This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File:                     q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier:          fzf6tHes0DyhP8C0cbwhLUuv34EszI3ryNip95tUNbY=
Subject key identifier:   0A:56:69:87:40:B0:1B:77:F4:ED:09:CA:4F:61:B5:20:53:39:AE:B4
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer:       /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial:       019C4322A01D7DB9D60139C0370737304A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 16:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:08 +0000
Files and hashes:         1: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: sPDol6ABFj9pcThQaJcS3bn7+h1zWU+TK8/X+IxaImA=)
                          2: tQeq3gyDlggE_iMVfQtijaWolKE.roa (hash: +8U51vzZRoC0d7LUoiUC8rmqZBGQmF1Hqr6UPr/Xav8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:a0:1d:7d:b9:d6:01:39:c0:37:07:37:30:4a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
        Validity
            Not Before: Feb  9 16:01:08 2026 GMT
            Not After : Feb 10 16:01:08 2026 GMT
        Subject: CN=0a56698740b01b77f4ed09ca4f61b5205339aeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:9c:22:b7:e1:56:6d:86:b7:f8:4c:2c:94:
                    92:dd:ff:d7:b1:b5:6b:34:2f:54:3b:8f:f7:a6:98:
                    f7:61:f5:92:19:4d:2d:b8:85:7a:d2:db:6e:2c:90:
                    3c:6b:38:77:82:15:7b:96:6b:be:bb:f7:d9:0c:0c:
                    79:e1:bb:3a:31:48:7a:ad:a3:59:ae:2b:51:e4:c4:
                    73:bc:2f:00:b8:49:37:d1:77:d3:20:4c:9d:e0:c5:
                    61:67:a9:40:1a:c6:86:e8:a0:7d:b1:9d:79:7f:bf:
                    31:d4:a1:bd:fe:e5:f7:8f:44:92:af:dc:78:97:eb:
                    33:a1:89:3d:08:2d:51:80:12:a7:25:c8:99:82:75:
                    80:26:1c:36:01:2d:2f:6d:64:0a:7d:3a:43:a4:5b:
                    1a:8b:f2:6f:a5:a7:ad:c9:59:e1:da:47:d5:bb:4b:
                    8d:56:53:b3:14:bd:12:5f:97:22:83:26:ef:54:b4:
                    65:7c:23:60:ea:24:b7:ff:b1:27:e6:25:f3:fc:70:
                    a1:cb:c4:6d:33:55:47:fa:89:c4:01:64:e6:66:08:
                    d8:49:4d:04:f8:86:70:08:05:1a:c8:16:38:de:8f:
                    3f:82:80:92:98:52:aa:e8:f2:a5:58:aa:16:f4:3b:
                    ef:ad:ba:e0:e7:9f:6f:7e:73:3a:8d:28:58:bc:7b:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:56:69:87:40:B0:1B:77:F4:ED:09:CA:4F:61:B5:20:53:39:AE:B4
            X509v3 Authority Key Identifier:
                keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:65:b1:04:b3:0f:d7:03:3d:c1:57:5f:05:de:59:8c:59:b0:
         fa:ed:e7:36:56:8e:fb:e1:c5:d2:35:8c:0a:6c:b0:87:7a:24:
         6d:bf:58:d9:16:40:83:9f:1d:6d:f3:46:4f:28:f5:b5:31:a2:
         78:70:4a:c0:21:ed:f7:aa:d9:b4:f8:f1:ec:38:1f:88:35:30:
         ff:00:cb:5d:ec:29:6c:ae:91:73:5c:4b:a9:81:9c:d8:2a:f6:
         e6:da:43:92:bd:f7:ff:76:7e:ca:69:c3:9b:a2:ad:a9:a4:41:
         9c:53:94:58:dc:c2:4d:50:81:5b:41:b2:df:a4:6a:6f:a8:1a:
         84:ae:5b:25:ef:9a:43:aa:f2:4d:cc:61:41:d5:65:52:12:0e:
         d4:0b:08:f2:66:72:d6:bf:f8:e5:33:57:f0:91:b5:f7:54:e4:
         50:50:50:55:0b:e8:77:48:66:61:35:19:2b:ea:3b:9f:29:01:
         3c:5f:bc:c7:bb:e9:b3:32:5d:55:58:df:74:91:84:11:f5:69:
         a5:ee:8f:fb:fa:38:78:36:e8:bc:00:11:23:7c:c7:c3:01:72:
         f8:1b:a8:e4:b4:56:74:f5:d4:9e:31:d6:f9:04:19:29:fd:c4:
         df:9e:fa:fa:0e:a4:5e:e2:49:d0:78:c4:ec:6a:65:cb:a3:c6:
         fb:cb:67:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIqAdfbnWATnANwc3MEpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgzNWQwNjAxNzZlZTgxNjBjNzkzMGY4N2U2OTM1NTkw
OTBkNzgwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD
EygwYTU2Njk4NzQwYjAxYjc3ZjRlZDA5Y2E0ZjYxYjUyMDUzMzlhZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj2cIrfhVm2Gt/hMLJSS3f/XsbVr
NC9UO4/3ppj3YfWSGU0tuIV60ttuLJA8azh3ghV7lmu+u/fZDAx54bs6MUh6raNZ
ritR5MRzvC8AuEk30XfTIEyd4MVhZ6lAGsaG6KB9sZ15f78x1KG9/uX3j0SSr9x4
l+szoYk9CC1RgBKnJciZgnWAJhw2AS0vbWQKfTpDpFsai/JvpaetyVnh2kfVu0uN
VlOzFL0SX5cigybvVLRlfCNg6iS3/7En5iXz/HChy8RtM1VH+onEAWTmZgjYSU0E
+IZwCAUayBY43o8/goCSmFKq6PKlWKoW9Dvvrbrg559vfnM6jShYvHvIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApWaYdAsBt39O0Jyk9htSBTOa60MB8GA1UdIwQY
MBaAFKuoNdBgF27oFgx5MPh+aTVZCQ14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEt
YzNhYjZiMzQ2NmMwLzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEtYzNhYjZiMzQ2NmMw
LzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2WxBLMP
1wM9wVdfBd5ZjFmw+u3nNlaO++HF0jWMCmywh3okbb9Y2RZAg58dbfNGTyj1tTGi
eHBKwCHt96rZtPjx7DgfiDUw/wDLXewpbK6Rc1xLqYGc2Cr25tpDkr33/3Z+ymnD
m6KtqaRBnFOUWNzCTVCBW0Gy36Rqb6gahK5bJe+aQ6ryTcxhQdVlUhIO1AsI8mZy
1r/45TNX8JG191TkUFBQVQvod0hmYTUZK+o7nykBPF+8x7vpszJdVVjfdJGEEfVp
pe6P+/o4eDbovAARI3zHwwFy+Buo5LRWdPXUnjHW+QQZKf3E3576+g6kXuJJ0HjE
7Gply6PG+8tnfg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:22 2026 by rpki-client