This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File:                     0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier:          QF/JIFIwzpfFrZELZNmRDzpuwmeDyRItN5OYQmU3q2E=
Subject key identifier:   70:20:02:BA:2C:A6:EA:24:11:95:71:7E:FE:03:DE:E9:4A:D8:D0:6F
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer:       /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial:       019C1DCC1BF33735692E1E7709EB095ABE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number:          1801
Signing time:             Mon 02 Feb 2026 10:00:41 +0000
Manifest this update:     Mon 02 Feb 2026 10:00:41 +0000
Manifest next update:     Tue 03 Feb 2026 10:00:41 +0000
Files and hashes:         1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: LGym3iLQiKy5QKYFr++NS6KPo2lRVu2cdd7f+COhlK0=)
                          2: ObhdsLoa75B_QVzex3UCt65oqHE.roa (hash: 7Rfm5BnnQZXvsHH1k9k4V3PGLN/GXjrUrEyjZS8MwJc=)
                          3: a-4CKpObY5cKeSuMoMgMffjvfWQ.roa (hash: SXxBaVwsAs/dLbHjv4oplsKiiaVfa0F06dRrYRWo100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:cc:1b:f3:37:35:69:2e:1e:77:09:eb:09:5a:be:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
        Validity
            Not Before: Feb  2 10:00:41 2026 GMT
            Not After : Feb  3 10:00:41 2026 GMT
        Subject: CN=702002ba2ca6ea241195717efe03dee94ad8d06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:12:a1:a1:ca:8a:9b:19:05:28:44:22:99:
                    8c:16:8b:d8:0b:b1:eb:4d:00:1a:67:58:a0:1c:fa:
                    0e:7d:f0:df:ca:6e:4f:0b:76:df:e5:fa:84:f9:ef:
                    3a:c7:a6:38:cf:77:c8:19:f6:92:47:2c:cb:f0:9c:
                    8c:d7:82:b9:ba:e0:a9:24:88:e5:d9:a0:ac:9e:bb:
                    35:fd:c9:df:06:5c:60:36:d2:0d:8a:20:dc:e4:e7:
                    4b:8b:fd:3b:95:3b:d1:64:f2:0c:5b:ee:28:b4:b2:
                    11:6b:72:f1:cb:9e:86:6a:8e:1d:65:74:c7:9d:7f:
                    b2:94:4f:8e:b6:70:fe:a1:73:08:a5:b3:fd:b6:ca:
                    70:9e:7a:64:7c:44:52:75:da:70:c3:3e:7a:d7:89:
                    bd:bb:b9:5f:c7:4a:d2:e3:0d:9e:be:f1:f2:aa:45:
                    25:4e:d9:7d:29:43:1e:0d:7f:0d:3f:a3:3f:48:0c:
                    0f:8e:74:29:77:30:b5:01:8f:ba:93:e3:39:17:6f:
                    2e:3d:c5:9c:45:50:6e:64:7e:bc:55:2d:18:2f:07:
                    f1:4b:c1:e3:6b:a3:10:09:85:5c:d8:9f:41:5e:93:
                    2f:ec:1b:c0:1f:78:4b:28:2b:7a:4c:9e:1d:10:06:
                    d8:c3:02:99:a3:1b:c2:26:3d:41:c3:58:c5:f1:59:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:20:02:BA:2C:A6:EA:24:11:95:71:7E:FE:03:DE:E9:4A:D8:D0:6F
            X509v3 Authority Key Identifier:
                keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:c7:18:41:bb:67:a1:fb:6b:62:5b:71:3d:fa:4a:50:1e:
         1a:1d:f5:27:81:98:6f:7b:e3:7b:11:fd:cd:a5:a0:77:f9:e6:
         68:42:4b:8a:77:0e:fa:60:aa:fd:da:be:3c:52:0d:b7:c3:87:
         ac:fe:1e:53:a7:7f:0c:54:57:27:f4:4e:a4:59:9c:5d:a2:16:
         74:95:ea:a6:23:bc:89:c6:6d:dd:76:30:d2:f1:4c:67:0a:63:
         d5:a1:ab:b9:05:fa:3b:c0:e1:c3:9c:01:9a:ae:c6:96:ba:b8:
         da:2c:47:91:70:c7:1e:27:72:0e:f4:e2:d6:8c:7a:cb:5c:77:
         9c:58:37:e2:70:14:3a:bc:fd:4d:ce:95:54:75:59:75:c0:58:
         7b:7a:a2:a2:62:d8:75:37:2a:5f:b7:30:a2:c2:88:f9:23:71:
         7b:5c:92:87:8e:0c:41:aa:b5:2a:f5:da:0a:64:ca:4a:cf:41:
         9c:84:1c:d1:fa:0d:7f:c0:a7:bb:ab:37:be:04:5d:87:b1:06:
         77:5d:c7:53:8c:9a:e3:a5:18:33:5c:62:22:a1:a5:b7:9c:eb:
         79:64:98:fe:9a:b6:62:0d:dc:7a:75:23:a2:b7:69:4b:33:94:
         4f:9a:c5:1c:42:ed:20:5e:e7:91:d3:2f:eb:fb:e7:23:69:57:
         7c:70:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:16:27 2026 by rpki-client