This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File:                     qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier:          1SQ3n5Er/EQ2im8CiDxCJKf49kyFu5DtansT0tMEb3I=
Subject key identifier:   A6:3D:BA:C0:84:E1:A4:F9:8B:FC:0C:1D:99:11:26:BE:FA:CC:16:8C
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer:       /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial:       019C4434D33FAE90BF5F82459BF61068FB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 21:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:38 +0000
Files and hashes:         1: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: rDIe7F5+oAm3OEljuL2ab3Fg5FN0KwTJOtizClA6rvQ=)
                          2: vdO9ldGlhUGuhMbvEZgQi2UAL6Q.roa (hash: o/PY0zcPwn5EFiTDVfiSoj0UDONeDefYMUGFGgIeJHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:d3:3f:ae:90:bf:5f:82:45:9b:f6:10:68:fb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
        Validity
            Not Before: Feb  9 21:00:38 2026 GMT
            Not After : Feb 10 21:00:38 2026 GMT
        Subject: CN=a63dbac084e1a4f98bfc0c1d991126befacc168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:a5:7a:7e:ab:42:e9:9f:3d:d7:1b:18:07:
                    72:59:37:58:1c:d8:7c:88:47:78:21:aa:71:00:0c:
                    4e:67:8f:a1:4e:a8:96:82:b8:9b:2f:b0:f4:d7:6f:
                    9a:07:cf:02:aa:7f:8f:3c:77:83:8f:c3:aa:d2:9a:
                    6f:04:33:3b:c3:33:42:cc:fa:34:4e:fe:9c:b1:59:
                    c0:1a:ef:ac:75:f2:f7:bc:aa:56:6d:38:fe:88:d0:
                    d5:d2:02:e9:5a:d6:16:77:45:8f:72:57:43:b3:7a:
                    e4:c2:f4:38:48:d4:04:23:d7:54:b1:fb:78:cd:5c:
                    40:53:1d:08:88:0f:85:43:b8:4b:ea:79:e3:ba:09:
                    96:8f:5c:14:2c:a2:77:e6:42:ba:52:ee:9b:09:1a:
                    8c:6c:98:47:cd:c6:f7:53:50:e9:44:58:ab:a2:15:
                    46:a8:2f:8d:38:1d:07:f9:e8:45:9b:f4:8d:4a:48:
                    2d:16:49:7f:7a:91:bd:47:de:c3:74:95:0b:df:b5:
                    1c:ed:aa:76:cd:5a:04:48:32:7a:a7:a3:d1:70:47:
                    09:ba:23:b0:e0:3e:eb:79:30:ce:a8:8a:1e:07:7a:
                    f0:e4:57:8e:dc:c3:ae:a2:91:0d:18:9d:e6:2d:b7:
                    ec:34:30:12:23:5a:0a:dd:5e:79:18:8d:b2:bf:e3:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3D:BA:C0:84:E1:A4:F9:8B:FC:0C:1D:99:11:26:BE:FA:CC:16:8C
            X509v3 Authority Key Identifier:
                keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:e6:bd:ab:34:3a:75:3c:2e:06:92:57:27:40:12:fe:7d:
         cc:72:50:25:26:da:df:d6:ce:3e:b4:49:6a:7a:b6:64:8b:21:
         56:73:64:2b:9b:90:e1:55:61:32:f5:78:aa:47:d6:ae:c6:a5:
         f7:db:d1:ac:04:17:77:36:6b:88:c8:4a:57:5f:7c:9d:33:70:
         dc:c8:fe:78:08:41:64:47:16:2a:51:38:2b:91:36:d6:0c:a4:
         73:61:00:51:ed:eb:2c:c1:65:4f:85:43:b5:ce:98:3f:e6:c8:
         36:93:07:a6:98:bd:4f:b2:73:2c:1d:5d:df:cd:db:7e:d1:43:
         3c:13:94:f0:33:d3:29:e8:4f:e9:c2:42:26:a0:14:7e:b6:2f:
         25:9a:2e:72:2a:51:f4:6f:88:3e:8c:9e:a3:e1:8a:b9:10:34:
         2f:56:a7:17:81:3a:71:cc:5b:4c:0d:b1:f8:3c:91:e9:b1:7a:
         ee:fa:00:ab:2e:7e:68:f4:3a:92:84:3a:33:3e:af:1e:d2:02:
         a2:57:3a:26:6f:4d:5f:12:96:81:15:39:0b:b5:f1:fd:0e:18:
         ca:52:7a:24:04:96:9b:e7:49:45:b4:19:85:8b:b4:f5:85:15:
         27:48:b8:9f:7e:26:9d:d0:de:8d:62:55:f2:dd:98:16:d6:ee:
         16:72:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:08 2026 by rpki-client