This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          EKj+9kEncMhVYoQ9DGeCXEerqa/2KxW+zztiDR3l2OM=
Subject key identifier:   C6:76:F7:7E:36:8A:09:2E:28:B4:40:97:0B:CA:FA:52:EA:C8:EA:17
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       019C424620F067D0E0FD50F2E6CE3FA866C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          09E3
Signing time:             Mon 09 Feb 2026 12:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:18 +0000
Files and hashes:         1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
                          2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: 8e1i3A68zrgXaLJZNQIGLBqUmKOB6dFnAKYKnhesig4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:20:f0:67:d0:e0:fd:50:f2:e6:ce:3f:a8:66:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Feb  9 12:00:18 2026 GMT
            Not After : Feb 10 12:00:18 2026 GMT
        Subject: CN=c676f77e368a092e28b440970bcafa52eac8ea17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:ea:12:13:b6:ff:4b:56:3f:11:f3:86:59:
                    d2:f2:a3:7f:f5:2b:2c:9a:d9:d4:e8:2e:d0:51:08:
                    25:dc:34:db:e2:ec:7c:1b:ef:05:6f:6b:ce:7c:e1:
                    db:3a:1d:14:d4:87:57:56:c1:75:b4:37:82:9a:0a:
                    9c:49:fe:65:ff:8e:b1:75:64:ac:cc:d1:ee:b1:e3:
                    43:7f:51:b6:02:d8:5f:da:f8:fb:51:7d:c5:56:e0:
                    e7:fd:21:bd:a6:11:f2:d9:ea:6e:e6:91:e2:ec:d7:
                    dc:c9:1b:5a:62:97:97:f4:8b:46:f3:c8:63:ac:b4:
                    e7:e6:50:f4:cb:71:90:90:a7:c0:b8:b7:a0:4c:4c:
                    02:22:90:d0:e1:3b:e9:ee:b8:c5:a5:97:c0:76:e0:
                    1c:13:23:58:c8:d3:74:e8:0d:af:b7:df:1d:70:31:
                    3c:e3:c8:75:bf:d8:34:30:d6:92:0d:3b:37:24:22:
                    2a:ab:49:0c:02:1f:f9:2c:67:d8:45:9b:cc:f3:6e:
                    eb:17:3b:6d:ed:fe:1e:e0:2b:d0:81:35:94:84:7d:
                    9d:3d:f6:ce:fb:47:dc:21:d8:af:41:39:f3:38:d2:
                    25:3b:3f:ef:0b:7f:48:af:c6:1e:e1:0e:6b:af:bc:
                    a9:61:45:98:90:93:ec:d9:f8:62:02:11:f1:4d:8d:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:F7:7E:36:8A:09:2E:28:B4:40:97:0B:CA:FA:52:EA:C8:EA:17
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3c:2c:43:f9:18:3c:64:ac:25:78:7c:bd:0c:31:ff:cd:d9:
         a6:2a:be:4a:2b:91:ce:9b:20:ef:cf:52:8f:17:9b:8b:5c:b1:
         78:08:34:5b:bf:d3:2b:ac:2b:f0:bd:e5:15:6f:35:61:9e:e3:
         12:0b:0c:05:6b:49:a0:b3:eb:4b:03:f8:e5:6e:14:18:1e:2a:
         27:97:a7:c5:30:00:3f:fa:d2:3f:0d:1c:bc:79:eb:50:b2:79:
         f8:94:97:46:1d:cf:f1:69:f3:c8:12:4a:4a:0c:45:6d:13:70:
         05:10:d1:ef:8e:ca:94:84:60:0f:5f:fc:db:a6:a5:94:f0:ed:
         8b:d7:bc:04:3e:64:7a:62:11:af:21:58:46:a0:1b:7a:a6:1f:
         24:b5:e6:45:79:16:60:5d:b4:13:d3:26:e7:39:8b:8d:ac:07:
         e6:34:71:4e:b0:d8:d8:1b:c7:2b:f7:93:ba:4e:ec:93:2d:69:
         6c:ed:e5:e3:0a:e9:6c:45:7e:49:c8:18:fc:04:a7:ef:a5:b7:
         40:83:e9:4d:7b:5c:68:81:10:50:0e:9b:1c:db:aa:ef:b4:8e:
         ca:81:22:38:90:a8:fb:79:e6:5b:3f:d2:33:c4:97:83:ac:b7:
         b8:65:c6:a0:87:da:3e:5e:d2:e9:d9:6d:0c:50:6c:2e:41:46:
         e0:e7:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:28 2026 by rpki-client