This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File:                     QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier:          rW2ajbpfA2UODAcV+6atJUHHD5ZUvLG4JDq824fsJWI=
Subject key identifier:   DF:64:8D:D0:90:76:63:36:10:DF:A9:9E:CD:AE:5B:82:64:E8:9B:AA
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer:       /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial:       019C416A84CB364A5A2F834463B197B19A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number:          BE
Signing time:             Mon 09 Feb 2026 08:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:25 +0000
Files and hashes:         1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
                          2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: BMO3P10Tii75davXMWQrHuf20kjz0/HqqSl66FTnhUQ=)
                          3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:84:cb:36:4a:5a:2f:83:44:63:b1:97:b1:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
        Validity
            Not Before: Feb  9 08:00:25 2026 GMT
            Not After : Feb 10 08:00:25 2026 GMT
        Subject: CN=df648dd09076633610dfa99ecdae5b8264e89baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:a8:b3:a3:8b:e0:eb:9c:30:9f:da:fb:c4:
                    17:11:7a:3d:fa:86:1e:9a:eb:e0:83:ad:b9:5f:d9:
                    e9:3c:87:a9:23:4d:4a:fc:fa:29:00:ff:c3:79:b0:
                    55:be:4a:cb:e0:ad:9d:dc:fd:43:2d:61:a8:60:d3:
                    9a:6b:8d:fb:b4:65:5c:7e:7b:b0:2e:a7:51:f7:16:
                    3c:0e:53:c0:f0:9f:9e:20:9b:32:15:68:5f:27:e1:
                    02:51:02:91:da:78:c0:58:60:0b:00:c3:bf:e8:7a:
                    ac:e3:0a:ac:ac:d7:d2:20:35:84:30:fe:11:3c:92:
                    d3:05:77:76:5f:b3:56:c1:3a:9e:a1:7a:ca:a5:d9:
                    56:2c:b6:36:2c:6d:9f:43:1c:8a:d5:52:fd:68:4f:
                    95:5e:35:89:ca:c8:bf:b4:02:53:ad:51:73:ef:ef:
                    6d:76:da:5d:0e:67:96:d2:78:3d:27:10:54:66:d0:
                    10:3b:64:d2:fe:da:f1:ee:c2:b3:4f:58:84:55:2d:
                    bf:64:85:75:40:7d:68:92:6b:c9:cb:19:9b:30:4c:
                    59:48:e0:2c:35:16:ed:5d:8b:2d:93:5d:9d:59:3f:
                    9f:eb:76:aa:63:56:3e:62:b1:2c:57:9e:83:58:25:
                    f1:d7:96:6e:f0:33:71:0d:e3:20:5e:af:c4:4d:59:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:64:8D:D0:90:76:63:36:10:DF:A9:9E:CD:AE:5B:82:64:E8:9B:AA
            X509v3 Authority Key Identifier:
                keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:bf:0c:b3:7b:c9:d9:a4:fc:ab:f0:c1:9f:a4:ff:2f:df:
         f6:64:0c:dd:35:de:9a:45:fb:a4:b7:ea:e2:e7:9e:de:f9:a8:
         9d:f6:f4:fc:9f:5b:62:e3:f9:d5:36:3c:dc:6a:7c:fa:fa:c1:
         c2:09:ba:4c:47:64:04:64:bc:df:94:52:a7:5f:c7:4c:f8:43:
         eb:33:1e:b1:20:35:7f:6c:aa:5e:ae:98:97:cb:6f:39:97:b4:
         8e:bb:14:6e:b5:37:6e:e9:db:83:93:04:63:eb:ef:78:cf:44:
         b9:d1:cb:1a:f3:66:a1:90:69:90:a9:ec:58:4e:bb:08:4f:91:
         94:e8:25:a9:70:b2:6d:b5:ca:09:b5:8c:d4:db:fe:09:13:77:
         c0:47:ea:ac:4c:fd:2c:fc:1b:97:ff:ab:ea:f6:b8:5b:d5:38:
         56:b9:63:b0:f0:b7:17:41:85:e1:2a:e5:c5:49:5d:1d:1a:dd:
         ac:3c:90:c4:0d:8d:e0:e3:39:d4:5b:0e:15:62:33:3f:b3:1f:
         78:29:ab:29:a1:85:e1:9e:7c:d4:13:89:96:ca:15:ee:f8:d1:
         04:39:0d:7c:53:2e:7d:7b:05:c5:ee:80:9a:84:73:f3:ab:1c:
         f8:37:be:5f:cf:25:a9:d4:3b:2b:11:64:1a:ee:2a:45:d9:12:
         ab:e8:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:24 2026 by rpki-client