This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File:                     02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier:          lrneWlKiUHsPgO3weczdemkee7aXJqn790m87lNtm3o=
Subject key identifier:   CF:E1:6B:D5:24:BF:22:47:45:0D:5B:AC:88:8B:6A:6F:01:A2:E9:C3
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer:       /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial:       019C46239B690CF54E9666901314E2AC5D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number:          0EE1
Signing time:             Tue 10 Feb 2026 06:01:04 +0000
Manifest this update:     Tue 10 Feb 2026 06:01:04 +0000
Manifest next update:     Wed 11 Feb 2026 06:01:04 +0000
Files and hashes:         1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: 2PLDihT5vc9KJmB8FWbDDvP8NDuCSy+BcBXUFyO0Yd8=)
                          2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:23:9b:69:0c:f5:4e:96:66:90:13:14:e2:ac:5d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
        Validity
            Not Before: Feb 10 06:01:04 2026 GMT
            Not After : Feb 11 06:01:04 2026 GMT
        Subject: CN=cfe16bd524bf2247450d5bac888b6a6f01a2e9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:bb:a3:2c:58:40:0f:45:01:14:78:b2:4f:
                    2a:1d:40:7b:4d:40:6f:d1:c0:c3:7b:08:14:5a:2a:
                    27:d3:3e:89:b9:7c:65:b4:d2:cf:47:34:b8:8f:be:
                    39:e1:3e:b5:1f:30:1f:a3:8f:c9:bd:f1:0a:12:60:
                    90:30:a6:a6:a7:0f:25:60:ae:b3:74:2e:99:02:d0:
                    e5:3b:45:fa:7c:68:94:5d:d9:dd:33:87:be:7d:88:
                    f7:ec:c7:c1:6b:7b:19:ef:92:ee:7f:91:6f:89:92:
                    27:0e:87:37:92:cf:4a:1e:3a:c6:98:7a:2b:43:a8:
                    a7:5d:f8:86:48:b7:85:ee:db:12:ae:35:78:43:85:
                    be:e2:e1:77:f2:9c:1d:1b:c5:cf:bf:c7:7f:81:a0:
                    8b:46:57:ec:e4:7c:00:70:d4:d5:79:c6:77:c6:af:
                    9b:ed:ca:a4:3d:82:45:a5:57:2f:b3:b0:63:7f:ae:
                    cd:ab:57:c4:d3:d1:fc:ed:8c:ce:c4:ef:9e:10:1a:
                    74:a6:6a:46:25:53:25:5d:70:3d:e4:a3:11:ee:38:
                    bf:aa:12:3a:8a:ef:69:b5:0d:ba:34:90:c6:15:aa:
                    ba:78:39:68:31:dd:28:b3:be:85:2b:1b:c4:c8:46:
                    bd:7d:1c:18:77:11:10:03:aa:cf:2c:a8:70:92:d9:
                    a1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E1:6B:D5:24:BF:22:47:45:0D:5B:AC:88:8B:6A:6F:01:A2:E9:C3
            X509v3 Authority Key Identifier:
                keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c8:c8:d2:c8:7b:14:20:46:04:1b:b0:24:d2:fa:de:67:ea:
         ea:e6:e4:a5:76:87:b3:2d:16:ee:bc:b9:82:9e:28:bc:01:99:
         d3:8d:37:42:ef:d5:1a:c0:38:67:a3:d2:cc:c0:32:c1:db:4b:
         c3:b1:d1:db:e5:aa:2d:b6:0b:00:37:6d:06:22:d4:d7:35:9f:
         aa:6f:7e:53:74:4c:8a:7b:f3:08:98:ee:7d:f8:b6:6f:4d:cf:
         50:b4:e3:89:a7:0b:cc:6c:e4:a8:43:1b:4b:eb:70:e4:de:7e:
         0e:32:95:f9:ce:46:3a:7f:cc:41:c0:b9:8d:31:f5:57:0d:2a:
         a7:07:34:bd:51:db:e5:2e:5e:9c:d7:dd:53:38:10:f4:11:2f:
         2c:24:2a:7f:89:a6:29:be:c8:5d:eb:35:b2:2a:ab:f5:0f:7a:
         25:ad:9d:63:ec:06:02:6f:25:2f:cb:54:e8:a8:12:db:b0:8f:
         91:da:72:ee:ac:38:af:da:2a:f3:46:7f:0c:3e:52:72:21:fe:
         cf:e2:c2:99:83:da:bb:be:68:c8:36:d5:02:77:d0:ca:b2:dd:
         1d:68:4e:69:9a:c7:7a:7c:0b:a2:d6:c3:53:82:80:a3:03:a2:
         5d:f7:0b:41:4e:45:97:33:2f:ea:c9:9c:e3:cd:c8:66:ab:db:
         32:ca:94:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:02:36 2026 by rpki-client