This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File:                     p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier:          7qA/2f6RqxFqRQI7g9RBZ7i4Bh8TS7ihkE+ZmOz1t1Q=
Subject key identifier:   6F:12:38:0B:4E:F7:8A:E6:14:0B:7D:3C:4F:7E:29:7F:B5:52:72:23
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer:       /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial:       019C427D4E33544D00AE53746F14476D8DFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number:          14DE
Signing time:             Mon 09 Feb 2026 13:00:34 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:34 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:34 +0000
Files and hashes:         1: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: oBat7NiUI/qzJPC48zRtR6+KE1SXRwXnS49bvyQnHhM=)
                          2: yuJsWVIKEkrfOiLC0rgtYrfv5ig.roa (hash: tNJ821CD2JFvwv/regbkNi6JuvYQZgMCd//DFX1D46E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4e:33:54:4d:00:ae:53:74:6f:14:47:6d:8d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
        Validity
            Not Before: Feb  9 13:00:34 2026 GMT
            Not After : Feb 10 13:00:34 2026 GMT
        Subject: CN=6f12380b4ef78ae6140b7d3c4f7e297fb5527223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:1b:e7:f8:8b:eb:53:9d:ae:fc:25:db:81:
                    b8:78:af:80:09:4c:e0:cb:f1:16:9f:90:7c:90:36:
                    de:04:08:54:0a:05:7d:1e:77:82:d8:10:00:65:74:
                    45:26:83:aa:d4:50:82:13:22:3a:98:39:41:c9:7f:
                    cf:00:3b:23:34:69:a1:7a:f8:3a:5f:e1:4f:b6:ca:
                    c3:a7:d2:46:fe:33:15:32:9b:4e:1a:e1:1e:22:2b:
                    14:18:de:50:fd:e0:60:77:90:cf:d0:df:e2:eb:e7:
                    cb:a7:c6:85:c3:68:51:13:d6:c4:17:30:48:ae:9a:
                    9f:30:a8:56:d4:e0:60:af:70:cf:1b:3e:f8:19:b7:
                    6e:81:d4:4a:fd:44:5f:9e:65:b9:77:cb:06:28:df:
                    b2:b1:6e:5e:6c:f2:67:6d:20:63:60:25:d7:e9:87:
                    94:c8:da:1c:d7:85:d8:ac:9c:34:69:61:8d:75:6f:
                    21:a4:2d:80:61:26:ca:84:56:a2:01:5b:d6:09:56:
                    84:bb:b4:06:53:dd:4c:c5:af:94:6d:d3:13:93:dd:
                    99:8e:f5:df:90:86:2c:ce:8a:d3:a5:56:e3:ea:d3:
                    9e:7b:c5:bc:a0:b7:49:e9:4e:3d:34:d1:57:51:cb:
                    7e:2f:7f:44:a4:93:9e:cd:63:5d:0b:87:1e:76:f8:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:38:0B:4E:F7:8A:E6:14:0B:7D:3C:4F:7E:29:7F:B5:52:72:23
            X509v3 Authority Key Identifier:
                keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:00:23:99:db:ce:de:c3:bc:26:39:4e:67:93:25:bc:9f:59:
         ce:c1:f4:b1:ea:85:4e:e9:64:fe:da:d3:60:9b:41:35:74:20:
         2d:d5:a5:67:50:95:97:74:d9:b0:ee:ea:02:25:11:4b:bb:ca:
         38:f4:c4:f2:d9:a7:19:52:db:77:1b:a5:bb:f7:96:52:41:f9:
         5f:01:4b:e4:de:c2:24:af:33:2f:73:c5:1d:30:9e:1b:d4:f9:
         d6:32:ed:d1:ae:ad:00:59:de:20:6d:f4:f5:15:44:17:82:31:
         ab:f4:d9:21:05:75:9a:d6:59:1d:71:17:93:75:5e:b7:ba:5c:
         29:5c:82:ab:41:c7:b5:dc:bc:87:9f:b3:ea:e5:92:f6:ee:a1:
         b6:45:60:61:74:bd:26:9a:89:05:06:02:d7:af:0c:1d:8d:15:
         61:81:8e:40:34:2e:9d:fe:03:88:43:d1:e1:6a:14:ae:e8:ce:
         3e:8e:dc:6c:86:d9:fa:43:26:06:79:8f:e2:7c:23:27:26:de:
         1c:08:15:67:a6:f9:43:54:c3:17:06:1d:82:52:b8:e0:d5:67:
         37:24:a0:8e:fb:63:f2:31:b4:5a:55:f3:98:b4:3b:e9:ed:d2:
         08:d1:1d:5f:d3:ac:f4:b9:bf:31:9f:dd:b7:22:f0:7b:05:5d:
         31:00:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:22 2026 by rpki-client