This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          RsRzRU3XGyC7Wczsw4XO+CsUjT27dTHsB1to9BBCSYE=
Subject key identifier:   E6:4F:9B:80:A6:02:74:61:CC:A1:4C:4E:24:34:E2:72:21:7F:F4:88
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       019C43592044DCFC8E0C91E42AFE3E81C081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          10E9
Signing time:             Mon 09 Feb 2026 17:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:40 +0000
Files and hashes:         1: LKLzayTx02NKt4IYLkBu7eAzfMQ.roa (hash: mj+HEmIxR6MSV3YLRBJoyixi3pfyWUn/3aiy0wIfWXE=)
                          2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: 1xOLZOdFBDJfAawKdBGOs1zvTvj91kfoM9ptJjhD3h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:20:44:dc:fc:8e:0c:91:e4:2a:fe:3e:81:c0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Feb  9 17:00:40 2026 GMT
            Not After : Feb 10 17:00:40 2026 GMT
        Subject: CN=e64f9b80a6027461cca14c4e2434e272217ff488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:04:b1:59:bc:06:a0:f6:96:39:82:67:f3:
                    3b:d0:cf:bc:c7:5a:d1:e9:b3:73:a3:7a:38:ae:41:
                    d7:8d:e1:95:03:12:6c:4f:8b:67:4e:51:18:37:c1:
                    39:69:bf:39:d1:54:1a:2f:57:ec:b5:eb:7a:a0:4c:
                    0c:f7:8c:b3:7b:8f:82:6c:c3:86:ff:78:21:28:e3:
                    ee:d2:fb:21:b7:f1:88:1f:bb:30:a0:cb:52:48:d5:
                    fd:72:1b:4f:8b:05:4a:63:78:f2:18:60:84:a2:18:
                    f0:23:78:f5:99:a0:1f:c5:bb:b0:6e:0e:65:48:d5:
                    a3:ea:e6:fc:51:5b:17:f7:52:c5:3b:4e:ab:f5:22:
                    45:7b:ba:85:2b:5a:ed:49:a0:b4:68:05:c6:cd:f9:
                    23:c8:06:07:a4:e5:cf:4f:bf:7b:24:71:15:8d:73:
                    0b:e0:23:30:7e:54:6a:e0:5f:f8:db:48:27:46:f9:
                    1c:17:92:a6:b6:cc:0a:92:66:bc:92:00:37:af:45:
                    95:a0:58:e8:9c:42:be:d7:93:6b:15:59:b4:fb:cb:
                    2b:b9:e6:6a:3e:e6:d9:77:50:f9:10:12:a5:e7:bd:
                    dc:fd:81:e3:ef:99:50:40:fc:38:3d:67:16:cc:af:
                    49:6d:d7:e5:7e:4a:c1:58:80:c5:7a:f7:0a:88:3b:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:9B:80:A6:02:74:61:CC:A1:4C:4E:24:34:E2:72:21:7F:F4:88
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ab:6b:da:80:ad:66:84:0a:db:06:94:66:42:05:6d:86:1e:
         8b:7b:4a:0f:dd:d7:7b:94:11:83:df:86:12:7e:81:75:a5:37:
         aa:a0:2a:4a:07:38:84:70:2b:96:7c:3b:7c:43:b8:c2:0f:49:
         68:b4:00:39:6e:67:a1:10:78:bf:e4:bf:6b:fb:a2:4f:b6:b3:
         8b:6f:2c:44:3b:5a:27:26:92:fe:98:4f:54:39:70:8d:71:6b:
         f3:5c:c6:db:08:96:84:77:1c:19:fe:7f:aa:52:b2:4a:00:68:
         de:7a:af:64:fb:77:a6:e6:9d:0c:a9:bb:52:16:83:95:81:9c:
         76:54:70:ea:33:c7:3e:2d:b1:2a:6f:fa:4f:46:0b:39:6f:27:
         cd:46:22:bd:3b:ed:11:be:27:93:3e:38:bc:98:df:a3:ae:61:
         59:0f:ba:41:68:8d:df:7e:4f:e5:28:9b:99:90:4f:f3:4d:f5:
         ae:81:3f:d8:6d:bc:2d:77:99:3b:c6:8e:bc:40:8d:01:da:e2:
         67:a9:65:da:78:83:d7:e4:2e:ba:9c:7c:f9:ae:06:37:fb:32:
         0e:5d:58:90:1b:b5:8f:b6:46:4a:5a:47:d8:bc:44:84:bc:2d:
         81:16:22:ba:44:7f:96:3b:e2:66:70:85:fb:5c:27:c2:57:f2:
         46:9d:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:51 2026 by rpki-client