This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          UIR79qOUZWsfii1i96Tk9InrtR+FllMpzVWmx6Ui1Sk=
Subject key identifier:   89:BF:8A:C3:C8:A3:AC:E7:89:20:59:1E:AA:82:91:61:3C:3D:31:FE
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       019C42EB70090541E82DC83BD592C0FE9097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:51 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: 5cKW9HasX6Nck9idJmCC0FLVUAmfoi/wc2Qrx26Oquc=)
                          2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:70:09:05:41:e8:2d:c8:3b:d5:92:c0:fe:90:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Feb  9 15:00:51 2026 GMT
            Not After : Feb 10 15:00:51 2026 GMT
        Subject: CN=89bf8ac3c8a3ace78920591eaa8291613c3d31fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:58:12:75:0d:0f:9d:6a:3c:59:db:75:d5:
                    97:a1:02:be:5a:16:db:aa:8c:f4:a2:b4:a6:a1:63:
                    b1:b4:a1:7c:3a:33:92:c1:e7:13:0a:da:ed:a9:f5:
                    c8:ee:6e:11:57:95:08:cb:07:68:35:b5:32:ee:bb:
                    d8:f7:6c:59:b7:d7:bf:1f:21:91:d1:34:2c:13:d2:
                    a3:52:66:ec:cd:80:ab:24:3b:f0:4b:25:e5:c3:a4:
                    02:06:af:fb:63:39:31:f2:0c:4b:eb:af:5a:a3:f7:
                    7e:02:94:b2:5c:43:91:89:dd:f2:23:ef:b2:a6:94:
                    2c:ad:05:d3:e7:db:2c:f6:0e:1b:0a:ff:56:c8:9a:
                    e8:99:49:cf:d5:d2:d4:62:e7:cd:1d:85:29:fb:5b:
                    60:d7:bd:48:4d:c0:1b:86:7f:c7:7c:45:b6:ae:0f:
                    ff:e1:fe:45:fe:34:f2:59:5d:d2:14:11:cd:60:97:
                    a5:50:cf:e4:61:c7:b9:6b:88:b8:e5:ac:4b:da:f1:
                    1d:bb:06:1f:bb:67:67:68:21:e7:e6:30:d8:4d:ed:
                    1a:d3:67:08:fe:4e:e2:6e:4a:5b:53:62:68:d2:9e:
                    8b:44:ee:56:86:89:83:70:71:51:f8:38:55:9b:0d:
                    6d:2e:df:4b:1c:34:55:ce:1e:43:8b:4d:3e:a8:58:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:8A:C3:C8:A3:AC:E7:89:20:59:1E:AA:82:91:61:3C:3D:31:FE
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:f5:b2:15:22:89:36:64:04:c2:b5:c8:6b:3d:64:8a:88:
         90:93:3a:94:97:85:da:64:10:89:f0:44:2f:41:85:74:a7:cd:
         e4:4a:8d:9a:b0:27:c1:74:eb:c7:6f:ea:97:ee:da:2a:94:bf:
         0f:99:e4:6f:de:74:48:41:e7:39:48:82:73:88:cb:1f:e4:44:
         0b:37:1d:11:8e:53:af:df:a6:20:eb:bb:02:6d:0d:9e:14:e5:
         34:20:60:28:06:10:c0:ca:75:00:13:d7:f5:28:7f:1d:26:82:
         27:59:3b:91:19:f2:ef:0e:b4:22:ec:0a:ab:6d:fb:f7:24:60:
         3f:b8:0e:dd:49:39:16:40:cb:9b:3e:2f:3f:a4:60:85:fa:82:
         5d:25:8f:a3:91:41:79:da:64:a1:3d:35:1f:2c:b3:27:eb:00:
         2f:fd:41:28:5c:66:dc:49:63:12:27:f8:3c:e8:cb:28:d9:3c:
         06:eb:84:e5:aa:f6:62:c3:b2:62:7c:4c:45:39:6b:fe:83:2a:
         85:97:95:9c:a3:7e:0c:dc:7c:d9:42:f7:30:94:45:29:f5:93:
         b3:f2:69:0a:f3:79:80:52:2c:64:56:5b:e1:9e:f6:02:ca:bc:
         55:66:40:ec:c0:ee:12:f2:60:ee:a8:b1:73:8b:32:61:17:73:
         26:2a:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:16 2026 by rpki-client