This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File:                     1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier:          eLno1T8xB76ON5mGi45kyHt5gfHXmZ6Otd+U+MUdva0=
Subject key identifier:   05:D0:30:23:BB:14:96:07:49:46:7E:5D:33:E8:DE:F5:14:3B:33:56
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer:       /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial:       019C420FEE8BCC5F530781DFAAB3B68F6B62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number:          0C1F
Signing time:             Mon 09 Feb 2026 11:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:06 +0000
Files and hashes:         1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: TUjTsHv1v8Iz0asrz6x6xSkTu1v7pxzObEvhwHcLzUs=)
                          2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:ee:8b:cc:5f:53:07:81:df:aa:b3:b6:8f:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
        Validity
            Not Before: Feb  9 11:01:06 2026 GMT
            Not After : Feb 10 11:01:06 2026 GMT
        Subject: CN=05d03023bb14960749467e5d33e8def5143b3356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:92:2d:e3:b6:59:e3:1d:11:7c:88:96:46:
                    ca:d9:e5:56:82:8d:ef:e9:4b:64:ce:fb:9a:13:5f:
                    4a:ce:47:c6:d2:b4:5e:38:21:91:32:f1:54:04:cb:
                    58:eb:6a:ab:e3:7c:ea:05:05:6d:f0:1f:e1:50:ab:
                    5e:48:00:d9:ce:c2:12:08:0d:14:b2:13:d2:82:48:
                    f2:20:2a:9b:0c:7e:6c:b7:6c:28:c1:cf:5c:80:a2:
                    f3:d3:64:41:9d:1a:9e:66:19:3c:00:0e:18:b6:f6:
                    1a:10:cf:2e:12:77:d4:ff:d6:5b:d2:a0:a5:2e:b9:
                    9f:fd:4c:ef:e4:87:f6:ee:18:5f:90:62:be:97:4a:
                    4e:08:b6:71:c5:93:d2:ec:8a:b8:5f:d3:99:c0:15:
                    1f:83:f2:e0:52:9c:ce:af:20:0d:75:dc:61:ff:64:
                    d5:83:97:7b:ae:8d:e4:70:57:71:87:61:19:a3:3b:
                    49:fc:c0:01:05:c2:fd:e3:d2:a0:22:7f:f3:d7:68:
                    3e:a1:e8:eb:1c:01:30:ee:33:83:5b:30:c3:7f:8b:
                    32:ea:bb:e5:ee:bc:83:ed:5a:b7:02:ab:c3:6d:45:
                    7f:d9:5d:63:ff:d3:e9:06:f0:d2:9d:7d:12:97:f7:
                    0f:33:02:34:56:80:ea:01:b5:42:a6:92:a4:ab:93:
                    ea:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D0:30:23:BB:14:96:07:49:46:7E:5D:33:E8:DE:F5:14:3B:33:56
            X509v3 Authority Key Identifier:
                keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:f6:32:bc:0a:82:a1:06:9f:3c:bb:dc:81:27:c5:0c:49:
         65:7f:9b:47:57:9a:01:37:c7:7e:ec:7c:39:38:da:db:3b:13:
         76:f1:f8:b2:4e:07:1a:57:9f:c3:93:20:c8:a2:7b:ce:4e:13:
         f6:f4:dd:b3:20:cf:ed:0e:99:54:8f:43:d7:23:59:2a:81:8d:
         72:24:a7:ae:57:08:29:59:b5:63:b2:b4:5c:fd:62:3a:08:ab:
         b5:48:8d:08:76:b5:ab:2c:10:bb:a1:5a:52:7c:f8:fd:b7:74:
         03:2d:cc:43:a5:9e:8d:8c:ca:52:5a:f8:75:47:49:f3:79:92:
         8b:53:5e:e9:d0:3d:8a:74:b8:ff:1f:94:10:5b:19:77:c6:18:
         c4:6b:b3:fb:6d:9e:24:68:15:6e:7d:96:86:58:c4:ef:14:c1:
         39:06:29:9e:b0:43:1c:d6:b1:cb:a3:2f:d1:ba:3c:2c:ca:4c:
         4f:2a:d5:3d:7f:88:f1:8d:da:44:ee:19:93:6c:43:c3:55:e4:
         88:8e:0b:5e:2c:fc:59:3e:37:c6:8f:6a:ce:4e:bf:cc:5b:58:
         e1:8b:59:bf:d0:14:f7:c9:f8:c1:99:d6:17:58:ef:10:a1:1b:
         84:01:b0:67:9b:91:b8:47:1b:10:d6:75:35:42:a8:4a:61:ac:
         c7:7e:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:44 2026 by rpki-client