This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File:                     RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier:          WvE/cAtnfVT0GbOH/ryv+8U9BW/oPIT2ZR2ijfnlyts=
Subject key identifier:   7C:EA:D0:DD:7E:4F:5A:74:09:CE:19:81:B2:5A:BA:62:58:EE:40:E9
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer:       /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial:       019C44A29D695AB487FFB51AFCC096688032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number:          052A
Signing time:             Mon 09 Feb 2026 23:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:33 +0000
Files and hashes:         1: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: ZKr29gW1nDUgxWu0h5d7IFNz6EZLimz3O5Oas0YyMkw=)
                          2: z-c9Pey3216LPC0KHV3ix--by3k.roa (hash: 3wJbwPppaRKKbJHcpNB2CmCnMT+2mo4g0n5EWgLuCaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:9d:69:5a:b4:87:ff:b5:1a:fc:c0:96:68:80:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
        Validity
            Not Before: Feb  9 23:00:33 2026 GMT
            Not After : Feb 10 23:00:33 2026 GMT
        Subject: CN=7cead0dd7e4f5a7409ce1981b25aba6258ee40e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:81:29:9a:3c:7c:3e:0a:ff:14:5a:e0:ce:
                    cd:23:90:ac:e4:c1:13:e9:56:04:67:d0:7d:f5:5b:
                    eb:39:4e:3a:b8:c8:85:0f:1a:d8:04:dc:67:cd:aa:
                    51:b6:0b:fd:89:b1:14:b1:44:44:0e:03:4c:5d:fc:
                    fb:4d:d4:d4:d8:af:7b:ff:67:1b:f9:1f:76:d4:71:
                    8d:e0:33:21:c3:a5:a9:7c:6d:19:f7:a5:fe:84:26:
                    ea:c0:97:b8:4c:b3:93:90:34:54:1b:74:19:e7:ec:
                    20:5e:43:2a:e7:ab:f8:8d:aa:3a:7e:59:e6:19:80:
                    66:13:a1:be:59:c9:c6:d2:61:3c:f9:fb:aa:27:ac:
                    68:13:4e:4c:54:06:b7:d7:f6:5e:e4:4c:a9:54:ef:
                    d0:5a:dd:32:b4:0d:af:34:06:42:e8:bc:33:43:a9:
                    7b:fd:8d:78:6c:12:cd:31:fd:35:15:54:c1:2f:0f:
                    ee:90:b7:cc:5f:e7:71:2c:2a:52:50:3b:29:83:27:
                    71:a2:8d:5d:f4:38:9b:65:3d:75:54:af:be:6d:05:
                    1e:ec:94:35:22:1f:cf:83:13:3d:3c:97:83:d2:42:
                    1e:88:44:aa:6e:e6:3a:fb:1b:23:af:b3:eb:1b:fe:
                    9c:8f:b4:fb:b8:a2:60:f0:c9:56:34:05:38:da:c9:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:D0:DD:7E:4F:5A:74:09:CE:19:81:B2:5A:BA:62:58:EE:40:E9
            X509v3 Authority Key Identifier:
                keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:22:f2:13:69:b1:1b:37:57:c0:7f:0d:dd:08:a7:25:b2:
         00:6d:75:1a:b6:6e:a9:24:00:49:8d:25:05:e3:44:62:86:3c:
         99:09:fc:18:e6:eb:5f:55:45:9b:d1:f7:b4:c3:e9:29:fc:cf:
         8f:07:78:84:6b:b0:5a:5a:85:59:7a:65:9d:54:46:4a:61:40:
         92:c3:5b:0a:a0:7a:e0:dd:8e:05:81:7b:f1:35:74:1a:87:13:
         e0:a5:f5:f2:78:6c:52:6c:ec:00:2e:ac:e1:df:2b:c4:c6:89:
         6b:e7:62:39:fd:96:42:2a:ae:b8:99:54:82:19:1c:a5:3b:58:
         6d:5b:77:27:e3:da:55:62:55:54:19:38:70:c8:72:df:80:3b:
         18:8a:06:b9:f5:45:d2:3f:ed:11:54:f7:27:1f:0d:86:bc:bb:
         41:3f:5f:40:1e:4b:5a:e3:ce:d0:b6:2f:35:50:b3:63:e6:82:
         0d:20:7b:2b:67:4e:87:43:4b:39:a6:7d:f3:03:66:95:46:ae:
         6a:08:e8:0c:b3:38:01:e5:f2:45:60:84:98:97:d5:34:d6:b1:
         f1:56:ee:88:63:c4:e6:f6:18:38:9d:5a:d0:89:6d:f9:94:f4:
         a4:64:76:55:32:13:54:c3:14:b2:3f:a5:76:69:cd:23:57:e6:
         89:c9:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:56 2026 by rpki-client