This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File:                     Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier:          bK95aorT7UdwlWq5wsEg5thgt1am5rdZyGQUQigXkZY=
Subject key identifier:   34:4B:51:3A:82:E6:21:24:90:7E:F3:8E:13:93:0E:E2:83:5E:EB:09
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer:       /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial:       019C1D27DCB4FFE308085AD924259411888C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number:          1802
Signing time:             Mon 02 Feb 2026 07:01:17 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:17 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:17 +0000
Files and hashes:         1: 4y1JQl0QLEBS_BNdrLQuSC6LhR0.roa (hash: KtU15+pz0sbhHDi9/9VYRt353S6NK31g+91+wTuAnJU=)
                          2: IfCIGV6zS3eX3vrkVoCyaiuLLK0.roa (hash: MoGcDGwcD77DZEydBhOscggWfX3MXzUebWjWnn1BBas=)
                          3: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: j4lNy5angeFRAgzG3kQnI4jptJjNeeTw3mv0OV0fBTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 07:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:dc:b4:ff:e3:08:08:5a:d9:24:25:94:11:88:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
        Validity
            Not Before: Feb  2 07:01:17 2026 GMT
            Not After : Feb  3 07:01:17 2026 GMT
        Subject: CN=344b513a82e62124907ef38e13930ee2835eeb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:0d:30:d0:0b:34:13:60:2b:1b:80:9f:47:
                    03:ea:32:cb:fe:af:3b:83:1a:f5:26:3d:94:bf:b7:
                    0e:ac:4c:0d:95:90:29:d7:9d:6c:66:a4:f1:f8:04:
                    45:0b:55:f3:e2:a7:cd:b0:71:80:22:00:21:27:20:
                    5d:b0:86:85:88:f2:19:f2:19:34:34:05:f5:2f:49:
                    cf:fe:75:40:11:bc:96:a2:30:f1:a9:61:d7:df:59:
                    05:84:91:8d:14:a5:c8:c0:ba:d9:56:c4:ad:e3:ad:
                    75:ad:38:96:4a:c2:87:61:31:82:64:0d:28:40:f3:
                    ac:a1:e3:17:6f:5c:b4:0c:c0:b8:a5:53:81:3f:09:
                    c9:e4:bd:d1:36:83:33:29:97:2a:2f:54:a0:ce:bd:
                    2e:cb:5b:2c:e7:c3:6b:2a:6d:ca:c5:d2:8d:42:c3:
                    4b:0f:91:b4:33:fb:63:f8:af:b6:e4:77:26:22:4a:
                    88:a7:5a:26:5b:12:1c:c6:01:e0:85:70:c4:58:44:
                    b6:40:34:16:37:3a:1d:a5:af:2b:01:eb:b2:0f:88:
                    63:b7:e5:79:cb:5c:c4:3f:58:e6:8e:cf:07:00:16:
                    2e:49:c0:7c:37:37:1e:5b:c0:86:00:7f:73:4e:d8:
                    78:33:34:b7:1a:20:5a:22:9c:52:35:f3:93:e7:8e:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4B:51:3A:82:E6:21:24:90:7E:F3:8E:13:93:0E:E2:83:5E:EB:09
            X509v3 Authority Key Identifier:
                keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:33:1a:a6:0c:dd:b5:a0:32:03:18:76:6b:32:33:73:54:
         54:f6:75:db:f9:7d:45:30:23:9b:64:b0:09:fb:f4:02:09:38:
         6d:a6:11:ec:b5:09:cb:7e:27:38:06:70:b3:4d:8b:71:8e:e6:
         57:6f:b3:1e:a5:4e:ed:36:7d:26:3c:ec:8c:21:d3:ca:8f:62:
         89:e0:41:09:ab:56:d2:ec:e0:df:12:73:11:22:38:84:cf:d7:
         de:f6:20:87:2a:5b:60:96:91:f5:d7:6b:91:d6:f1:46:71:ea:
         2c:6e:fc:69:c6:6e:d4:e0:ca:07:28:94:5c:45:86:b0:3c:0d:
         54:e2:1e:2e:33:bf:35:b0:fd:76:64:a7:9a:c2:fd:79:e5:10:
         95:65:76:cb:d3:c9:d7:f6:09:02:0f:0a:65:d4:32:82:b9:b8:
         6a:01:4f:7a:53:8e:00:79:2e:e9:78:43:c2:32:48:e8:55:bf:
         c5:e1:3a:81:b3:e6:61:5e:70:d9:5f:b2:ce:69:0f:28:a4:04:
         cf:a9:fb:de:65:75:1a:01:6c:68:60:e6:6c:bc:2b:70:b8:81:
         ac:19:5a:d3:91:67:4a:21:44:a7:b6:99:e6:98:53:b0:ad:14:
         07:61:b9:4c:7f:58:ec:e0:88:a1:18:df:c8:21:86:4b:c9:af:
         e8:11:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:16:27 2026 by rpki-client