This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File:                     Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier:          XMdDbgmuV70VrZce/y6bzvjfes98/UZchWbzXCHA6vE=
Subject key identifier:   A9:98:B0:BE:39:D1:E9:A2:A6:A8:CE:36:E3:91:06:2D:A3:4D:A2:83
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer:       /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial:       019C41D87161960FD86C1FA9232DB2AD5AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number:          0A30
Signing time:             Mon 09 Feb 2026 10:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:29 +0000
Files and hashes:         1: INg4xIGRSCSOu3-OcCQpHM9H_6g.roa (hash: eyyAVDJZ4GJowJ2sqgQCguwo5z9rwMoMjyVN47CKOxU=)
                          2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: QvLR0NqrplvHK2tgSbjbtYdxGGuUgByLD7IdMLGJEWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:71:61:96:0f:d8:6c:1f:a9:23:2d:b2:ad:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
        Validity
            Not Before: Feb  9 10:00:29 2026 GMT
            Not After : Feb 10 10:00:29 2026 GMT
        Subject: CN=a998b0be39d1e9a2a6a8ce36e391062da34da283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:4b:a4:4b:6a:d6:96:fa:2e:a8:6a:ec:c2:
                    c4:4f:b0:c6:65:2d:0f:61:68:e5:a0:6d:e9:a7:78:
                    a9:20:f7:d4:b0:42:a2:c6:b8:b2:29:00:64:65:90:
                    26:3c:dd:63:8c:75:0d:5e:95:ec:f1:9f:46:09:e0:
                    52:0a:43:8c:1e:f0:c5:e0:04:d7:67:f8:f2:7f:64:
                    1a:1d:e7:c7:da:8b:a1:db:0f:6e:60:9f:29:c6:65:
                    ed:54:0b:64:6e:89:30:8d:e2:e0:7c:01:b5:cc:06:
                    f0:fe:0d:55:60:75:ee:d1:1b:c8:f7:64:71:ad:e9:
                    95:e8:72:9b:bd:2d:1e:96:90:d1:e1:6c:34:d6:e5:
                    e4:c3:0f:0d:b5:1a:f2:c4:7e:8c:56:fe:c6:c9:a7:
                    42:2b:1e:1b:d9:0c:f7:0a:ad:22:a3:a2:f9:9a:37:
                    35:ae:e5:fc:88:79:c3:76:2d:2d:d6:ff:99:28:1e:
                    39:22:48:ad:6d:91:f0:d4:61:ef:9f:6c:6c:4c:f8:
                    62:b8:f2:d1:cc:e9:77:be:91:9f:9b:0e:48:8a:2c:
                    f8:0f:09:c1:82:91:4d:51:ee:e8:58:43:78:55:0a:
                    09:4b:98:77:cb:60:db:ad:c4:36:f8:20:35:f0:99:
                    44:8f:62:1c:e9:91:8e:a9:72:a5:69:7f:08:38:6b:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:B0:BE:39:D1:E9:A2:A6:A8:CE:36:E3:91:06:2D:A3:4D:A2:83
            X509v3 Authority Key Identifier:
                keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:05:59:a9:61:d6:91:eb:4c:5f:53:1f:5c:b5:ae:0f:f0:ad:
         90:b8:47:40:94:d6:27:af:9c:79:82:23:58:cc:27:c1:88:b7:
         d6:01:53:72:13:c3:a6:84:c6:d8:aa:09:4e:9a:6e:8f:7d:8a:
         e8:05:b2:22:5d:3f:77:4a:a9:6e:01:1b:4a:d3:e0:05:22:87:
         9c:f2:3f:29:7d:c2:6d:5d:d7:b4:d7:cf:39:2b:52:21:fb:db:
         a1:02:a8:64:3f:44:e7:4d:c6:b1:d5:32:8f:52:8a:9a:a4:33:
         d7:4c:9c:46:10:93:3a:0b:6a:3a:23:43:65:85:1c:de:76:bf:
         62:4e:fc:43:ee:73:7f:ef:cc:bb:d7:73:7a:23:2b:c1:c2:a5:
         d1:39:e2:21:a6:62:ba:eb:0e:cc:1a:be:6e:91:c3:a1:fa:2b:
         56:2a:e4:f7:44:d9:d3:a8:de:24:23:0a:39:70:35:e2:72:79:
         d1:d6:65:96:37:b5:ff:77:e3:08:7b:e2:44:21:da:96:f3:2c:
         8a:99:d7:a8:af:dd:37:c0:9e:57:4c:b9:f4:8d:80:eb:f4:5c:
         75:44:2c:9b:c2:85:09:75:ce:5c:21:9e:5b:16:92:2f:5a:dd:
         29:e4:a0:1a:da:5f:3f:e3:00:fb:7d:75:b8:62:9d:c7:0c:19:
         4c:e5:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:35 2026 by rpki-client