This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File:                     Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier:          LQLrsVxmyPTwWK8XvFO6W3FV8XNZaEbZpxoL2Kl2SOA=
Subject key identifier:   2A:19:80:63:B8:BC:B0:CF:78:59:E3:39:47:EF:C9:DD:90:BF:2E:1A
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       019C284FE70F6F290D378C8D71C0A65DC966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number:          1063
Signing time:             Wed 04 Feb 2026 11:00:50 +0000
Manifest this update:     Wed 04 Feb 2026 11:00:50 +0000
Manifest next update:     Thu 05 Feb 2026 11:00:50 +0000
Files and hashes:         1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
                          2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
                          3: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
                          4: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
                          5: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
                          6: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: HsxHhpwO5a9KHqTP+dIVuOmsT01UWiWFTuNoIviYir0=)
                          7: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
                          8: f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa (hash: pVZsMNdaHsUDa/+umrQSX9j6u35GXdOWv7ti1zKHLtA=)
                          9: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
                          10: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
                          11: lghuLDymBAtVV8bMgyPVXddGVW0.roa (hash: B36YhYDgnjsRZPrOKTnsUPdD0R4neS1yQGS5w0kCMHw=)
                          12: m3QG645Jxe5JU10VjtLZCAwTzqE.roa (hash: qQhuxCc/6YQx1PHrhefGoXSV5uHGKCWCPmjs33OuAHk=)
                          13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
                          14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
                          15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
                          16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
                          17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
                          18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
                          19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:4f:e7:0f:6f:29:0d:37:8c:8d:71:c0:a6:5d:c9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Feb  4 11:00:50 2026 GMT
            Not After : Feb  5 11:00:50 2026 GMT
        Subject: CN=2a198063b8bcb0cf7859e33947efc9dd90bf2e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:ba:50:6f:79:8e:32:c3:39:6d:47:71:3a:
                    ec:16:5a:d8:a1:5a:20:ac:77:bd:cc:36:3f:bf:35:
                    e0:16:f3:b6:47:f2:33:9e:a8:39:62:4f:c8:ba:11:
                    d1:19:80:11:ab:66:65:cc:9f:62:e3:db:67:bc:5e:
                    0b:6e:b9:67:e1:db:10:16:cb:22:a2:6e:fd:e7:a8:
                    05:bd:ff:4d:36:24:32:a6:57:c9:c5:63:8c:03:4e:
                    54:96:31:b7:59:35:57:5f:5a:45:e6:60:c2:1a:91:
                    35:3f:cd:60:69:32:db:01:a8:4f:f2:0b:79:f0:3a:
                    e7:23:d8:1e:43:13:ef:7a:af:de:1f:a8:bb:87:f3:
                    5d:39:4b:95:3b:44:a2:bf:75:1e:ce:8b:c0:ae:f6:
                    f5:d7:81:e7:81:f0:9a:98:80:5a:9f:0c:b7:c7:ce:
                    2d:19:fa:62:d7:92:8f:e9:cf:58:12:98:21:b2:ad:
                    d2:78:dd:51:85:5c:0c:2b:c8:7e:a8:d8:09:67:d3:
                    5f:04:92:65:2a:eb:94:d6:ea:ad:a5:97:9d:ba:4b:
                    70:89:33:aa:a5:e8:8d:6f:3a:a1:a4:5e:60:f7:1c:
                    1a:e7:0f:a0:82:9b:e8:34:22:34:54:d5:af:b8:13:
                    8f:80:c3:ff:0d:81:8c:32:2f:5a:f6:96:3c:d3:36:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:80:63:B8:BC:B0:CF:78:59:E3:39:47:EF:C9:DD:90:BF:2E:1A
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:e5:b3:24:a6:91:00:59:31:0a:50:8a:72:8c:36:81:4c:
         e5:66:76:52:3b:19:14:b9:08:50:e0:61:b6:aa:52:0d:a9:0f:
         f0:c1:40:ec:cf:b3:6b:fe:f5:4a:ea:3e:18:91:75:58:f1:32:
         73:93:51:ca:58:d2:b8:6a:72:98:74:82:a8:fd:54:88:8d:e5:
         63:35:bf:97:cf:0a:bb:7b:9e:03:d5:dd:d1:dc:80:de:82:8a:
         01:cb:af:5d:85:af:15:96:69:7f:5d:ab:53:4a:d1:c7:29:fa:
         81:f7:05:95:8d:a3:ea:b2:94:a3:5c:31:1d:93:fa:80:8c:c2:
         83:bb:7c:9f:87:a6:df:1c:bf:11:ee:ef:6f:69:85:24:83:0a:
         1a:2c:d3:16:4b:75:33:9b:ad:15:a3:22:53:7b:19:1c:0c:24:
         64:48:c7:fd:da:d3:64:07:72:e6:2c:dd:76:c7:49:eb:fa:62:
         02:78:25:f2:bb:a1:70:eb:17:00:e7:93:78:03:c0:e3:07:e8:
         89:a0:fd:99:8c:c9:b5:5f:f8:29:dd:02:79:57:1a:f7:af:c3:
         8c:48:cb:f4:00:5b:f9:25:98:dc:74:86:b6:e2:d5:42:58:1b:
         52:03:47:22:0f:d5:d6:d8:fe:53:41:8b:73:89:54:c0:7b:de:
         0e:7d:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:08 2026 by rpki-client