This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          HDyNaPZZ1fWXuuUs9pvtr3S6nffB1qG2K7SoYBAbmM4=
Subject key identifier:   67:0A:7B:97:EA:52:7F:AA:80:6C:73:87:5A:59:69:1D:47:5D:C8:E5
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       019C42B43A1BD43CE3A1F18BD698E2039DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          0585
Signing time:             Mon 09 Feb 2026 14:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:33 +0000
Files and hashes:         1: R-A88u_7TVFzeF3MLF_IUotQ8KA.roa (hash: RUUXOIqRtUvH0luniWno3KPfTm4c2x/0O7KFhMXc0/g=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: +rBN1dqHNVvT1uLoQTmpQbDTLPS8uZrD0juevd13KC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:3a:1b:d4:3c:e3:a1:f1:8b:d6:98:e2:03:9d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Feb  9 14:00:33 2026 GMT
            Not After : Feb 10 14:00:33 2026 GMT
        Subject: CN=670a7b97ea527faa806c73875a59691d475dc8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:22:37:c0:1d:33:07:53:53:a8:50:b9:11:
                    be:08:28:7c:d1:1a:da:84:52:26:3f:55:9a:a0:4a:
                    a0:3d:22:01:ce:49:e2:c7:8a:10:65:3c:ed:98:42:
                    86:dd:78:89:83:88:29:e4:63:6d:64:37:09:cc:2a:
                    ef:be:bb:e7:23:03:1d:00:53:06:d4:9a:7f:b0:e1:
                    dd:93:75:65:e1:2c:a2:63:ff:82:8a:2b:ba:0f:35:
                    56:bd:25:49:0b:5c:2e:39:27:d3:a6:68:be:14:da:
                    e6:a8:a9:9e:84:44:47:07:a7:41:59:03:ce:ef:f5:
                    6d:ce:76:2c:82:bf:10:82:00:ee:72:02:2f:2b:89:
                    03:15:77:41:3b:4d:f8:22:6d:e4:9b:1a:bd:59:b9:
                    45:33:4e:cd:69:5f:55:df:11:a1:bf:34:77:88:db:
                    bf:d9:5a:8b:e8:a6:88:ea:2c:42:fa:d2:2f:35:c3:
                    b8:3b:91:2d:12:48:db:78:91:85:72:02:97:8a:70:
                    33:0d:fc:49:b2:01:8d:7c:a9:4b:98:c3:9c:3d:45:
                    ff:64:47:0f:e8:db:5f:8b:eb:93:ad:24:a0:1d:5b:
                    e9:56:9c:7a:92:e5:7b:63:96:67:03:0e:a1:25:6e:
                    10:2b:1a:fd:fd:79:39:14:f5:09:7c:4e:f8:e9:d5:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0A:7B:97:EA:52:7F:AA:80:6C:73:87:5A:59:69:1D:47:5D:C8:E5
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:c2:2b:3e:5d:9b:b4:7b:6a:e4:d1:f7:cd:97:52:5c:e8:
         b3:99:a0:9f:d6:66:2b:01:9b:e5:6e:ff:ac:87:67:67:70:8b:
         b3:b6:77:2a:c6:26:58:b0:d3:d8:cd:de:35:98:52:16:23:23:
         82:eb:eb:bc:80:63:47:b0:15:81:6c:48:58:d1:41:93:51:b0:
         92:2a:52:df:bc:a7:23:63:8c:c9:13:2c:4f:d4:2a:ea:89:9c:
         83:80:ac:93:eb:5f:26:6c:cb:0b:bd:b3:98:2c:3d:fe:44:13:
         7b:98:9c:6a:2a:88:93:2e:db:60:6f:4f:2f:c6:6c:a9:c2:f5:
         80:9a:85:b9:17:72:fe:79:7c:0d:fa:7e:8c:2d:19:55:49:ad:
         93:70:e6:41:79:c1:14:30:93:2f:c6:d5:db:d4:83:26:88:30:
         aa:06:4b:f3:ff:c9:f3:3a:cc:10:b1:80:90:4b:e2:4e:82:38:
         2f:a9:5f:dd:c7:82:03:3e:c0:93:69:33:c2:ba:c5:99:cf:b2:
         05:6a:1d:48:46:26:94:f0:e2:33:fc:7c:80:5c:65:19:62:08:
         4c:ee:fa:c3:b0:67:2f:a9:f4:97:65:54:2e:1f:01:ff:ae:42:
         28:ae:e8:06:59:9a:c8:cf:70:91:fc:cb:89:3e:16:af:d9:d2:
         09:bc:7a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:50 2026 by rpki-client