This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          /0SYon8COO+dIgaWB4yig9dERde485GcYCCWpI8qdQA=
Subject key identifier:   BD:81:3E:7B:50:19:A5:9F:1F:4A:CB:1A:72:9B:6D:B0:9C:06:40:CE
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019C41A1A343E33ACBC5ECDA00BFCE106E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 09:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:37 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: mp8iuUR877g3NSXX8wiWW1k3JfAre34kLogODqk4M8o=)
                          3: cyljAWZPlifrM5byUgXStgguUUo.roa (hash: g+31Md1m8aEfNmg7bSRZKEh9QswceyQTpMg+XQVZ8Kc=)
                          4: qIswqouMvF4QvtgJt7puZ1DpXGM.roa (hash: yf1LTtYPfTtITafQ3QHjAd2ny6/lzW+4z8DKP7fNkrw=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:a3:43:e3:3a:cb:c5:ec:da:00:bf:ce:10:6e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Feb  9 09:00:37 2026 GMT
            Not After : Feb 10 09:00:37 2026 GMT
        Subject: CN=bd813e7b5019a59f1f4acb1a729b6db09c0640ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:1d:93:55:18:02:6a:9b:a7:5c:9f:a0:8b:
                    85:00:8b:2c:80:10:ef:f3:35:90:36:bd:c5:53:a0:
                    8c:2d:44:b2:00:9b:9f:1a:76:4b:8a:f9:b3:c9:6d:
                    6a:fa:02:ac:b4:7d:30:6a:83:1f:ae:ba:98:87:e4:
                    e2:d3:48:f6:92:0d:0d:4f:07:c6:68:d2:df:f7:d6:
                    be:f7:a2:be:11:7e:16:df:c8:e4:e4:8e:73:b2:83:
                    42:e7:4a:9f:b3:a2:48:0b:c7:db:b4:e0:14:43:c6:
                    58:14:92:60:cc:3c:0c:0c:ba:3d:9a:2a:b2:cb:2a:
                    7e:b4:7b:3e:80:52:f2:b1:e9:99:01:ea:77:23:e1:
                    f0:59:e3:7f:ad:76:0f:3f:6e:84:d6:1f:88:c1:a0:
                    3c:61:1d:ee:47:7e:e7:b9:72:28:4f:11:db:df:60:
                    9e:4d:e4:9c:3e:34:6a:f9:ba:0c:11:ae:dd:91:e0:
                    91:c8:dd:5d:d3:a8:eb:b4:f5:b9:68:87:2f:d6:94:
                    3b:a9:8b:bc:fb:f5:98:42:7a:67:fb:2a:2d:f4:b7:
                    ca:19:3e:d6:c8:f7:36:0d:c7:2f:33:b0:7f:42:5b:
                    da:a6:fc:83:cc:19:1e:94:9c:2c:8a:27:19:8b:c1:
                    0b:de:fe:53:c5:b9:33:51:68:4a:7a:8d:4e:c8:0c:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:3E:7B:50:19:A5:9F:1F:4A:CB:1A:72:9B:6D:B0:9C:06:40:CE
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:f0:fe:3b:ce:25:98:90:8d:d5:35:af:c8:46:a6:06:22:
         db:22:a4:a4:60:aa:2d:4c:0a:59:d3:92:1e:2f:36:30:7d:10:
         19:1c:e4:b2:89:a2:e7:c1:fd:99:fe:a1:9e:39:2c:9d:d4:ad:
         a8:b7:93:ab:c3:dd:b0:01:65:ea:22:f3:76:b7:4b:30:b3:8d:
         1c:1a:4e:86:b2:9c:08:0e:ff:fd:2c:b2:e3:66:bc:da:75:5e:
         6f:6b:e9:6f:e5:69:5d:05:9c:f2:c7:92:7a:ef:91:5a:37:11:
         50:df:a7:0a:d7:db:15:5b:24:f7:ad:c9:d9:1b:e3:e6:bb:ec:
         9d:bf:05:fd:b2:c4:8c:46:70:96:d4:4e:32:60:15:4d:21:11:
         bd:93:eb:d1:2c:58:62:9d:fb:56:24:d7:3e:71:d7:ef:b7:9a:
         6d:3a:69:a1:8d:2f:50:37:46:81:cc:37:42:3c:3c:34:70:8b:
         b2:6d:d6:2c:9a:ab:4f:a8:d3:66:23:66:81:3a:14:ec:c7:d8:
         13:99:13:2c:28:1b:12:9f:e1:49:35:18:7e:a0:c1:c1:08:2e:
         59:d9:6d:1f:23:70:29:21:2a:f9:8a:25:32:bd:e0:e1:8e:c6:
         64:13:e0:7d:ed:1c:70:c8:f6:68:7e:01:1f:d3:ed:16:48:9c:
         a0:1c:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:53 2026 by rpki-client