This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File:                     qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier:          FxW24SLtE+TeFTnMTDFVSI6wRZtlIfT1QmxoqD3Plgs=
Subject key identifier:   01:6C:FA:CC:18:E8:EB:1B:A1:59:62:5A:DC:E7:28:57:C1:52:82:4C
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer:       /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial:       019C432299F137BA361F7DE3D08C4601024E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number:          0F8B
Signing time:             Mon 09 Feb 2026 16:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:06 +0000
Files and hashes:         1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
                          2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
                          3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: GeMjM/iIQuSu9ZHB5DIzF2/0tuI4QJM9Ll8V5VavFxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:99:f1:37:ba:36:1f:7d:e3:d0:8c:46:01:02:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
        Validity
            Not Before: Feb  9 16:01:06 2026 GMT
            Not After : Feb 10 16:01:06 2026 GMT
        Subject: CN=016cfacc18e8eb1ba159625adce72857c152824c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:d9:c1:17:b0:91:d6:24:1a:51:73:89:d2:
                    8a:1c:dc:b0:ab:a3:d8:a4:cf:f6:d0:dc:4c:19:fa:
                    4a:3a:4c:ae:26:72:92:b3:72:04:13:bd:e0:c3:93:
                    bb:5a:b8:47:21:c9:de:73:78:8b:1a:89:a3:a9:77:
                    32:b5:ad:96:d7:3e:90:80:c5:18:30:70:2c:40:dc:
                    a3:e0:e8:df:23:88:c4:fa:c0:f5:02:ff:6f:f3:14:
                    4a:d1:bc:56:c2:85:7c:89:01:ff:b4:25:f4:fd:d2:
                    2e:64:22:f2:8b:4a:69:c7:e1:b0:73:c6:82:9a:88:
                    d4:64:01:15:87:0c:83:50:60:7b:b0:b2:5a:15:8c:
                    e0:d3:53:38:d4:d2:f0:07:28:96:d1:68:3c:57:cb:
                    46:77:4d:f5:26:57:9e:c1:96:ab:b6:0f:02:6d:b1:
                    70:c0:5f:9b:90:9f:6e:d0:4d:33:86:5d:f1:87:fa:
                    f1:1c:60:18:e5:a7:fc:7a:c0:c6:4c:60:60:a6:fb:
                    ad:e0:4d:b9:06:11:a5:ec:d5:62:39:32:40:69:23:
                    fb:7d:2a:11:9f:5c:19:52:9e:59:d2:72:a2:b4:e0:
                    32:61:5c:03:5e:d8:b9:34:c8:d7:13:92:ee:b6:27:
                    8c:15:37:4c:c3:d7:9c:92:6f:b0:7b:3d:98:e6:26:
                    81:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6C:FA:CC:18:E8:EB:1B:A1:59:62:5A:DC:E7:28:57:C1:52:82:4C
            X509v3 Authority Key Identifier:
                keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:c8:f7:26:67:d4:4c:50:ea:ad:b6:cb:11:98:da:1d:3b:2f:
         8b:58:16:6e:bd:ea:4d:f2:de:a3:98:eb:b4:83:9b:89:0b:09:
         f8:e7:31:b8:96:86:44:76:8c:04:4c:54:90:5b:b2:f0:88:4e:
         8a:53:49:55:8c:7a:03:8a:64:e6:25:f4:9d:34:6d:25:e5:01:
         2f:29:49:b1:c1:a4:58:21:fe:59:44:b1:a3:2c:2d:3e:a1:20:
         14:3c:6c:e4:6e:d2:58:ab:5f:2d:bc:da:1f:bf:be:08:cf:95:
         3f:91:59:e5:4b:1c:1f:de:b2:3d:09:9c:7f:de:40:84:2b:58:
         f9:4f:91:91:30:01:51:fd:d7:26:d2:d0:f6:11:b7:0f:bd:ac:
         ed:b4:c5:90:33:94:71:1c:06:37:07:69:a3:f1:4a:a9:5e:70:
         44:25:be:56:d8:e3:9f:a7:34:ee:af:6b:88:ff:c0:67:1e:0f:
         01:bb:2c:57:86:d2:8f:fe:99:f5:f7:75:a8:8f:48:d7:99:d9:
         dd:24:56:8b:9b:8e:22:07:67:b4:46:2d:e8:1b:e6:84:d8:03:
         7e:31:ee:57:36:90:47:4e:ac:03:ae:39:16:55:1d:bc:2e:03:
         ec:fd:e7:a1:e6:59:04:2f:2a:bc:53:8e:95:c6:68:e4:40:b3:
         81:09:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client