This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File:                     QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier:          60IZdNkk+WyhCWJEbNu1vA4Xb4FM6Kgmy2f00vhvflw=
Subject key identifier:   FD:27:07:83:06:35:94:EF:20:6F:22:F1:DA:5D:6C:52:5A:3F:29:C2
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer:       /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial:       019C41D851732BDD890F6EA7D03677B7F883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number:          0B30
Signing time:             Mon 09 Feb 2026 10:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:21 +0000
Files and hashes:         1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: K/fyI47grOQQmXN+5HSgTMpfGwTdsodpCk7jhGhVH0E=)
                          2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:51:73:2b:dd:89:0f:6e:a7:d0:36:77:b7:f8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
        Validity
            Not Before: Feb  9 10:00:21 2026 GMT
            Not After : Feb 10 10:00:21 2026 GMT
        Subject: CN=fd270783063594ef206f22f1da5d6c525a3f29c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:be:c4:78:1a:f5:a2:ab:54:d2:e0:3c:6a:
                    05:5d:c3:b7:a2:9c:2d:5e:e1:f0:f8:4d:a0:29:43:
                    77:13:36:68:78:99:81:0f:df:1f:6d:c6:ff:14:eb:
                    80:95:56:01:a5:a2:3f:27:7c:be:b4:e1:0d:43:34:
                    85:c5:79:0a:6b:d1:55:70:bd:13:05:fe:f4:76:5b:
                    e6:98:66:d0:cb:ad:42:a9:11:f5:13:22:9c:71:32:
                    f2:9c:ba:a5:44:0f:78:26:47:6b:9a:e5:80:96:99:
                    7f:1a:9a:94:31:3a:27:71:85:04:30:03:f5:98:4e:
                    9b:d2:92:7e:fa:b3:ee:27:65:0c:70:29:08:3e:61:
                    34:83:a1:82:35:2e:db:a3:cd:1a:a4:51:a8:d0:ab:
                    e1:d7:d8:8d:1f:6d:d8:c9:08:7f:b3:49:22:07:c3:
                    af:2e:22:87:07:6b:1d:59:fd:96:5b:87:ed:98:3c:
                    5b:b7:49:91:c6:89:03:f0:fc:84:7c:28:ef:62:ee:
                    8d:9b:88:f2:6a:1b:45:a3:44:5f:33:92:e2:9b:16:
                    04:a0:f3:ab:c4:fa:6c:5c:b6:38:c3:1c:9a:8e:44:
                    53:8d:ad:a1:6e:be:86:7f:6d:93:bc:a2:35:6f:cf:
                    af:02:7b:63:60:ed:94:0c:ac:44:a6:58:fa:c3:06:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:07:83:06:35:94:EF:20:6F:22:F1:DA:5D:6C:52:5A:3F:29:C2
            X509v3 Authority Key Identifier:
                keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9a:5f:d6:60:11:b8:f8:d6:ae:49:e3:87:89:ac:89:28:e9:
         ea:c5:96:10:e4:f0:bb:83:f0:e1:71:99:74:26:7c:ec:c0:80:
         c7:b1:d4:75:10:db:a2:66:b5:dc:78:0d:64:95:e0:80:53:2c:
         15:f0:63:e1:f3:7f:3c:f0:dd:1d:7c:df:62:f0:4c:dc:2b:ce:
         8c:9c:60:d5:91:0a:e0:ae:61:c0:d4:55:91:65:39:b3:36:83:
         79:2e:42:ec:86:3b:d5:9a:4a:9c:91:a5:99:5a:91:f7:4d:f7:
         7b:f7:7c:d9:c2:9a:17:5e:fb:3c:40:a0:05:55:ea:5c:6f:78:
         96:a5:f7:18:6a:68:58:ed:65:46:e2:e0:f7:7e:af:ab:56:ae:
         00:80:bb:ef:ec:0a:73:12:7e:0b:b8:86:9d:f6:e0:4a:f8:ea:
         e9:d9:3c:cf:de:a8:f2:e4:26:d0:c9:a1:77:ae:41:e6:97:56:
         ae:f9:6b:c0:41:e8:d1:e4:86:59:40:21:ff:02:60:0b:59:97:
         7e:cd:0c:4c:b1:fa:f3:42:96:b5:7a:5c:ef:02:f3:c5:8e:06:
         38:af:62:24:a1:04:c4:7d:68:21:72:72:4d:88:fc:1a:f6:1c:
         49:f5:e6:8f:37:c6:57:03:fc:ba:cc:02:43:bf:36:45:00:53:
         06:2f:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:24 2026 by rpki-client