This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File:                     QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier:          NKJ9XOxBGk7eL7t62gjnCWN5kt5LPRn8zP7o4KDqUCw=
Subject key identifier:   C6:EB:BD:15:6A:EC:00:C5:91:FD:2C:B2:FC:66:B5:52:74:C4:FA:4B
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer:       /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial:       019C41A16D8BD41A9346DCEE046AFFCBF7A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number:          15E2
Signing time:             Mon 09 Feb 2026 09:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:24 +0000
Files and hashes:         1: APVxqKMvg7zk562Taso55LCZ43Y.roa (hash: K7kMK7uyiBjgsAZ37sxGRIvYHh9oEyISagZHLGa6SXw=)
                          2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: d3czIq7gfvVnjBquTvJUbCCE5hKAeXmaiQtG9rt02HA=)
                          3: UuN7zLVfjwqep8H3gp4uYYBDSlA.roa (hash: c5uP03tTxyD1867dntdszqVBZixLRyo48/FXuLG4BU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:6d:8b:d4:1a:93:46:dc:ee:04:6a:ff:cb:f7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40254d4a767ad099606e442e092f91241a363670
        Validity
            Not Before: Feb  9 09:00:24 2026 GMT
            Not After : Feb 10 09:00:24 2026 GMT
        Subject: CN=c6ebbd156aec00c591fd2cb2fc66b55274c4fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:9b:ce:51:55:c7:55:88:ab:b8:94:8a:a9:
                    bc:a4:51:54:19:20:0f:c8:9b:9b:7e:a5:8c:04:eb:
                    1f:b4:cd:1f:b6:ee:8a:fe:36:01:d0:98:05:0e:d6:
                    f0:9b:1d:76:5d:06:f5:8e:ab:40:df:81:46:b5:55:
                    b7:41:fd:e7:ef:3b:d6:52:4b:5a:85:01:e3:ce:c6:
                    81:62:1e:e1:9c:cf:ed:71:a2:26:56:7f:21:e6:51:
                    fd:ae:f7:e5:cc:a6:85:18:37:95:8e:d7:dc:2b:5d:
                    d3:b7:bf:7b:50:81:c3:6f:2b:f4:16:1e:c4:8d:41:
                    36:ca:13:0f:b1:e6:ad:2e:d4:bf:20:64:9a:9e:04:
                    8b:41:43:27:db:6f:77:5d:96:72:94:00:95:3d:86:
                    5c:01:99:d3:20:d7:ca:9e:28:05:0c:bf:15:e5:f9:
                    92:87:a7:b0:17:6a:28:9a:40:c1:f5:fa:d3:e0:c6:
                    4f:77:db:72:0a:80:ef:b9:f3:06:ef:ca:5b:6a:de:
                    d4:21:96:da:3b:40:75:e2:72:2b:78:b1:39:91:1a:
                    f2:2d:20:44:d0:74:d4:24:50:1f:8f:05:33:59:bf:
                    de:1e:61:ae:45:4e:00:ae:ae:eb:71:ca:db:6d:91:
                    72:6e:58:af:03:a1:40:84:35:5f:0c:6d:6b:78:6b:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:BD:15:6A:EC:00:C5:91:FD:2C:B2:FC:66:B5:52:74:C4:FA:4B
            X509v3 Authority Key Identifier:
                keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:3c:6c:86:2f:f9:1e:1b:d6:69:32:ee:ee:dc:58:61:e2:
         f9:01:fa:68:b2:dd:25:72:4c:e2:55:a9:ef:e5:66:4e:7b:9e:
         cf:1f:0c:a3:94:4d:13:d3:56:bb:e6:b8:f3:dd:99:ad:e6:ef:
         02:78:24:0d:b6:ac:74:5d:91:94:44:3e:86:54:78:8f:32:52:
         11:c5:17:48:50:7c:52:4a:fd:31:08:22:b8:c1:7b:38:f7:3c:
         74:6d:7a:66:bb:eb:5b:5e:b7:c6:d9:ce:1a:7d:91:fe:23:aa:
         83:be:aa:b6:4c:1a:f9:c9:38:b9:1c:80:f9:0b:36:9f:79:0a:
         88:ec:12:1a:c6:24:17:59:d9:bf:7f:74:20:45:f4:0d:36:3b:
         65:d8:e5:5f:d1:0a:61:db:14:63:4c:9d:77:88:39:9f:15:86:
         cf:60:65:73:9f:14:e2:19:28:95:61:25:48:6b:fb:86:00:1f:
         5d:bb:ea:0b:6a:83:3f:37:ef:12:ed:30:d6:9a:14:26:76:e0:
         ac:09:7d:24:69:2f:c9:cd:5f:64:db:60:6a:1b:6e:10:b5:fb:
         ee:44:71:aa:5d:62:6f:ce:9d:88:66:f0:c0:35:04:39:28:42:
         af:4a:d9:0a:e7:f6:26:9c:ce:36:b8:27:f6:89:78:27:0f:7c:
         be:e4:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:24:57 2026 by rpki-client