This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File:                     QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier:          bz5JYTCRq/bXSOrd6OSJ/W1nTEv/yRGd8boYLvAJ6Ps=
Subject key identifier:   DE:33:BA:AE:D1:B1:33:95:C2:C5:1C:ED:D1:D9:CF:05:DA:6A:52:A7
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer:       /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial:       019C432210810BBDE4236508EC247225004F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 16:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:31 +0000
Files and hashes:         1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: GO8X46LM/eIYYYXxAvU9UAG77NPE6B3A6x3eEggwna0=)
                          2: V4BV10qPY6b-JooJZeWPBE6lJrE.roa (hash: 38wboqA2Afge4PlNQaN9faMSSzNBTQwT1DwZQqM/Oco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:10:81:0b:bd:e4:23:65:08:ec:24:72:25:00:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
        Validity
            Not Before: Feb  9 16:00:31 2026 GMT
            Not After : Feb 10 16:00:31 2026 GMT
        Subject: CN=de33baaed1b13395c2c51cedd1d9cf05da6a52a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:84:b0:56:63:dc:48:a5:73:98:f0:b1:f3:
                    41:db:73:a9:ff:ac:f1:56:fc:84:ff:99:97:97:50:
                    c7:77:3a:ec:f3:7f:aa:5d:6e:34:d2:cb:6a:d0:ba:
                    6f:52:ea:63:9e:51:ab:4c:3e:a5:13:b7:f1:0c:3c:
                    a8:92:dc:97:50:5d:a6:2c:58:42:a3:bb:b2:86:92:
                    45:c9:e8:81:b2:7e:c4:28:94:68:92:51:d6:16:1f:
                    a6:0e:13:49:7c:8f:a3:85:2a:9d:19:34:44:b8:5e:
                    7d:2c:a1:a8:69:78:1c:25:7e:24:6c:bf:12:b1:c3:
                    27:27:a1:de:28:ba:72:b3:ec:e9:64:af:65:33:00:
                    f8:5a:5e:a0:80:91:5d:c5:38:e9:2c:14:f4:33:bb:
                    2f:51:4b:72:cf:d1:8f:df:83:b5:97:55:5a:1e:e7:
                    b0:7d:4d:03:65:e0:c7:6c:69:76:42:30:6e:6d:4c:
                    fa:cd:45:a9:93:9e:4c:d3:09:97:25:62:93:90:4d:
                    67:7b:f5:86:4a:fe:51:09:22:47:13:e8:a6:24:09:
                    0a:d0:e8:11:25:30:0d:e8:c7:9e:45:78:3f:b7:69:
                    44:f7:d6:2b:6a:27:26:11:a7:a3:92:5c:6a:2d:13:
                    fd:40:2c:88:42:d7:14:cb:a7:9e:a0:1e:f6:fd:34:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:BA:AE:D1:B1:33:95:C2:C5:1C:ED:D1:D9:CF:05:DA:6A:52:A7
            X509v3 Authority Key Identifier:
                keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d4:5a:a6:f1:23:8a:97:a8:1b:f5:65:92:90:a4:5d:4c:c1:
         b1:fa:26:c4:4e:e6:68:c2:e0:a7:e5:50:71:ec:ab:a5:4a:ed:
         c8:2b:c9:0e:63:d3:c8:fc:95:6d:e1:4b:a6:77:6a:4e:e4:18:
         07:b3:5e:f2:01:f0:90:26:f5:d6:f2:be:b6:3f:7d:4e:35:d9:
         97:51:04:1f:8c:9c:82:63:aa:2b:5b:cf:04:1d:3b:c5:fe:8d:
         86:f5:e1:8e:49:08:13:41:b6:b9:db:07:5a:2f:92:55:8c:7a:
         6e:06:4b:d0:65:54:5e:34:05:24:83:33:7a:4b:40:ca:22:5a:
         34:b5:90:78:6d:e8:fa:72:ea:33:48:75:de:1e:cc:eb:a5:f6:
         0e:11:47:b7:be:ae:c4:4b:97:09:7b:89:36:8b:8d:4f:64:e0:
         66:7c:a3:85:2c:79:14:cf:e7:f2:65:08:c4:0f:9c:30:2f:92:
         e9:f5:26:c3:0c:21:27:9c:af:69:97:4a:c6:9f:6a:2d:d0:97:
         ba:0f:e4:ec:cd:12:91:3b:21:97:86:cb:cc:3d:32:c7:d3:25:
         0d:9b:ed:2c:3d:c2:7b:87:10:06:07:85:1d:dc:04:d2:e4:88:
         fb:d7:98:02:ca:95:29:1b:f7:25:43:aa:b4:3e:52:69:25:01:
         0a:63:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:36 2026 by rpki-client