This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File:                     qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier:          7IfiuXaDoBz2t8czZf1Cs8jxeJWWl9SvqeIQC9Yd3bk=
Subject key identifier:   00:96:B3:5D:CF:FB:72:4B:DC:92:7C:C0:E8:FF:C1:4A:70:71:F9:6E
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer:       /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial:       019C43591DCD86E702F4DC8213220B7704E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:39 +0000
Files and hashes:         1: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (hash: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc=)
                          2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: EoI2Oa6xyAmPxdsUsmB8RF854ud5MO5I4Pe4a4Bv7tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:1d:cd:86:e7:02:f4:dc:82:13:22:0b:77:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
        Validity
            Not Before: Feb  9 17:00:39 2026 GMT
            Not After : Feb 10 17:00:39 2026 GMT
        Subject: CN=0096b35dcffb724bdc927cc0e8ffc14a7071f96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:e5:10:92:19:5f:64:11:23:2e:53:c4:b9:
                    f7:56:df:dd:09:20:0c:1c:d5:d0:67:df:9a:91:ed:
                    ab:c2:7e:98:77:81:d5:fb:ab:28:c8:e6:07:59:4c:
                    64:7f:11:90:67:7c:69:f1:16:d6:3d:44:05:17:7c:
                    d4:07:12:98:73:75:47:d4:92:3b:9d:83:bb:14:75:
                    c2:fd:d3:7b:fd:b7:c5:a2:d2:72:7a:e3:51:97:5b:
                    b6:06:f9:bf:72:35:a4:4b:05:df:ad:47:ee:23:f8:
                    0f:21:11:41:9c:4d:13:d7:9b:10:a2:2b:be:d2:3e:
                    58:75:10:8d:e1:fa:e7:ee:8c:71:11:b0:46:3d:10:
                    ef:3e:0e:41:f6:62:63:ca:66:48:30:88:da:ed:bd:
                    ab:99:f7:f8:d3:4c:87:18:f9:f7:9b:5a:dd:19:ef:
                    d6:c8:0b:ab:14:c0:06:8b:5a:6f:da:b9:1b:89:d2:
                    19:ae:5b:70:7a:42:57:90:29:38:7a:c2:2d:f1:b9:
                    09:75:ee:00:da:2e:54:5a:08:32:28:7b:4e:4a:8c:
                    c6:50:87:71:9d:68:59:d0:f7:39:aa:2b:6a:17:74:
                    b9:ce:8a:64:cc:fd:6a:17:0d:64:a9:95:8c:4e:1a:
                    2b:1c:b7:ef:bd:4f:23:dc:7d:be:7c:28:86:3c:0e:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:B3:5D:CF:FB:72:4B:DC:92:7C:C0:E8:FF:C1:4A:70:71:F9:6E
            X509v3 Authority Key Identifier:
                keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:74:ee:d7:18:5c:db:19:7b:a5:8f:18:1f:e4:67:76:cc:e9:
         1a:ce:88:c2:92:69:17:15:da:12:61:e1:7e:c7:a2:93:cc:42:
         33:37:2a:dd:25:33:97:17:5c:10:db:35:99:12:84:38:3f:cc:
         0a:b7:5e:c7:11:f2:24:ad:1d:4e:0e:14:41:6e:f2:86:43:32:
         26:36:6a:cd:9c:54:e1:df:cc:8e:4c:f5:a1:af:65:ae:09:31:
         7d:3c:66:c2:bf:54:30:ed:66:cb:0a:b3:35:dc:12:c0:7b:5a:
         ff:80:83:5f:05:77:77:c0:4d:9b:ef:8e:e5:f2:a6:44:3a:12:
         62:7e:25:7b:b0:fa:2e:26:b3:9c:89:a0:95:1c:79:c5:8f:df:
         12:72:85:80:46:22:2f:ca:07:2f:04:95:1e:0f:bd:df:64:30:
         ca:82:b8:23:93:99:52:4f:5a:44:53:53:7f:b5:f2:53:ce:82:
         47:32:28:e1:a0:d5:8f:ee:9c:d3:7a:1b:a7:a4:37:de:93:81:
         7e:44:fb:ae:b8:07:29:46:1a:fb:83:81:77:d3:22:8d:17:e2:
         2c:b0:97:eb:c2:6c:29:a6:46:b6:e4:d4:c3:a3:d3:23:48:38:
         d3:36:49:6e:f7:27:f1:a5:37:82:67:df:5c:a6:5f:c4:ff:01:
         d8:02:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:39 2026 by rpki-client