This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File:                     QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier:          YaXDUPZivW8FiKCaaJ3lNjiRBgO/sNaRT7WNXwRg+cg=
Subject key identifier:   D7:9F:08:FC:AD:79:5A:BE:77:61:47:61:B9:55:46:E5:CB:4D:93:EE
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer:       /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial:       019C4246A07507D963EFCD47AC1BD2F79277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number:          1516
Signing time:             Mon 09 Feb 2026 12:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:50 +0000
Files and hashes:         1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
                          2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: un8FFfZQTXUXSadLLzRuAm62hqCETx9DrbXSD9s4qf4=)
                          3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a0:75:07:d9:63:ef:cd:47:ac:1b:d2:f7:92:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
        Validity
            Not Before: Feb  9 12:00:50 2026 GMT
            Not After : Feb 10 12:00:50 2026 GMT
        Subject: CN=d79f08fcad795abe77614761b95546e5cb4d93ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:4f:3a:6a:42:71:fa:1f:17:f5:ee:8b:4a:
                    da:14:97:9f:73:ab:a1:27:ac:a3:f8:38:af:e4:13:
                    36:af:39:25:a8:6e:b6:9e:c4:a4:66:9a:25:ef:bf:
                    31:35:79:72:e5:a4:79:1a:d4:bf:41:b6:6e:1e:c3:
                    18:a3:de:a0:6d:98:14:c6:83:72:e9:7d:96:18:2f:
                    5e:ae:54:f0:d8:c3:36:a6:43:44:74:94:cc:4c:a6:
                    d1:eb:ce:59:6d:e5:d8:b4:5a:da:8a:b3:e5:aa:86:
                    52:c4:1a:98:97:76:ea:48:31:74:48:26:c9:55:c4:
                    b3:6f:88:e2:9b:2f:2c:91:a2:97:0b:48:d9:b8:54:
                    0b:4e:49:b6:b3:c5:5d:76:41:d0:6b:f5:25:57:c2:
                    75:15:69:58:6a:03:02:1c:29:3f:ee:40:a9:db:45:
                    65:42:f0:61:1d:6b:4e:36:d7:11:f0:8c:11:6d:5f:
                    16:04:1c:0c:14:b4:d6:10:cb:2a:e2:52:cb:24:7b:
                    91:b0:29:87:7b:79:ac:3b:c1:87:f5:91:e5:7e:60:
                    47:1f:97:69:72:7e:1e:3d:68:15:fc:f1:a1:fe:b1:
                    85:5d:da:27:cb:93:dd:0f:bb:25:5a:24:9f:34:b5:
                    5d:82:4b:cc:d3:e2:60:0c:cc:53:62:45:37:41:c3:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:08:FC:AD:79:5A:BE:77:61:47:61:B9:55:46:E5:CB:4D:93:EE
            X509v3 Authority Key Identifier:
                keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:60:6a:fc:96:4f:84:b1:3e:fc:fb:7a:8a:56:a8:0c:da:3d:
         31:ef:28:04:0a:29:01:78:07:a1:bc:a1:1c:ba:0f:ef:47:dd:
         f0:56:ff:d6:64:1b:bb:72:b8:ad:cb:0b:ee:1b:6c:a0:53:92:
         2e:5d:e8:a2:42:10:0c:c4:6a:ec:67:45:a0:60:69:f4:8c:2a:
         f4:37:37:5c:b7:b6:b7:bd:60:60:f5:8d:b1:54:58:75:53:2f:
         fd:39:e7:07:cb:a1:3f:a0:3f:79:26:28:82:55:33:79:d2:4b:
         10:ce:a5:b2:ff:e5:f2:08:42:fa:a6:42:b2:97:2f:c8:36:6a:
         1a:2c:46:e0:92:6e:58:0b:13:0f:d0:ff:ae:0f:1a:af:84:da:
         2c:d4:fc:18:0b:6e:05:d4:2c:32:9c:03:91:d2:f3:00:fa:d0:
         1c:06:93:31:36:d2:dd:c2:04:7a:f7:f4:85:ae:71:69:cb:08:
         f1:9a:de:ef:22:e5:d4:ef:bc:b9:86:77:76:a2:b7:62:92:b7:
         92:7c:5d:0e:16:ac:44:74:16:c6:6c:ff:29:ea:70:95:aa:d6:
         6d:6f:de:fa:08:58:9f:ef:11:8b:30:fc:be:20:9c:3a:2b:32:
         6e:e0:f4:c6:67:33:9a:5d:8b:70:0a:38:d0:34:9f:ce:d7:bb:
         a3:f2:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:19 2026 by rpki-client