This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          y2hzzkxyVFLSVDjH98asP2y3ZMlJJdrXRIS1vRLFKWw=
Subject key identifier:   14:DF:FE:81:14:87:17:0B:B3:EB:A2:BD:6B:51:F6:E9:A3:FF:F1:7F
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       019C44A29E7159EF0FB5530C55ADD0250FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          061D
Signing time:             Mon 09 Feb 2026 23:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:33 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: 0zP8mDEK6vvDI2qAZLdG9PFnW//JnAmqYP8lAGZCvG8=)
                          2: a3MACvt7XrPEY_fMvOjs2dGCc8I.roa (hash: BnSZeJBjA6bMn5RCXClcc6mDzKBCwKOx+bVKk38vQdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:9e:71:59:ef:0f:b5:53:0c:55:ad:d0:25:0f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Feb  9 23:00:33 2026 GMT
            Not After : Feb 10 23:00:33 2026 GMT
        Subject: CN=14dffe811487170bb3eba2bd6b51f6e9a3fff17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:d8:f2:4d:b4:f2:ed:b8:8f:58:6b:79:8e:
                    87:2c:3b:1d:e4:e3:d5:b7:05:c1:f1:04:e0:9b:8d:
                    f7:15:3e:2a:56:20:db:6f:1d:de:a3:52:c9:08:9b:
                    ce:95:c0:2a:f3:4b:43:97:83:92:11:7d:cb:1b:82:
                    92:e4:6b:f7:c1:b3:02:c0:c3:92:9a:a1:9d:8d:a7:
                    c1:dc:85:ea:ed:fb:98:fd:1e:03:a4:7a:b6:3a:31:
                    32:35:a6:fb:4e:20:26:5f:99:02:17:27:8f:b2:0e:
                    73:97:00:41:6b:42:f8:9d:87:45:8a:f7:7e:23:87:
                    f9:5e:68:d8:97:7b:52:a7:2d:7a:37:a0:16:9a:eb:
                    82:6e:a7:41:01:a4:57:c5:7a:37:cd:0c:c7:a8:38:
                    4a:d6:de:68:5c:0e:93:ef:f4:66:da:c9:ec:4b:bc:
                    fc:39:13:c4:9f:42:e9:4c:b4:74:d2:91:36:e7:1e:
                    ec:23:7f:5f:87:3d:9b:54:5d:fa:b2:eb:61:45:1f:
                    de:07:cb:2b:31:a8:71:a7:9a:14:78:7e:29:89:c2:
                    00:a4:61:c4:d7:a2:70:6c:d0:0c:ab:1c:82:ac:14:
                    d1:ed:e8:98:e9:8f:d4:4f:14:d9:1f:20:96:a0:92:
                    0b:a3:65:7c:6d:a0:6a:4b:fb:b9:98:4b:ff:66:e2:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DF:FE:81:14:87:17:0B:B3:EB:A2:BD:6B:51:F6:E9:A3:FF:F1:7F
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:07:e8:14:bb:fe:07:3c:f7:3d:79:6f:57:35:d6:cb:f3:1d:
         85:90:4f:e3:0d:dc:56:9a:20:40:75:80:14:ca:16:c3:88:d5:
         5b:b3:5f:2a:00:00:88:6c:1c:02:08:89:d4:c1:c9:1a:bc:98:
         b3:0c:16:a9:a2:2a:56:e8:6b:78:20:8f:fd:ef:88:70:fe:23:
         34:13:f5:c9:fa:96:f2:e3:86:a8:40:79:f6:b1:1a:84:f7:87:
         57:98:e0:fe:39:28:d9:e1:68:5b:49:39:78:17:64:81:49:92:
         0a:26:bf:45:7d:6e:78:cc:b6:ba:c9:1d:54:78:e5:18:79:f8:
         61:8f:4d:ac:5f:98:dc:f2:46:45:15:85:67:80:cf:5a:bc:5f:
         32:74:1b:8b:67:02:47:13:ec:1e:f7:ee:9c:ba:f3:0d:72:51:
         e4:88:7f:47:c7:98:80:64:2c:3d:01:e0:d3:4d:7b:fb:95:4b:
         72:e6:ec:60:a1:7e:c7:49:77:ca:7c:e1:2c:7e:d6:59:eb:06:
         31:08:a8:0c:ed:59:de:87:38:49:a6:4c:80:6b:89:ed:b7:ed:
         fe:63:25:b9:2a:30:0d:33:e6:79:89:ba:55:ae:ac:23:b5:94:
         16:79:57:e1:34:2f:c0:ca:5d:d7:cf:32:8b:10:1e:2e:c0:60:
         ab:32:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:20 2026 by rpki-client