This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File:                     QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier:          kq2K7pouPIFfC99HUpamUCSp380RSGQZaym7ppqq2Ik=
Subject key identifier:   84:2E:B6:D8:4E:33:E8:30:7F:FC:90:A8:AB:6E:7C:AE:3B:18:3A:79
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer:       /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial:       019C4FCB5C2758F94335770D2A26D02BCFF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number:          04
Signing time:             Thu 12 Feb 2026 03:00:53 +0000
Manifest this update:     Thu 12 Feb 2026 03:00:53 +0000
Manifest next update:     Fri 13 Feb 2026 03:00:53 +0000
Files and hashes:         1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
                          2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: HXRMw/ohbfdcY++jzNnIXD1XW5VxpPTyb8NfIyw2/Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4f:cb:5c:27:58:f9:43:35:77:0d:2a:26:d0:2b:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
        Validity
            Not Before: Feb 12 03:00:53 2026 GMT
            Not After : Feb 13 03:00:53 2026 GMT
        Subject: CN=842eb6d84e33e8307ffc90a8ab6e7cae3b183a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:45:f5:ac:fd:c1:cf:cc:49:ca:54:03:58:
                    40:38:66:79:67:e8:b7:d5:7d:62:f7:37:a8:16:24:
                    5f:e4:17:fe:96:c3:80:a1:be:92:23:0c:8d:a9:b6:
                    4c:b8:f7:5c:79:f0:98:be:bf:55:19:c4:f8:71:32:
                    1c:ca:cc:0d:b4:b5:86:ae:d0:2c:43:b5:ae:bd:da:
                    e7:f1:f0:6b:8a:4a:66:cd:c3:06:d5:b1:07:4c:29:
                    7d:5a:39:87:29:ff:83:1f:ca:db:10:e0:eb:83:2c:
                    ec:8c:09:3a:56:9d:e0:98:6e:6f:c8:3a:1e:b3:13:
                    5a:69:e8:6b:a7:72:b4:eb:fc:b0:ca:0d:ff:65:b5:
                    a3:79:ee:a9:03:e4:8f:9f:e9:4d:b2:4a:50:22:6c:
                    ed:d4:cf:60:68:3f:76:53:c9:bf:9b:8e:28:57:f4:
                    14:ad:86:7a:93:5d:5a:47:3f:76:ca:ee:0c:96:12:
                    87:05:3e:40:b0:31:40:9b:35:23:9a:25:c0:4a:5d:
                    a2:24:5a:3c:8d:e1:a3:67:5b:1d:2b:e2:e7:57:b4:
                    03:f1:12:64:68:a0:bc:bd:c4:49:8c:51:1c:9f:56:
                    3f:ac:b7:6f:d3:ac:b6:5e:71:9c:87:20:fe:0a:a6:
                    14:9c:5f:91:57:27:f2:55:1a:26:8f:3f:3e:d5:a6:
                    5f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2E:B6:D8:4E:33:E8:30:7F:FC:90:A8:AB:6E:7C:AE:3B:18:3A:79
            X509v3 Authority Key Identifier:
                keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:68:3f:cd:d1:7a:73:0a:3d:d7:00:4d:59:30:88:92:a9:
         82:05:7a:c7:40:7d:dd:64:8a:b8:47:0f:9e:71:57:d2:f8:f7:
         9b:b0:b0:9a:f6:d0:93:08:4a:f9:a6:c6:1a:c3:fe:73:91:32:
         d2:5c:e6:b5:d2:18:2f:c4:62:d1:1f:38:a4:6b:22:68:54:d8:
         1a:a3:12:bf:8f:4c:9e:48:de:b3:d7:b6:9d:64:7f:dd:84:cd:
         43:74:ff:eb:3f:be:1d:12:88:fc:87:b0:e6:29:64:65:1f:cf:
         63:55:cc:eb:e2:47:98:c4:61:f9:fc:fb:6c:29:ea:26:35:b2:
         34:73:e7:a3:a7:b7:62:b8:ca:d8:ae:e5:eb:e0:a1:67:f7:e1:
         77:ff:42:35:fb:6c:70:65:c6:23:a2:d9:39:b4:2d:6c:c3:54:
         48:bb:bb:31:e1:11:bf:4d:78:77:73:64:a7:c9:57:3d:c0:1b:
         41:34:fc:cd:99:94:5a:48:b0:36:06:19:ff:c0:92:eb:29:26:
         5e:d9:9c:3c:4f:4e:1b:8d:c9:6f:3b:6d:9d:ac:34:08:bd:6d:
         7f:d7:d0:dd:2e:d7:a0:a2:eb:d4:1e:9c:89:a1:a7:ad:01:3e:
         af:74:6e:c8:0d:69:45:fa:c1:d9:50:7d:7b:ca:d0:b0:2d:85:
         c2:ef:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 05:39:09 2026 by rpki-client