This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File:                     qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier:          z14W9zDw40mTlqT8cQTC3Mscnhplhw3JUPJaBzAQVZo=
Subject key identifier:   BE:28:D7:B2:5A:67:95:0E:4C:28:7F:86:B3:2E:ED:65:56:47:E2:20
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer:       /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial:       019C41A26C47CAE2890A1ADAA6D804BFD505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number:          075E
Signing time:             Mon 09 Feb 2026 09:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:29 +0000
Files and hashes:         1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: FEUrWD6s4XUOkLMtNKRLZsFgCXvwg9zm6+LeIV1rHOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:6c:47:ca:e2:89:0a:1a:da:a6:d8:04:bf:d5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
        Validity
            Not Before: Feb  9 09:01:29 2026 GMT
            Not After : Feb 10 09:01:29 2026 GMT
        Subject: CN=be28d7b25a67950e4c287f86b32eed655647e220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:e9:f3:39:c6:ea:b7:e0:9a:51:d4:64:c8:
                    0d:ee:0e:3c:7c:f3:e3:fc:ca:6d:1b:8d:ea:00:eb:
                    7e:69:38:47:c8:af:57:b7:94:09:c5:13:4a:4a:5b:
                    e5:0e:b7:85:37:6c:2f:01:88:24:ab:25:7c:c9:ea:
                    5e:dd:21:27:66:ae:9e:32:f1:c8:a4:62:a4:fe:b1:
                    3f:7f:bc:26:5d:18:0d:84:3f:e3:23:40:5c:0f:67:
                    8b:6d:0f:aa:0e:b0:d4:fd:14:b2:7e:0e:f2:d8:2e:
                    1d:fa:37:74:34:18:92:64:4d:ed:9b:db:8d:b0:22:
                    e5:31:9f:81:d7:f8:50:0c:fb:f8:38:e8:c4:4d:a8:
                    76:3a:76:ca:4f:5b:0f:25:d7:81:2c:4b:e5:5e:64:
                    ff:44:37:4f:91:79:c7:b7:19:22:01:23:ed:34:92:
                    11:4a:a3:d3:7f:a1:5d:3f:4c:3f:89:7c:df:0c:ed:
                    8f:6d:d0:7c:06:b3:6f:03:19:d3:a5:cd:72:87:2b:
                    7d:9f:e5:c8:33:c7:82:7c:50:ee:96:25:ae:35:2f:
                    74:5a:31:b3:f1:91:af:0d:b5:88:4f:fa:2b:fd:35:
                    7c:a6:3c:e3:1a:04:a0:9b:f3:e6:7c:97:d3:b7:a2:
                    89:fd:b3:6f:c6:84:2f:f0:43:0b:65:b7:ce:bd:ae:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:D7:B2:5A:67:95:0E:4C:28:7F:86:B3:2E:ED:65:56:47:E2:20
            X509v3 Authority Key Identifier:
                keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:75:55:1d:02:67:c0:93:84:58:2c:a8:32:22:c3:fc:ca:41:
         43:a2:44:95:49:06:7e:c4:05:8d:8e:eb:28:58:f2:d0:97:22:
         3a:92:9c:79:5e:ed:45:1d:bf:8d:fd:ec:66:50:4b:21:72:9b:
         04:7c:34:d4:d6:7e:e4:df:2b:7d:1f:03:61:32:b9:ad:6e:50:
         54:73:26:21:ea:29:83:19:78:62:16:c4:1b:e8:96:e1:8d:66:
         dd:64:d1:af:65:76:34:9d:b4:1e:d3:b0:e6:ff:a0:38:98:17:
         3c:9e:b6:ec:79:6b:f9:a1:2b:8a:62:fc:4b:2d:b9:e1:28:7a:
         95:d0:47:35:51:5f:99:bd:b9:49:e4:c9:f9:b0:26:00:99:0b:
         9c:ca:8e:f1:12:2f:38:c2:5d:15:18:56:58:d7:5d:47:0a:c3:
         a3:01:92:89:b7:37:80:ef:a4:ee:82:c7:6b:e2:4c:47:11:97:
         0e:74:77:41:5c:1f:62:6a:40:f4:31:b8:b2:87:3d:fc:23:01:
         42:9d:0d:d6:2b:3d:95:bf:df:0e:ec:b2:6b:69:09:b1:0f:39:
         24:42:c6:eb:0a:73:94:a1:17:97:e3:4d:5b:69:51:c1:3e:6e:
         a9:bb:d4:12:3c:24:97:2a:1b:fd:55:97:0b:3c:20:ff:2d:4b:
         7b:00:cf:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBomxHyuKJChraptgEv9UFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk
NjQxNGMwHhcNMjYwMjA5MDkwMTI5WhcNMjYwMjEwMDkwMTI5WjAzMTEwLwYDVQQD
EyhiZTI4ZDdiMjVhNjc5NTBlNGMyODdmODZiMzJlZWQ2NTU2NDdlMjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Pp8znG6rfgmlHUZMgN7g48fPPj
/MptG43qAOt+aThHyK9Xt5QJxRNKSlvlDreFN2wvAYgkqyV8yepe3SEnZq6eMvHI
pGKk/rE/f7wmXRgNhD/jI0BcD2eLbQ+qDrDU/RSyfg7y2C4d+jd0NBiSZE3tm9uN
sCLlMZ+B1/hQDPv4OOjETah2OnbKT1sPJdeBLEvlXmT/RDdPkXnHtxkiASPtNJIR
SqPTf6FdP0w/iXzfDO2PbdB8BrNvAxnTpc1yhyt9n+XIM8eCfFDuliWuNS90WjGz
8ZGvDbWIT/or/TV8pjzjGgSgm/PmfJfTt6KJ/bNvxoQv8EMLZbfOva6JrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4o17JaZ5UOTCh/hrMu7WVWR+IgMB8GA1UdIwQY
MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt
NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi
LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXVVHQJn
wJOEWCyoMiLD/MpBQ6JElUkGfsQFjY7rKFjy0JciOpKceV7tRR2/jf3sZlBLIXKb
BHw01NZ+5N8rfR8DYTK5rW5QVHMmIeopgxl4YhbEG+iW4Y1m3WTRr2V2NJ20HtOw
5v+gOJgXPJ627Hlr+aErimL8Sy254Sh6ldBHNVFfmb25SeTJ+bAmAJkLnMqO8RIv
OMJdFRhWWNddRwrDowGSibc3gO+k7oLHa+JMRxGXDnR3QVwfYmpA9DG4soc9/CMB
Qp0N1is9lb/fDuyya2kJsQ85JELG6wpzlKEXl+NNW2lRwT5uqbvUEjwklyob/VWX
Czwg/y1LewDPgw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:32 2026 by rpki-client