This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File:                     QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier:          Bre/EiR+ev0yHmcYKwd2Xry2lu93RTyNI9cNN6Qv1vs=
Subject key identifier:   AE:ED:A2:11:03:F4:2F:CB:7E:2E:94:73:6B:32:C6:84:AA:CF:CF:C8
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer:       /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial:       019C427D97C469F553B77419C319BE7FB398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number:          1190
Signing time:             Mon 09 Feb 2026 13:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:52 +0000
Files and hashes:         1: OmlEv8SyYC-m1TaGxQaTkL9S65Y.roa (hash: aK0mESa/pTNFNbE9AYjmY5ObclP62vz5mDsyUcql268=)
                          2: PKIsDHUR7jxFAsus-wdsRMLiSqA.roa (hash: gaSVKfmjUGAGycTPbk7kLy1z07Kh829WcikSnbJ29nU=)
                          3: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: c6Om5lh7IF0Gdfj/24H10gO+RiAT5H4r9lzIw+oU3gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:97:c4:69:f5:53:b7:74:19:c3:19:be:7f:b3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
        Validity
            Not Before: Feb  9 13:00:52 2026 GMT
            Not After : Feb 10 13:00:52 2026 GMT
        Subject: CN=aeeda21103f42fcb7e2e94736b32c684aacfcfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:cd:ca:c3:54:1e:0f:64:38:ab:97:0a:1b:
                    84:fc:df:43:cc:76:43:dd:ed:6a:b2:a1:d4:64:89:
                    4f:3c:c9:71:27:1f:e3:7c:31:95:2a:78:8c:be:7d:
                    14:c5:27:a3:4d:76:e8:04:15:06:81:e7:09:a8:b9:
                    79:67:f6:02:05:1f:27:56:4d:74:3c:74:e7:99:d8:
                    f9:8e:d4:6d:59:da:03:bb:8c:a6:f2:81:a4:f0:60:
                    4b:c1:a3:f2:bf:65:59:67:16:17:eb:35:c7:4c:1d:
                    5e:fc:a6:30:65:b9:c5:85:40:fc:79:d6:8e:d7:93:
                    b4:d5:96:9a:57:17:17:fd:30:09:4c:1b:94:72:ea:
                    8f:25:7c:22:6b:ff:44:92:32:fe:55:98:15:d8:f5:
                    5f:df:02:9d:d3:20:e4:c8:5e:b1:87:13:73:50:7a:
                    09:37:db:0d:f4:79:e6:04:07:e6:57:80:86:08:af:
                    fb:8b:04:80:78:2c:70:f4:4f:84:bb:3a:c8:fd:e6:
                    d0:4b:71:73:a5:ab:67:3e:cf:72:fb:ee:9b:bc:97:
                    2a:b2:b2:fc:fe:8a:2c:bc:16:43:0f:de:25:55:00:
                    6b:39:3b:90:a0:17:9e:c0:d4:63:f7:01:5d:dd:8b:
                    cc:2e:b8:b1:cf:23:c3:c2:95:8a:6b:75:ca:b2:13:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:ED:A2:11:03:F4:2F:CB:7E:2E:94:73:6B:32:C6:84:AA:CF:CF:C8
            X509v3 Authority Key Identifier:
                keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:3c:a4:fd:80:60:4d:05:8d:d2:f0:f7:4b:89:f6:2b:b1:
         cf:8e:da:98:bd:5c:2a:31:2e:84:6b:5e:57:8a:2d:75:ec:e1:
         a4:6b:4d:fa:60:f3:24:6a:98:7f:d3:ba:d7:93:62:41:07:13:
         09:12:0f:3a:02:dc:8a:35:76:7b:de:5c:2a:4d:6c:e0:1f:5d:
         d5:cd:13:14:70:a3:11:35:cb:3b:5a:f5:6a:ac:b6:06:b7:31:
         01:0f:7e:82:69:d1:e7:17:5b:d8:d1:f1:3c:d6:b3:b3:b2:e5:
         c3:2b:c5:19:2d:69:f2:52:39:d5:ef:81:4e:cc:12:18:aa:28:
         23:96:e8:86:0b:2b:d7:ca:fc:52:3e:9f:e6:59:ed:9b:4e:5c:
         aa:6c:db:12:40:4d:ec:c9:8a:06:03:a1:ca:89:3d:ad:ca:a0:
         3d:35:cb:4d:09:5b:c7:cc:67:52:27:b2:e3:58:23:d7:ce:b9:
         e0:a2:22:60:df:ca:6c:20:25:75:23:70:a3:0a:df:1e:ae:05:
         f2:04:06:4a:8f:0d:a1:8a:08:97:79:c6:f6:55:9e:01:29:58:
         9a:27:96:c5:e3:61:cb:7b:ff:0f:9b:a4:df:33:60:e7:60:a7:
         7e:d9:35:1d:68:37:86:4b:93:0b:a7:89:68:e0:04:1d:60:c8:
         b1:89:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:38 2026 by rpki-client