This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File:                     QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier:          Hl7wnKW7x2DD7DhRWc+X3Fv8YiYcIhkkfof7HtBu0EQ=
Subject key identifier:   1A:50:53:99:C1:75:0A:2B:6B:1D:DF:5D:7C:6B:D6:DD:6A:21:3A:E3
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer:       /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial:       019C439027636CEB51695AC06B1401F0F0F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:46 +0000
Files and hashes:         1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: AUDJHyMadX51qSCRZlbOgkwuD6BWQ3xh/6lEkrLTqT0=)
                          2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
                          3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:27:63:6c:eb:51:69:5a:c0:6b:14:01:f0:f0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
        Validity
            Not Before: Feb  9 18:00:46 2026 GMT
            Not After : Feb 10 18:00:46 2026 GMT
        Subject: CN=1a505399c1750a2b6b1ddf5d7c6bd6dd6a213ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:37:7d:12:ea:41:62:6f:86:e4:f6:84:b7:
                    05:f7:b7:4f:fd:58:eb:84:e5:6f:4a:9b:03:de:06:
                    98:9b:a7:35:cc:0b:19:54:15:d4:36:43:66:6d:9a:
                    b1:1c:3a:27:8c:02:e4:d7:59:93:f9:f0:aa:74:d4:
                    11:81:92:c0:e8:f0:75:53:71:5f:9c:27:d1:db:93:
                    4e:d4:a8:90:e7:96:14:82:3a:02:d1:56:90:6e:f7:
                    bb:1a:eb:67:12:79:38:c6:76:a2:7e:e8:1e:d1:a3:
                    9b:20:97:f1:db:49:9c:bf:4b:de:cb:15:7e:e3:90:
                    4e:4e:81:3d:b0:46:1d:6c:e6:47:01:ca:43:69:b8:
                    30:6f:60:51:2f:1a:48:ac:5a:e2:cd:f2:fb:cf:9b:
                    8a:35:bc:ca:b2:89:2d:e0:e1:87:df:4e:b9:94:a4:
                    3e:ff:b3:4d:d3:34:35:fa:2f:6d:91:b9:1c:bb:b9:
                    e3:db:54:82:85:99:76:90:c0:8b:21:7f:2e:78:38:
                    99:fe:c2:71:a8:c3:0a:bc:a9:6b:28:47:6e:f3:71:
                    3b:71:62:51:0d:cf:54:ad:a5:f3:1c:0c:a5:3a:ab:
                    36:12:53:86:80:34:96:bc:62:43:6e:9d:18:aa:0b:
                    03:88:2c:4b:81:b2:fd:00:42:89:12:c7:e8:2c:d0:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:50:53:99:C1:75:0A:2B:6B:1D:DF:5D:7C:6B:D6:DD:6A:21:3A:E3
            X509v3 Authority Key Identifier:
                keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:be:0f:da:b7:e0:c4:31:fc:31:ab:41:8a:92:5e:b3:a4:56:
         dc:99:7d:e1:2f:95:10:e5:c6:73:f8:d8:f9:38:45:53:f8:6e:
         4e:bc:db:34:5b:e3:ec:c2:f6:41:55:8a:7e:94:e8:bd:85:1f:
         99:cf:b8:c6:e2:fc:87:9e:4b:6d:7f:13:28:65:f0:2e:7d:48:
         f6:27:2a:df:e1:fa:b2:14:a9:df:37:16:60:38:8f:05:ae:01:
         b0:4f:ec:b8:d7:67:03:6c:8d:3d:19:d2:2c:ef:28:a0:a0:11:
         3a:f0:5d:ff:b7:09:61:45:8f:c7:21:d6:71:19:62:9d:f9:ea:
         bd:32:95:fa:fe:e1:9a:3b:34:e4:4c:34:40:e9:46:f1:77:8d:
         1b:f5:a7:f6:7f:62:52:1b:75:2e:9d:dd:83:c9:d8:37:fc:9e:
         11:31:08:31:f5:0d:f0:69:7f:09:59:29:f1:80:aa:d4:14:d6:
         2c:88:e8:ae:ea:25:5b:de:96:ba:23:17:8d:cd:10:3f:75:ca:
         22:2b:5b:a1:0f:fc:5c:1e:06:fa:f6:1d:96:e5:cb:29:61:17:
         75:21:bc:ab:e7:db:17:53:3b:39:4b:4d:de:c0:e3:e7:7c:6c:
         c5:ce:4b:ff:df:c0:69:90:d4:ca:f7:16:d4:08:be:13:ff:1f:
         42:6e:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:58 2026 by rpki-client