This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File:                     Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier:          sQ9ZaSvDSaOIbYWTLS1rYP46L1xGdj2tV2dtHAJxcmo=
Subject key identifier:   7B:3C:61:DE:75:ED:E8:47:74:D0:19:7F:06:F6:33:D1:C1:7F:1A:DA
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer:       /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial:       019C42EB9BCA62470B84BE6AB4FC48BA3377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:02 +0000
Files and hashes:         1: GUgLg3-BRyvvd7IU0mKTRz8HLQo.roa (hash: QrRBGrDD9ZKqKp1YwsfRb3TUqSdKHluo6aJuZoI6754=)
                          2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: ku9XxwjtYdhnaXWNgtuC3DpysnIqd6yptEPIfZGc54o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:9b:ca:62:47:0b:84:be:6a:b4:fc:48:ba:33:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
        Validity
            Not Before: Feb  9 15:01:02 2026 GMT
            Not After : Feb 10 15:01:02 2026 GMT
        Subject: CN=7b3c61de75ede84774d0197f06f633d1c17f1ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:a4:1b:37:8d:c0:33:9f:43:d6:0c:6e:ec:
                    d6:d7:92:7c:91:e9:5f:bb:69:63:e4:61:0c:5e:05:
                    bb:57:72:c9:73:aa:77:fc:90:78:bf:06:0f:ed:c4:
                    af:a5:88:18:ef:59:6d:13:97:31:c4:db:dd:84:fc:
                    36:ab:80:05:c8:e0:8e:18:7b:c5:82:6e:33:c9:3d:
                    94:73:8d:f1:5a:3d:16:ce:20:b7:1e:54:7f:6f:3e:
                    38:60:9b:d5:f0:21:dc:ad:9b:74:e2:a6:9e:1e:70:
                    f6:54:07:8f:46:8a:0d:9f:82:ad:c7:1b:3e:c9:de:
                    b5:22:fd:5e:89:0a:07:26:ef:3d:f7:0a:5a:bc:17:
                    8f:1d:a2:95:d0:6f:38:c6:40:9c:16:35:a3:3d:66:
                    42:cf:8d:09:05:69:33:56:28:af:de:3a:25:e9:cb:
                    18:94:90:de:e8:24:0f:3d:08:28:4e:64:a4:82:2f:
                    0b:56:4b:ee:8a:97:fb:fa:fb:14:28:c3:e3:93:02:
                    42:94:c4:76:75:21:c0:37:8f:d2:57:ea:6e:c8:1a:
                    f5:d3:42:b2:93:d2:c5:ef:69:89:7c:39:55:8c:09:
                    ed:72:6f:40:55:08:59:ff:5e:3b:77:6b:19:97:d6:
                    95:5a:63:93:54:89:69:17:9a:7b:03:98:ec:41:c4:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:61:DE:75:ED:E8:47:74:D0:19:7F:06:F6:33:D1:C1:7F:1A:DA
            X509v3 Authority Key Identifier:
                keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5b:80:31:fa:1d:8b:47:5c:c5:c7:0c:83:be:f0:30:ca:f8:
         2d:ab:f8:d7:d4:eb:89:60:d2:e6:34:64:eb:be:c7:83:32:8f:
         c0:61:67:8a:19:0b:ce:29:de:3e:2f:32:47:e2:fd:31:f4:63:
         82:5c:c4:72:43:de:d5:79:d3:87:08:18:d0:88:80:ec:f9:0e:
         1a:17:26:b0:12:09:81:24:74:a5:5a:78:ed:36:ad:ce:61:2f:
         4b:21:53:8d:51:8f:3a:ff:9c:71:89:6f:84:2f:71:ce:d1:7b:
         3c:9b:a1:03:54:20:5a:05:b5:e1:ff:e9:fd:85:bb:97:09:cc:
         34:61:2a:c0:4b:9c:00:4c:9d:a4:23:d5:5e:32:01:6b:07:d8:
         58:ef:5b:2c:e2:56:3d:76:8a:c2:f7:8c:28:8c:c9:c9:2d:f9:
         b1:bf:f0:43:2d:49:98:01:51:f5:5e:07:84:fa:2d:b6:14:85:
         2b:c9:06:52:a8:80:d5:77:05:f5:4c:8e:46:fb:ba:53:17:c8:
         1d:e5:92:75:c5:00:cc:d5:8d:38:5c:83:61:73:e4:d1:5f:c7:
         35:b7:89:d6:33:2d:96:47:bf:fe:a0:32:c7:d4:99:40:e0:c9:
         a4:9c:58:b9:c3:52:e1:ac:74:5c:6d:a3:df:09:b4:69:4d:c7:
         cd:37:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:43 2026 by rpki-client