This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File:                     xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier:          Ia7et4sJeQgHfruF0qiU0uXK2fkQN9V7PvSUlP+pRdg=
Subject key identifier:   83:E4:9D:69:3E:E5:9F:4D:FC:B3:65:4D:74:91:6A:CB:A0:3B:36:70
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer:       /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial:       019C420F2571D0D353E748ED7BD25CAB7AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 11:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:14 +0000
Files and hashes:         1: XddFO1_V4vw4BFewS5a4h464RsI.roa (hash: 6STZFqkc7/OsVyHseLRUMCPEN6uwIoKNwxdIv1/YIe8=)
                          2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: hkeXZJPJl/y4m05Z2ztjyaw50NxS+G7RQil+Yktg3DA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:25:71:d0:d3:53:e7:48:ed:7b:d2:5c:ab:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
        Validity
            Not Before: Feb  9 11:00:14 2026 GMT
            Not After : Feb 10 11:00:14 2026 GMT
        Subject: CN=83e49d693ee59f4dfcb3654d74916acba03b3670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:06:e2:f1:fc:c3:bc:fc:83:11:e4:50:b8:
                    ff:2d:29:ff:8a:67:dd:c7:2c:b5:39:a3:4a:c6:fa:
                    3b:45:73:d7:44:fa:4b:47:8f:85:21:db:83:6a:5e:
                    55:5d:c7:ea:54:ae:12:02:73:ee:06:2e:39:f3:df:
                    4c:71:c1:5c:c3:9a:f7:09:53:3b:ed:da:88:c3:06:
                    2f:e3:34:a2:3c:31:41:8c:fe:43:b9:4d:19:9c:00:
                    3e:c5:74:94:8e:9f:2c:fc:72:39:6a:a2:d1:4a:68:
                    f6:3f:e5:d2:bf:36:68:26:82:28:49:2e:94:ec:a8:
                    39:8d:6c:a3:ef:b1:bc:12:96:a7:27:c5:35:0b:34:
                    6f:9a:59:58:54:b2:cd:2a:c9:e3:d3:f0:a2:a8:39:
                    76:ea:e8:de:02:66:76:f8:7f:b5:1e:b5:54:aa:9e:
                    3c:e0:a1:f6:24:b8:89:bd:b8:77:a5:d5:0e:bc:91:
                    f8:9b:9c:ab:7d:80:75:b0:c3:0d:31:5b:e8:10:26:
                    91:41:a7:23:1f:a7:5c:d1:99:9a:2c:2c:64:ed:99:
                    b0:7b:51:a3:58:9b:c1:3f:5a:4a:2c:49:25:9a:bf:
                    35:fc:a3:d9:bf:63:40:23:8a:11:64:9f:07:52:b8:
                    ea:25:44:d0:4d:3c:e7:50:fc:cd:df:54:c0:2e:d4:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:9D:69:3E:E5:9F:4D:FC:B3:65:4D:74:91:6A:CB:A0:3B:36:70
            X509v3 Authority Key Identifier:
                keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:99:35:23:21:04:6d:8b:5b:f0:77:29:33:33:b6:74:15:5c:
         f3:43:b0:cc:4e:ba:4f:b3:53:c2:2e:c0:dd:81:e9:db:70:22:
         0b:43:65:27:0b:71:29:22:87:9d:83:74:b2:97:f2:c6:92:1a:
         c4:ac:71:b1:30:b2:f5:33:af:a9:e3:e8:38:e8:5b:ad:d4:2e:
         68:74:20:ca:e3:6f:ea:02:4e:bd:c0:2d:c7:c3:4c:53:b0:b9:
         ff:5d:de:cf:28:a9:3b:09:d5:19:bf:d0:99:a8:d2:33:ed:93:
         af:59:07:6a:fc:3e:d9:74:52:83:11:df:bf:d1:8e:11:84:57:
         de:80:d5:d4:dd:f3:45:79:a4:62:9d:76:b8:87:8c:02:b5:b9:
         c5:49:ad:ae:7e:6e:34:9d:7e:58:f1:88:e8:0c:b4:d4:39:ed:
         fc:d9:b0:00:22:76:22:d4:c5:1c:e5:93:72:5b:52:59:82:fa:
         cf:23:93:d0:a0:f2:c8:a9:f5:62:ff:38:b1:38:5b:51:ba:0e:
         40:f5:64:9f:a6:4b:13:9e:c1:b8:ec:95:b1:0e:02:01:56:ca:
         fa:ce:6c:16:60:d0:34:3d:00:ac:86:e6:10:90:f6:90:83:c3:
         24:39:4c:bc:a6:e4:58:66:7c:7d:f7:79:2e:9e:11:b0:c7:8d:
         d5:a9:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:48 2026 by rpki-client