This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File:                     q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier:          uO1bSvj0N468e2PM7hKY8rB1Pcu1OV8O/WmH0kuw8AQ=
Subject key identifier:   02:2E:3F:CA:5C:9A:81:06:18:84:5C:DA:61:EA:FA:6F:47:86:E7:6D
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer:       /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial:       019C43907BAB16D3C0258C58E5DDBCC71156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:01:08 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:08 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:08 +0000
Files and hashes:         1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
                          2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: QKjb2JMXGivGNVT2ELf1tCkw+oLL+YCBRFJSeDJlnLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:7b:ab:16:d3:c0:25:8c:58:e5:dd:bc:c7:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
        Validity
            Not Before: Feb  9 18:01:08 2026 GMT
            Not After : Feb 10 18:01:08 2026 GMT
        Subject: CN=022e3fca5c9a810618845cda61eafa6f4786e76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:59:d8:7e:38:62:b4:5a:cc:aa:70:61:f3:
                    36:bc:5d:fd:e0:7a:ba:f9:8f:ef:3f:a1:84:98:c4:
                    ea:09:e2:15:9b:99:43:e9:42:b2:6d:ee:52:f6:cc:
                    9d:e9:1c:8e:58:3c:e0:11:d9:15:02:49:45:b0:27:
                    2d:cf:49:3e:41:33:92:48:20:ae:18:58:87:4f:d3:
                    be:08:7a:9c:9c:52:73:2e:8c:47:53:4f:fd:7f:d7:
                    2e:78:e2:6b:ec:ca:7e:7f:af:db:13:cb:95:56:be:
                    67:4f:10:1c:c5:17:3e:d7:bd:68:c8:16:dc:4e:1a:
                    45:f9:71:b8:f3:d1:07:14:11:21:a1:35:10:5a:3e:
                    dd:9f:f8:a7:b6:c0:75:c9:d8:40:57:f1:61:1f:db:
                    1f:97:b1:42:ca:db:98:76:a9:8d:1d:b7:09:81:37:
                    bc:3b:54:f9:45:92:65:81:6c:03:96:65:1e:f8:72:
                    7b:1b:0f:c3:a9:d7:19:7f:82:95:cf:9a:db:9d:77:
                    68:fd:fb:da:5c:57:14:8d:32:98:a3:f3:67:9d:d0:
                    4e:23:53:f1:a9:ba:58:84:3a:2f:30:17:f8:79:bf:
                    56:2e:82:20:53:af:37:f3:54:13:7f:3d:ee:99:c7:
                    64:4e:ba:ce:a1:17:94:2f:03:09:8a:de:82:94:04:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:3F:CA:5C:9A:81:06:18:84:5C:DA:61:EA:FA:6F:47:86:E7:6D
            X509v3 Authority Key Identifier:
                keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:5d:df:dd:ee:a9:d4:5f:84:9c:5b:57:bc:b5:ee:11:f5:49:
         58:04:4c:19:64:ad:15:ea:47:f3:b8:c8:52:1e:b1:42:dc:a3:
         da:0e:06:e8:9f:e0:08:80:8a:85:f7:84:9d:90:d2:87:f7:65:
         d2:84:5b:15:4e:fd:81:b4:92:05:96:0a:5e:18:72:10:dd:e8:
         3b:b1:f9:96:c9:ae:8f:73:6f:2a:fe:5f:9d:05:97:10:2d:42:
         c2:b1:ea:51:21:2d:cf:6c:ad:e9:0a:75:3f:ea:29:a4:f9:b9:
         c8:e3:8b:b9:c9:85:94:bc:bc:68:3f:bd:6b:92:02:45:24:ad:
         83:1e:d8:12:21:27:cb:05:4d:2f:c4:0d:62:b6:da:2d:f8:fa:
         ee:fc:2e:d3:84:64:ab:b1:26:82:b7:f2:09:60:72:9a:7e:e2:
         22:3e:c0:35:8f:3a:eb:50:aa:e2:1b:f2:a7:db:ff:ef:7c:6d:
         38:f1:96:7f:94:5d:ce:61:a0:bf:5b:34:dc:32:f0:c5:f1:7b:
         35:41:e6:f6:63:98:11:10:d1:3a:b1:bd:2c:df:02:e0:2a:9d:
         9c:0b:c4:1d:24:6f:57:99:04:62:ed:b1:74:95:0f:ce:23:30:
         4c:c7:5c:2f:81:99:83:e6:17:89:dc:aa:36:9f:18:71:ef:fb:
         aa:bc:53:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkHurFtPAJYxY5d28xxFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5
Y2NmYTgwHhcNMjYwMjA5MTgwMTA4WhcNMjYwMjEwMTgwMTA4WjAzMTEwLwYDVQQD
EygwMjJlM2ZjYTVjOWE4MTA2MTg4NDVjZGE2MWVhZmE2ZjQ3ODZlNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9lZ2H44YrRazKpwYfM2vF394Hq6
+Y/vP6GEmMTqCeIVm5lD6UKybe5S9syd6RyOWDzgEdkVAklFsCctz0k+QTOSSCCu
GFiHT9O+CHqcnFJzLoxHU0/9f9cueOJr7Mp+f6/bE8uVVr5nTxAcxRc+171oyBbc
ThpF+XG489EHFBEhoTUQWj7dn/intsB1ydhAV/FhH9sfl7FCytuYdqmNHbcJgTe8
O1T5RZJlgWwDlmUe+HJ7Gw/DqdcZf4KVz5rbnXdo/fvaXFcUjTKYo/NnndBOI1Px
qbpYhDovMBf4eb9WLoIgU68381QTfz3umcdkTrrOoReULwMJit6ClARUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIuP8pcmoEGGIRc2mHq+m9HhudtMB8GA1UdIwQY
MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt
NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez
LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx13f3e6p
1F+EnFtXvLXuEfVJWARMGWStFepH87jIUh6xQtyj2g4G6J/gCICKhfeEnZDSh/dl
0oRbFU79gbSSBZYKXhhyEN3oO7H5lsmuj3NvKv5fnQWXEC1CwrHqUSEtz2yt6Qp1
P+oppPm5yOOLucmFlLy8aD+9a5ICRSStgx7YEiEnywVNL8QNYrbaLfj67vwu04Rk
q7EmgrfyCWBymn7iIj7ANY8661Cq4hvyp9v/73xtOPGWf5RdzmGgv1s03DLwxfF7
NUHm9mOYERDROrG9LN8C4CqdnAvEHSRvV5kEYu2xdJUPziMwTMdcL4GZg+YXidyq
Np8Yce/7qrxTnA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:47 2026 by rpki-client