This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File:                     qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier:          Jy68ld0Rao9RHhfqB6uKAc2PCez2NhFTsCaYlp5bjyw=
Subject key identifier:   A0:3C:22:F3:18:C4:58:05:5B:B7:18:B0:71:9E:89:63:13:4F:C1:1C
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer:       /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial:       019C41A1A91CEB0BAD2EDA94BB68C55C99CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number:          1091
Signing time:             Mon 09 Feb 2026 09:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:39 +0000
Files and hashes:         1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: UxIPP5+RrF2O5+Brqp6hOeQ5CIRdViDV55U2YlgcuSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:a9:1c:eb:0b:ad:2e:da:94:bb:68:c5:5c:99:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
        Validity
            Not Before: Feb  9 09:00:39 2026 GMT
            Not After : Feb 10 09:00:39 2026 GMT
        Subject: CN=a03c22f318c458055bb718b0719e8963134fc11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:e7:e3:c0:0e:b0:c1:fe:96:29:4c:fe:14:
                    58:04:58:d8:4d:5b:0b:a7:18:a2:2d:fc:df:7f:91:
                    3a:61:f1:20:a1:01:5d:de:09:1e:fc:fa:73:86:e5:
                    a5:25:7b:f4:b4:11:d2:ec:df:13:25:5f:40:0a:cb:
                    e7:68:01:a3:45:ab:64:d5:b0:0b:21:df:b7:c5:11:
                    58:75:9a:2c:b1:43:3d:bb:92:a8:56:24:24:5b:8a:
                    04:93:eb:1a:a9:05:86:e6:b1:42:7b:12:11:1d:e0:
                    c4:f0:2a:e9:81:22:71:e5:d7:92:3d:78:79:0c:78:
                    9e:0c:2d:1d:de:ee:bc:1b:1b:e1:8d:ce:be:30:a1:
                    27:3f:8e:e7:0d:bd:a2:45:a7:62:89:f2:0e:a5:ca:
                    b0:7c:3b:51:3d:2f:d6:f5:25:b0:21:d1:65:37:23:
                    54:f8:a8:de:a3:dc:0f:3a:8d:91:b5:2a:aa:2a:87:
                    03:1c:8c:ae:b6:2f:27:45:f6:98:e9:36:26:9f:ea:
                    8e:6e:9e:bb:ba:ad:e8:19:67:c2:3b:4b:1f:67:53:
                    ac:0d:a0:e2:1d:1d:b7:a5:5f:a2:57:12:dd:f3:14:
                    6a:fd:03:c4:03:2a:6b:7b:6a:1e:a2:9d:7b:2a:0e:
                    0a:80:24:77:d8:e9:6e:be:85:54:a2:3b:b9:0c:ea:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:22:F3:18:C4:58:05:5B:B7:18:B0:71:9E:89:63:13:4F:C1:1C
            X509v3 Authority Key Identifier:
                keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:17:4f:2a:07:6a:09:7c:ff:b4:b9:c1:2f:04:4c:43:a2:6c:
         90:b9:4d:48:82:fa:08:d3:c5:ab:7f:4b:3a:fc:86:ab:35:e4:
         df:56:13:65:b8:dc:7a:5b:2e:20:db:72:58:8c:4a:6e:e9:39:
         57:96:60:98:8a:87:d1:fc:97:58:15:ff:f8:8e:83:dc:53:50:
         03:76:1a:d7:79:2c:cc:33:21:b4:aa:d5:c5:eb:89:8b:91:22:
         ed:0f:4a:22:39:ac:d2:93:5d:b7:47:0f:28:3c:46:fd:db:e5:
         27:4d:21:f5:37:b0:59:bf:86:86:f2:e2:49:e9:08:b9:d4:28:
         73:1c:8e:d4:dd:15:9b:81:ee:0a:c2:95:45:f4:09:11:4c:6e:
         9c:8b:a4:df:a9:ef:73:c8:29:6f:41:cd:e8:8f:81:7f:ae:62:
         f2:8a:74:5e:b0:6e:bb:46:51:a0:1a:c1:2f:dd:b2:2b:e3:69:
         ee:0f:6a:ee:9b:eb:0c:e7:10:a1:8d:c4:09:b5:1d:75:da:6d:
         f5:da:de:7c:1d:df:40:55:28:f9:98:b1:2a:bc:0b:80:2a:ba:
         4f:a4:2e:a9:f0:0a:e2:88:1b:8b:3f:92:2f:f3:57:97:23:15:
         b2:05:e8:0d:a5:e3:f2:df:3d:ef:8d:d1:a0:09:00:15:cd:b2:
         02:d3:e3:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoakc6wutLtqUu2jFXJnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE3MDc5MzhiYTYyZmUxOWU2NDc0ZGFjNzg3ZGYzZjhj
ZmRlZTQwHhcNMjYwMjA5MDkwMDM5WhcNMjYwMjEwMDkwMDM5WjAzMTEwLwYDVQQD
EyhhMDNjMjJmMzE4YzQ1ODA1NWJiNzE4YjA3MTllODk2MzEzNGZjMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lnn48AOsMH+lilM/hRYBFjYTVsL
pxiiLfzff5E6YfEgoQFd3gke/PpzhuWlJXv0tBHS7N8TJV9ACsvnaAGjRatk1bAL
Id+3xRFYdZossUM9u5KoViQkW4oEk+saqQWG5rFCexIRHeDE8CrpgSJx5deSPXh5
DHieDC0d3u68Gxvhjc6+MKEnP47nDb2iRadiifIOpcqwfDtRPS/W9SWwIdFlNyNU
+Kjeo9wPOo2RtSqqKocDHIyuti8nRfaY6TYmn+qObp67uq3oGWfCO0sfZ1OsDaDi
HR23pV+iVxLd8xRq/QPEAypre2oeop17Kg4KgCR32OluvoVUoju5DOoWFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA8IvMYxFgFW7cYsHGeiWMTT8EcMB8GA1UdIwQY
MBaAFKoqcHk4umL+GeZHTax4ffP4z97kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMt
ZDcxNmY0MDY4MTM5LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMtZDcxNmY0MDY4MTM5
LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRdPKgdq
CXz/tLnBLwRMQ6JskLlNSIL6CNPFq39LOvyGqzXk31YTZbjcelsuINtyWIxKbuk5
V5ZgmIqH0fyXWBX/+I6D3FNQA3Ya13kszDMhtKrVxeuJi5Ei7Q9KIjms0pNdt0cP
KDxG/dvlJ00h9TewWb+GhvLiSekIudQocxyO1N0Vm4HuCsKVRfQJEUxunIuk36nv
c8gpb0HN6I+Bf65i8op0XrBuu0ZRoBrBL92yK+Np7g9q7pvrDOcQoY3ECbUdddpt
9drefB3fQFUo+ZixKrwLgCq6T6QuqfAK4ogbiz+SL/NXlyMVsgXoDaXj8t89743R
oAkAFc2yAtPjBg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:12 2026 by rpki-client