This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File:                     qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier:          oFuW6XGE9Q814LYP2nxNaQP78iwcl93NluQvlzm8BSM=
Subject key identifier:   5F:17:04:FA:83:38:1A:2E:0C:A9:2E:B3:85:47:9D:CF:8E:A9:4A:D6
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer:       /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial:       019C41A1C19165C71EA96FDEDEEFF8493C55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:00:45 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:45 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:45 +0000
Files and hashes:         1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
                          2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: +WD0joqB4locN3sXRURX2sGbT9ZltPAorcyGxqMNvPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:c1:91:65:c7:1e:a9:6f:de:de:ef:f8:49:3c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
        Validity
            Not Before: Feb  9 09:00:45 2026 GMT
            Not After : Feb 10 09:00:45 2026 GMT
        Subject: CN=5f1704fa83381a2e0ca92eb385479dcf8ea94ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:ac:00:5d:d9:8e:15:50:62:82:f4:ba:aa:
                    a2:9a:bd:55:2d:8e:74:07:90:7e:30:d1:b3:8a:7b:
                    3a:94:d9:92:2a:29:1d:1b:43:32:52:c8:c0:fb:dc:
                    ff:57:8e:74:91:36:87:01:3d:97:fb:1c:5c:62:64:
                    61:6e:7d:e2:32:7e:a0:32:42:69:35:66:27:f6:a3:
                    03:19:80:ed:70:7a:77:88:34:29:b3:5b:50:b0:5f:
                    25:4c:d3:08:21:64:3b:3d:a2:24:de:4b:04:14:f7:
                    9f:8b:58:dc:b6:f3:52:86:05:9c:e8:e0:cd:ea:31:
                    62:96:cd:55:16:73:37:0a:e5:08:8b:4b:33:f8:d5:
                    63:23:39:fe:56:1a:7a:8a:c4:73:82:af:55:29:de:
                    ab:1c:44:c8:28:8c:00:d3:61:ae:79:57:a8:2c:a8:
                    e0:17:c8:cf:f9:d7:99:a2:74:96:da:92:b1:87:dd:
                    8b:37:6d:e5:b6:6c:8f:47:0c:95:a2:3a:c6:c1:bd:
                    fb:85:e9:f7:97:70:7e:87:43:de:76:2e:7e:a1:71:
                    5d:02:69:1b:c2:3a:0b:a5:24:fc:f6:81:d7:3b:f6:
                    f4:cc:3e:a7:2b:56:77:cd:2e:a6:e4:bb:e0:1b:f0:
                    96:40:93:47:de:e2:f2:ce:43:de:59:43:59:e1:09:
                    1c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:04:FA:83:38:1A:2E:0C:A9:2E:B3:85:47:9D:CF:8E:A9:4A:D6
            X509v3 Authority Key Identifier:
                keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:55:17:ba:27:bc:5f:31:29:1a:7c:98:0c:e9:eb:dd:ec:
         72:af:23:56:48:5e:10:ab:21:1c:54:ac:dc:f9:0b:c9:a6:07:
         a5:c7:52:fa:9e:1f:92:68:4a:16:68:fe:64:6f:76:91:b8:1e:
         6a:ad:5b:a4:63:91:b2:ee:82:6e:1a:90:7b:b0:8e:5a:60:11:
         1b:aa:12:15:4f:d6:af:86:d3:54:1c:de:cf:b4:15:e7:14:2a:
         94:16:0e:da:8a:10:86:d4:6d:6b:36:74:fa:0c:f5:0b:bf:0b:
         6a:ef:35:61:a9:5f:f5:54:1f:c8:57:a3:ee:1a:60:63:f0:32:
         69:3f:83:85:fd:4f:e1:cc:86:87:d9:fe:eb:52:d6:9b:82:25:
         cc:f0:89:b1:91:fd:ef:e7:0d:09:2c:6b:81:31:9c:7b:ac:94:
         d6:a0:50:99:14:74:9d:cb:32:13:c9:e1:00:f3:c9:59:76:61:
         4b:bd:63:42:0c:b1:b2:25:4a:53:d4:b7:ac:88:c1:83:a6:74:
         27:d3:4a:bd:49:aa:e3:a6:76:b8:92:d4:81:5e:ca:4c:4b:d6:
         56:e6:24:8b:86:c0:54:7d:9d:62:82:0a:4e:3f:0a:f5:00:d9:
         0c:77:d2:97:d0:bb:22:25:5d:d7:79:6d:4d:18:5e:a5:10:f4:
         e4:0e:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:55 2026 by rpki-client