This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File:                     QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier:          TEwTS7i/ub35sAveHuJziRwvlQog7t9uPftDQ2n8j7M=
Subject key identifier:   D2:CE:89:EE:5D:D7:14:13:C0:23:3F:0B:77:DE:A1:37:12:D0:72:09
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer:       /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial:       019C4358F9881669CA35DCECCA7DD7A2BF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number:          14BD
Signing time:             Mon 09 Feb 2026 17:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:30 +0000
Files and hashes:         1: 3PqCBsnwrek6Q6n5klUn2vxcEVE.roa (hash: SqGyC3AtR5IMiR3v88dUPZnBKw3fI3oEx2k+/NhUD6Y=)
                          2: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: VeM7btZzJUuNrYcdjhvg596xK+aCay4dOkvxiEAcoRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f9:88:16:69:ca:35:dc:ec:ca:7d:d7:a2:bf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
        Validity
            Not Before: Feb  9 17:00:30 2026 GMT
            Not After : Feb 10 17:00:30 2026 GMT
        Subject: CN=d2ce89ee5dd71413c0233f0b77dea13712d07209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:71:e1:92:88:66:50:c1:15:a7:25:19:71:
                    a9:9b:12:bf:fe:bf:e1:30:25:33:5d:8e:38:e8:40:
                    a4:38:b8:ec:30:10:94:3f:7f:47:6c:b6:af:d1:b1:
                    e8:24:99:a3:56:ef:f8:a5:62:42:6c:68:f4:19:1a:
                    95:32:e1:3b:46:01:07:87:1c:ab:be:d0:14:97:5e:
                    f7:d7:29:ad:33:85:c1:4f:21:dd:3e:3d:a9:c7:58:
                    76:83:98:8a:f0:80:e3:ed:47:38:77:e9:2f:20:ea:
                    bd:c9:b5:aa:98:02:b8:b3:ac:ff:c8:24:e5:28:89:
                    ee:89:5e:87:8d:b4:98:23:bd:2c:74:55:73:b5:af:
                    41:53:90:35:0f:77:98:53:a3:c6:76:8c:90:df:ef:
                    cc:b1:db:e9:2e:a1:82:20:72:91:26:9d:db:9b:5c:
                    1c:dd:65:ed:b6:9a:e3:df:41:2c:17:55:2f:3c:2f:
                    29:fd:84:6d:20:f5:13:86:a6:2c:00:1e:49:94:83:
                    c4:e8:5a:d5:3b:69:1f:37:82:c4:cb:33:1d:ae:ad:
                    37:ba:d9:62:56:92:2d:7b:e5:70:d9:99:ff:bc:9e:
                    af:c1:87:ac:d7:16:8d:74:d5:3d:52:98:95:a2:e7:
                    59:39:af:a4:29:f6:7c:06:ab:ca:da:e6:5a:9d:79:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CE:89:EE:5D:D7:14:13:C0:23:3F:0B:77:DE:A1:37:12:D0:72:09
            X509v3 Authority Key Identifier:
                keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:81:92:9b:ab:c4:fc:f7:ab:f5:3a:46:2b:0b:a2:c5:f9:8d:
         5f:f6:3e:bc:70:67:5f:a7:91:7e:56:0f:f4:bf:46:7c:c1:14:
         68:5c:c0:42:a4:67:52:04:69:ae:35:bc:b4:e5:2a:84:d4:ee:
         e2:2a:db:3b:4c:7b:62:9e:68:05:90:a8:8a:7e:b6:46:ad:f1:
         83:0d:f8:a7:38:4d:63:db:81:de:44:02:b6:48:fc:24:e6:9c:
         66:0a:29:29:02:c6:f2:48:c4:ce:55:f5:b1:f7:73:f2:81:9b:
         0b:57:5a:21:ab:52:8b:de:48:0f:02:30:c0:09:b5:68:09:54:
         7b:35:6a:e6:af:60:08:d7:da:63:5e:e9:47:5f:7e:2f:8a:12:
         06:ca:c1:ef:77:d2:44:a2:05:d6:70:e1:9b:59:6c:a2:cc:fd:
         60:7c:ad:db:d4:46:8c:ba:79:bd:1a:a3:8f:2d:c9:0c:5f:ab:
         35:df:c2:bf:e5:f1:ed:58:9d:aa:6a:39:a8:68:3b:40:1b:f1:
         ff:d0:45:c3:80:53:c9:d0:73:95:3e:23:3b:93:60:e5:de:69:
         0a:17:2d:06:aa:3a:e2:29:a3:9a:03:35:61:34:64:3c:77:56:
         d2:fc:a1:f4:0f:45:f0:0c:46:ab:e8:e0:4c:76:27:ca:24:15:
         f8:6b:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:49 2026 by rpki-client