This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File:                     qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier:          dQd6OK4eLeK2KHXb6scvMc33PRjo2o8TI3Ms/vxrqFs=
Subject key identifier:   EF:CB:29:53:F9:58:97:C6:C1:E8:E4:88:10:ED:68:C3:95:68:D3:E7
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer:       /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial:       019C427DB5A239685ECD59C52F865A5ED8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number:          0D2D
Signing time:             Mon 09 Feb 2026 13:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:00 +0000
Files and hashes:         1: A-8nhpgeRouHY2UnNZP3Ty36Mq4.roa (hash: 0Z1tKMjOQH8GDFQdN2zkZ1XfpKKTrB+7t0AWIQlWOsU=)
                          2: nUmVeUkNC8_ViD_UA6x1PEPc9jI.roa (hash: SFQUWNNE8spFBp4DjpdKZ/dLlID0cBvRZXOgsiCgoVM=)
                          3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: ShPswC55RWn/b40aZ/VT6nQOvbSy5Um7k3NRsGC8ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b5:a2:39:68:5e:cd:59:c5:2f:86:5a:5e:d8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
        Validity
            Not Before: Feb  9 13:01:00 2026 GMT
            Not After : Feb 10 13:01:00 2026 GMT
        Subject: CN=efcb2953f95897c6c1e8e48810ed68c39568d3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:34:62:ee:27:78:20:3f:e2:ba:2a:19:8c:
                    ba:2d:be:c9:ab:6f:d7:78:09:d8:97:f3:1f:ea:b5:
                    cf:24:f3:fe:41:0c:9c:d4:67:30:42:96:27:37:22:
                    4c:c1:c5:17:40:04:0c:66:1e:df:6b:a0:72:53:bc:
                    01:2e:90:68:22:28:b4:83:71:6a:e7:d8:65:9c:76:
                    25:8c:5a:80:ad:d3:07:ef:30:3b:a1:f5:4d:1e:5c:
                    41:f1:b8:bf:97:b7:38:16:6e:43:01:ab:92:69:c5:
                    b2:78:95:72:00:6c:4b:9a:2b:da:28:ef:13:9b:81:
                    21:9e:aa:60:4f:fa:2f:b6:a5:85:17:87:d7:2a:c6:
                    d3:0c:50:64:e8:0d:44:4f:02:b9:44:ec:eb:88:b0:
                    28:4b:1a:dc:a7:da:00:25:e6:39:b6:90:9d:70:4f:
                    22:40:39:36:3c:ed:7e:48:c4:81:9a:4a:c1:1b:0a:
                    1a:f9:e9:7e:11:48:5e:2c:1e:02:d6:40:62:28:ac:
                    09:4e:a0:ea:f4:5e:e4:c0:b0:86:9c:63:bb:f2:ea:
                    60:bf:33:91:d4:d6:cc:56:61:59:60:65:60:8e:0d:
                    c4:79:f1:86:80:a7:15:87:79:a7:df:47:eb:c1:d7:
                    92:ba:3c:cb:42:99:54:90:97:8b:54:d5:55:1a:ac:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:29:53:F9:58:97:C6:C1:E8:E4:88:10:ED:68:C3:95:68:D3:E7
            X509v3 Authority Key Identifier:
                keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:ef:49:98:8a:9e:3f:2e:73:66:a4:29:8d:15:1c:0a:f3:9a:
         ba:c2:8b:7d:c6:11:7f:5a:62:44:93:6c:40:95:0d:ba:60:46:
         b7:b1:e2:b1:0f:90:91:71:db:74:87:b0:8f:7a:e0:6c:7b:44:
         2d:1f:f8:8a:90:c7:32:2e:0d:64:7c:1b:cb:8b:6c:11:2c:37:
         8f:2a:93:23:83:dd:fd:60:88:59:2e:03:e0:6a:33:f1:cf:ea:
         84:1e:44:10:c5:21:91:49:a2:38:e4:51:65:0a:07:d3:66:47:
         ff:b3:88:38:dd:4b:b5:c8:74:a0:41:0e:3b:c4:45:ce:d9:af:
         a1:8c:c3:62:67:3d:7b:11:f7:7f:07:96:03:b8:4c:02:98:a9:
         e9:e9:d6:cc:d2:d9:1f:83:b7:0e:01:6e:32:c1:c9:9c:44:46:
         1f:98:bf:34:7a:82:ff:17:64:af:94:4b:2b:64:a4:fc:b5:a9:
         71:8c:ae:6f:d1:65:b8:e4:be:e3:b1:ae:9e:bb:ba:f0:0d:1f:
         13:21:6d:50:47:87:09:ee:6b:7d:48:08:3a:cd:10:8d:85:21:
         a7:9f:48:c5:ef:7e:b2:0f:4f:63:bb:a7:57:14:5f:34:fd:5a:
         4d:75:87:c2:7b:62:a6:6d:e9:1a:4a:98:4b:b6:89:ef:17:38:
         2c:b8:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:19 2026 by rpki-client