This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File:                     QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier:          YJnlhHyR1nqWPSkVjNJyjvW3PwhOtK4TWIIYWEQOImk=
Subject key identifier:   3A:72:B6:6B:58:42:FA:28:9F:50:ED:35:68:9A:99:40:E8:D4:96:F0
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer:       /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial:       019C446C199BF61288023A189F69101B93FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number:          0499
Signing time:             Mon 09 Feb 2026 22:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:00 +0000
Files and hashes:         1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: nr0eiXvdQ9ye7FhD0HGsmJHihbqUna9IWRPmATChayw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:19:9b:f6:12:88:02:3a:18:9f:69:10:1b:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
        Validity
            Not Before: Feb  9 22:01:00 2026 GMT
            Not After : Feb 10 22:01:00 2026 GMT
        Subject: CN=3a72b66b5842fa289f50ed35689a9940e8d496f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:a7:3a:fb:60:54:59:9f:cc:49:3b:63:c0:
                    1b:bd:42:28:d2:ae:e9:d2:a6:1d:b7:12:cc:ef:ea:
                    18:a0:4c:9a:52:4e:8c:f4:3a:8e:fe:34:e0:33:95:
                    30:54:ae:49:98:b4:80:b5:4a:84:3b:cf:ff:3c:f1:
                    a1:a4:00:d0:bc:ff:44:3a:f7:8a:3c:26:cf:c3:60:
                    62:e7:2a:9d:f5:1d:b9:4b:54:1c:a4:c8:d3:b9:8d:
                    f5:f6:cb:8c:a3:b4:2a:76:27:2f:82:8f:35:e5:3d:
                    c8:7c:46:59:36:26:ae:10:08:ce:35:87:dd:94:dc:
                    44:06:60:7f:38:66:6c:55:99:ed:fd:0e:2a:b4:80:
                    44:86:47:54:e4:79:de:21:af:c2:15:ac:5c:f2:76:
                    82:89:86:60:fa:3b:16:3b:d6:c6:f6:01:02:33:78:
                    e8:b3:c8:67:42:03:10:76:19:83:a0:04:e5:8f:5b:
                    f7:0b:1f:41:02:3d:72:08:6f:c1:ac:0e:51:57:f3:
                    90:7e:b5:82:da:22:83:0a:a2:0a:1b:6c:53:94:b9:
                    0c:e7:63:18:52:21:5e:86:18:33:65:5b:f6:74:d3:
                    de:55:7c:62:7b:c7:01:ea:ec:5f:94:70:e7:75:cb:
                    f5:1b:01:be:4e:ca:47:a3:e8:da:c0:63:7b:8b:3b:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:72:B6:6B:58:42:FA:28:9F:50:ED:35:68:9A:99:40:E8:D4:96:F0
            X509v3 Authority Key Identifier:
                keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:24:16:9b:51:1d:27:b5:93:96:7f:93:ad:f0:70:61:40:70:
         14:7f:28:3e:8d:2c:90:8b:aa:2f:89:a6:81:17:74:5f:a5:59:
         ad:37:35:cd:50:37:10:e3:96:30:e7:f4:d4:f4:d5:36:a7:52:
         5e:69:a3:57:77:25:15:3d:76:ba:12:11:99:b6:2c:11:85:c9:
         20:56:24:96:4d:18:92:e7:c5:04:de:03:6f:bc:f4:bd:ae:76:
         2e:d7:48:ca:23:31:22:6f:77:77:e9:09:e6:9d:cb:bd:60:d6:
         59:3e:dc:8f:4e:40:23:92:c5:f1:6a:4c:d1:a6:12:a7:40:a3:
         14:ac:63:e9:fe:6b:af:e2:ab:32:2e:10:61:1c:04:70:fa:e2:
         35:63:bb:38:93:68:9d:f6:ba:ec:57:9a:8c:56:dd:c6:e3:7d:
         94:56:4f:5f:72:59:a5:0b:39:d5:b9:b7:be:8c:6b:e5:cd:c5:
         de:4d:0a:a8:f9:4d:e9:74:13:1e:2d:79:45:8e:1d:62:3f:e5:
         8f:38:bc:57:5e:4e:c4:37:d7:17:62:c7:de:4b:2a:77:95:7c:
         13:51:1e:d3:b5:ac:f6:3b:c7:60:07:5b:24:2c:e5:0d:12:a5:
         1e:6d:e7:9d:f3:cb:01:08:1f:93:4b:fb:5e:79:7a:0d:0f:c2:
         85:95:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:50 2026 by rpki-client