This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File:                     qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier:          /5pAWmLU9bWhbcgMo8mXX1qJ+qrLSyK2/DZXu7l39Nc=
Subject key identifier:   48:3E:4E:33:57:0F:CB:1B:4E:A8:40:F6:6C:A3:47:AC:3D:5A:05:29
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer:       /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial:       019C43C6AAF9C302683B9A1B02F4CF57FB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number:          139B
Signing time:             Mon 09 Feb 2026 19:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:18 +0000
Files and hashes:         1: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
                          2: ja4HyiBI4KYvnEsTozQU8Mp2lVA.roa (hash: Lay79psaoloZk98TsyG6C83RJH7tMee/A2Y6ldt4Zmk=)
                          3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: 8t9BOha3nqIDOPHryKf5uQonzX8TTdLGxLXF6bL9NMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:aa:f9:c3:02:68:3b:9a:1b:02:f4:cf:57:fb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
        Validity
            Not Before: Feb  9 19:00:18 2026 GMT
            Not After : Feb 10 19:00:18 2026 GMT
        Subject: CN=483e4e33570fcb1b4ea840f66ca347ac3d5a0529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:0b:20:c1:b9:8b:f0:62:f2:4e:81:d0:94:
                    4c:80:1d:35:95:ea:d5:97:8b:af:07:15:d1:aa:48:
                    2f:0f:ed:bc:c5:24:f8:99:6e:b4:42:36:aa:93:fd:
                    ce:05:6d:d3:c7:eb:ae:73:78:6d:c4:45:1f:55:25:
                    2b:41:c8:5b:8e:fa:18:5d:f9:f5:cb:f4:ea:7f:a9:
                    5d:2d:74:01:1c:52:b2:b6:04:fe:12:f9:59:1a:ee:
                    53:89:30:0d:b0:f4:0f:73:2a:f5:2d:cd:dc:db:97:
                    da:72:7d:5a:0b:5d:d2:04:82:f6:94:0d:77:5e:5c:
                    26:1c:86:a7:cd:de:da:af:07:e2:20:29:0b:91:35:
                    5b:5d:0d:e8:ab:d0:f6:75:6c:ba:69:84:95:b0:46:
                    35:f2:c0:33:36:9f:d8:c3:1c:c7:f7:9c:ab:1c:37:
                    a0:e9:26:b9:6d:55:a6:2b:86:4e:a7:bb:b6:cb:7b:
                    8e:33:f3:c6:ff:86:ed:83:8c:7d:b3:1a:ab:a6:74:
                    d2:2c:6b:8d:5f:1a:c9:27:9d:3b:ac:55:fe:6f:12:
                    8e:41:4d:97:de:e8:67:b0:4e:cd:c3:15:b0:79:a2:
                    0e:97:d9:9b:de:30:80:cd:e6:5a:6e:5b:9e:92:0a:
                    3a:12:4c:92:2e:4b:c1:f4:24:18:57:39:69:01:fd:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:4E:33:57:0F:CB:1B:4E:A8:40:F6:6C:A3:47:AC:3D:5A:05:29
            X509v3 Authority Key Identifier:
                keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:1d:8f:a4:d3:bc:32:17:d6:f7:16:ca:de:45:89:ea:2a:
         81:b5:27:79:b1:9b:64:d5:44:04:60:49:8b:f3:9d:ee:2b:0e:
         be:b2:bf:97:c6:c7:c6:fc:d8:1c:1d:8c:12:bb:a0:e9:40:d7:
         62:b7:d9:65:45:83:f4:f8:f3:e6:ca:94:f7:f4:b7:28:8c:6c:
         c6:b8:06:98:72:10:60:2b:21:43:18:38:03:7c:a7:27:3e:bf:
         dc:34:7d:4c:fa:e7:a5:67:83:eb:c2:b6:02:5a:64:56:04:d0:
         ee:34:3b:6c:f8:cc:9e:83:e1:90:db:9d:ae:f9:26:6b:db:63:
         9a:a7:21:99:a4:af:6e:eb:71:a5:37:dc:b3:33:d8:fc:ba:d6:
         d9:31:80:e2:bb:bf:83:b3:12:d0:fa:98:a8:42:bc:6b:89:ec:
         d0:38:d9:54:ca:6e:ad:b6:56:ec:84:6e:42:97:10:48:8c:7e:
         02:15:51:55:d8:ed:df:83:bd:29:99:6a:c6:f9:9c:56:ef:fd:
         dc:c1:e5:1f:57:ee:32:49:2a:8b:ee:82:27:5e:38:93:33:86:
         7e:ea:08:be:b5:cc:d1:a2:0a:bb:ad:7f:ec:d6:b5:cd:e1:e7:
         bb:92:19:69:a5:84:61:73:12:56:fc:bf:15:f3:57:72:e8:31:
         7d:61:78:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client