e:29:8e:df:05:5a:68:
                    04:cb:df:c4:8c:90:8f:cf:ab:dc:57:8d:e6:15:77:
                    f1:ff:3b:63:72:37:24:8d:61:4d:5e:29:41:12:89:
                    53:c6:8c:92:75:01:33:dc:e7:97:8c:c0:40:11:b6:
                    3e:6d:ad:8a:9e:2f:73:27:1d:d9:f1:7c:fc:a1:74:
                    04:bd:b3:d9:16:05:a6:3a:5b:ec:85:10:ca:a5:92:
                    3b:67:f7:c8:ae:fc:2d:46:3d:e2:c0:de:9c:5a:ef:
                    f0:03:fa:7d:21:75:32:7b:88:7a:cc:c8:44:6b:65:
                    56:85:fe:bc:c4:24:c8:ff:e7:d9:15:99:b6:f2:2f:
                    2b:38:49:6a:df:a0:6d:6a:55:5b:24:f9:7b:01:05:
                    2a:a5:31:4f:13:dd:ce:93:d3:4a:2c:7f:c2:39:79:
                    1e:f0:f1:67:90:1d:c3:6c:20:6a:26:d7:ac:f7:31:
                    17:16:b8:9d:af:96:3e:ce:b7:1e:23:4f:a5:4d:f4:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:56:10:6A:5E:35:70:7E:55:0F:EA:EB:AE:32:BD:12:EF:63:F7
            X509v3 Authority Key Identifier:
                keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:c7:79:be:ef:2d:79:ff:5f:a0:d3:f3:57:e6:1d:bf:f4:
         bf:84:33:b5:cb:67:ff:f4:0f:a2:d6:f7:83:ab:b8:77:93:66:
         d2:d5:ca:16:f8:3e:69:65:89:bc:cb:37:e0:bb:ea:63:21:62:
         ba:20:99:bc:bc:fb:f6:fc:90:90:12:06:ef:f0:ca:63:09:30:
         46:6a:98:d7:c3:fd:7c:f1:2c:3e:a4:58:5c:a8:61:e1:4f:bc:
         de:12:9b:56:28:e2:fb:dd:4b:90:e2:9a:19:67:3c:4a:06:b4:
         86:b4:2f:57:60:0f:28:05:97:1d:2c:4d:ef:4e:3b:e7:03:fe:
         39:ee:1f:94:8a:1b:f5:59:28:cd:3a:04:16:ad:2b:9c:4a:b9:
         6b:9e:1f:79:15:ea:0e:f6:40:96:7f:46:f7:6c:25:7b:a8:18:
         9e:70:34:dd:ce:eb:15:a3:df:c8:88:2e:a2:44:79:b8:61:11:
         d0:2c:15:f3:98:67:96:93:35:a9:a9:c5:63:15:00:4b:14:2a:
         e7:2e:71:8a:ff:4f:48:82:90:56:46:fc:49:5c:df:4c:2f:ed:
         c7:ed:81:e8:4f:93:81:b3:4e:ae:a1:a5:59:45:1b:6b:45:71:
         7e:2a:b0:07:b0:a9:78:b7:82:1d:70:02:93:c7:3e:00:fc:4d:
         d6:70:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:10 2026 by rpki-client