This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File:                     X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier:          M7hx4woe75pUpkTxFMf+UioP/xiWvw/J6sKdFvYYcyI=
Subject key identifier:   3E:53:72:29:4C:66:48:8B:19:85:4C:58:E4:1C:E7:6A:2F:FF:E9:4E
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer:       /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial:       019C4358D8C15DF7E889047DF9AB451612A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number:          0F76
Signing time:             Mon 09 Feb 2026 17:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:21 +0000
Files and hashes:         1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
                          2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: mHAs94e9FI/fxP7OOYvEkYPBb/cDKt79+m2fUo5/BbQ=)
                          3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d8:c1:5d:f7:e8:89:04:7d:f9:ab:45:16:12:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
        Validity
            Not Before: Feb  9 17:00:21 2026 GMT
            Not After : Feb 10 17:00:21 2026 GMT
        Subject: CN=3e5372294c66488b19854c58e41ce76a2fffe94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:4a:68:c7:33:4b:2d:9b:4a:c1:47:da:2a:
                    46:9f:e3:33:80:a5:a8:ef:cf:09:b0:cc:56:5a:fd:
                    c7:ec:a2:a6:f0:2e:16:2b:58:09:9c:74:a5:c8:df:
                    fe:6a:e9:ef:1f:ae:dd:16:a0:4e:5c:f1:5b:32:54:
                    05:aa:c4:9a:aa:6f:6b:ff:2f:f3:e1:86:84:82:f0:
                    51:f7:d9:63:04:2d:51:ae:a1:fd:0f:7b:83:ec:5b:
                    ae:88:2b:08:b1:44:dd:8a:de:6f:97:ff:79:d6:4a:
                    b3:fc:60:e1:c4:9f:e8:15:bd:85:71:d8:03:05:6c:
                    dc:11:4f:d6:ee:93:de:8a:41:8d:9d:3e:a7:75:66:
                    6a:e5:5f:64:06:0a:73:9b:2b:3e:f6:95:79:71:8d:
                    45:41:c4:7a:c9:5f:1e:cb:81:8f:8a:34:bd:6a:47:
                    dc:f6:b3:0c:97:2f:1c:58:83:31:cc:58:96:d6:ff:
                    ba:87:eb:b0:2a:5c:90:3f:d6:f3:3e:5b:66:5e:5f:
                    9d:1f:58:c6:22:46:68:89:1a:e7:ab:05:56:d7:e9:
                    36:1c:76:77:73:6e:bb:cc:fc:d6:d7:9c:b5:a1:52:
                    35:64:ba:1c:fd:74:1e:3f:c4:f5:b1:3b:67:cf:3c:
                    93:bd:4f:34:9b:40:37:7f:54:a6:cc:4f:ea:33:cb:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:53:72:29:4C:66:48:8B:19:85:4C:58:E4:1C:E7:6A:2F:FF:E9:4E
            X509v3 Authority Key Identifier:
                keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:b0:d6:8a:d0:9e:56:0d:35:a0:ee:05:3f:e3:f5:33:29:
         ff:9b:ec:ec:96:a7:e2:26:c9:0f:75:c1:c2:91:16:30:39:41:
         86:12:5e:9e:3d:34:d3:32:9b:b4:35:e7:7e:d6:fa:a7:19:8e:
         e6:71:03:0f:48:82:74:00:54:a2:ee:8a:0d:79:0b:63:9a:69:
         4b:76:4e:6c:18:0f:97:af:46:05:38:ad:7a:17:57:06:b8:b1:
         4b:46:c7:cb:77:b2:79:be:16:e3:f6:62:76:4b:65:9a:c1:91:
         e8:26:96:f5:1c:f7:47:a2:c7:fa:21:e3:bf:59:f5:1e:2b:0e:
         ff:a8:ab:16:ef:be:9c:d3:eb:69:9d:33:33:a4:a7:9d:ba:f9:
         09:40:5e:6f:7a:79:f6:e1:05:bb:73:4e:bf:f4:7c:b2:9d:33:
         e7:56:6b:73:c7:bc:14:64:cf:95:74:71:70:a1:e4:09:41:f4:
         33:c6:87:55:cc:01:68:3b:dd:c0:93:f3:71:3d:13:31:4b:ff:
         32:43:32:74:db:bc:59:02:06:aa:85:16:ca:bc:7a:d8:ad:d4:
         0f:c2:bd:63:14:9c:75:12:ee:fc:ff:3f:6b:9b:45:02:fa:13:
         2c:6c:f3:d7:01:d6:8d:9e:b5:58:f1:ce:9a:60:ad:03:c5:f1:
         1c:0c:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:28 2026 by rpki-client