This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File:                     X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier:          4YpxDm0RZduLlPjkRANeFL1x+4ccaq6prUrEg88lZvY=
Subject key identifier:   B3:3B:E6:FF:34:CA:75:5C:84:13:B3:46:85:F7:6E:48:44:C9:3E:16
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer:       /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial:       019C435956D0783A92A401E5FC833B38DE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number:          16C9
Signing time:             Mon 09 Feb 2026 17:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:54 +0000
Files and hashes:         1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: klb1TZX5G7PqC37k/yVcKlIfCh9FIBsPhWmu1vwYQ1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:56:d0:78:3a:92:a4:01:e5:fc:83:3b:38:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
        Validity
            Not Before: Feb  9 17:00:54 2026 GMT
            Not After : Feb 10 17:00:54 2026 GMT
        Subject: CN=b33be6ff34ca755c8413b34685f76e4844c93e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:32:c1:28:09:9e:0f:15:29:e8:ad:05:a8:a4:
                    89:53:f2:5a:dc:61:57:4b:71:7b:1c:5f:5b:61:d9:
                    8a:71:d2:f5:a2:dc:dd:b1:dd:2e:8e:fb:19:75:e2:
                    6b:2e:86:3f:33:50:81:65:ce:d7:e4:9a:b6:f8:28:
                    86:4c:39:36:77:38:a3:92:bd:43:a7:fe:a1:52:63:
                    19:7a:03:aa:2e:7a:05:9c:22:3d:46:ae:6c:2b:9a:
                    90:df:1d:c3:09:41:ef:9f:d7:45:dd:90:80:bc:f7:
                    40:65:01:0a:7d:f0:b3:31:b1:14:75:b0:c3:82:25:
                    7e:4f:5f:fa:37:b2:12:dd:c3:db:29:9f:61:5c:cb:
                    2a:47:7b:ed:3f:14:37:df:65:e2:dd:60:e2:b7:07:
                    4e:3e:b1:70:04:73:b3:fc:33:b0:3c:01:3e:44:85:
                    bb:4f:cb:9d:24:b9:d1:e9:b1:1a:01:a2:c0:a5:83:
                    7d:34:bf:a5:e1:01:6c:95:d8:61:35:1d:c1:8e:fd:
                    28:89:48:8a:a4:15:f2:99:e1:f1:ee:84:f0:a8:70:
                    64:81:5e:e9:92:de:db:d3:cf:19:d7:45:1e:5c:94:
                    19:02:3e:ea:2d:85:64:36:02:ac:8c:1a:b1:a7:27:
                    4b:be:cc:39:2b:7d:e0:35:06:12:41:46:14:33:34:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3B:E6:FF:34:CA:75:5C:84:13:B3:46:85:F7:6E:48:44:C9:3E:16
            X509v3 Authority Key Identifier:
                keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:49:18:85:fa:76:ed:9e:1a:ac:92:7e:20:ef:4f:f1:71:c7:
         7e:56:d2:74:60:c7:0c:36:c6:a3:e1:ac:6c:f9:d6:b4:6b:7d:
         d4:0d:0d:2a:b0:98:65:1a:28:33:5e:25:ae:b4:f8:3d:55:be:
         19:69:1d:7c:48:be:bb:60:68:b1:d7:38:c4:8f:40:a2:9c:58:
         78:1a:89:74:f7:45:f3:ce:86:f4:ed:cf:77:80:74:a5:4e:7e:
         7a:d2:7d:31:ba:9b:1a:28:08:3c:90:18:e2:87:d0:1f:24:f7:
         d1:e8:06:4a:d1:6b:fb:38:36:2d:84:21:e2:a0:9b:8f:c0:2d:
         04:af:4e:3b:77:48:96:56:75:e7:5a:ba:1d:49:e7:ad:c9:bf:
         fd:ca:eb:d8:23:32:27:ad:29:d2:15:b4:12:66:ab:f9:a0:67:
         04:a6:4c:a9:3a:df:5e:87:f9:c1:47:76:0b:33:ed:d8:f4:59:
         9c:69:33:46:6a:b5:a8:77:de:79:c0:ff:7a:29:a7:62:b1:5c:
         fe:ac:d7:ac:e7:56:96:72:06:a9:5d:68:4f:b4:e5:69:f7:7f:
         ef:06:bb:60:6b:44:7b:9c:7d:bb:34:d0:c8:d9:2c:91:75:9a:
         5f:b8:96:f4:f1:e2:44:6b:21:10:7e:7b:9c:8f:47:6e:5c:c5:
         fe:8c:f4:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWVbQeDqSpAHl/IM7ON5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw
YWZlYjIwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD
EyhiMzNiZTZmZjM0Y2E3NTVjODQxM2IzNDY4NWY3NmU0ODQ0YzkzZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zLBKAmeDxUp6K0FqKSJU/Ja3GFX
S3F7HF9bYdmKcdL1otzdsd0ujvsZdeJrLoY/M1CBZc7X5Jq2+CiGTDk2dzijkr1D
p/6hUmMZegOqLnoFnCI9Rq5sK5qQ3x3DCUHvn9dF3ZCAvPdAZQEKffCzMbEUdbDD
giV+T1/6N7IS3cPbKZ9hXMsqR3vtPxQ332Xi3WDitwdOPrFwBHOz/DOwPAE+RIW7
T8udJLnR6bEaAaLApYN9NL+l4QFsldhhNR3Bjv0oiUiKpBXymeHx7oTwqHBkgV7p
kt7b088Z10UeXJQZAj7qLYVkNgKsjBqxpydLvsw5K33gNQYSQUYUMzTxjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM75v80ynVchBOzRoX3bkhEyT4WMB8GA1UdIwQY
MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt
MWQ5ZDhkMDA0MTExLzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx
LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUkYhfp2
7Z4arJJ+IO9P8XHHflbSdGDHDDbGo+GsbPnWtGt91A0NKrCYZRooM14lrrT4PVW+
GWkdfEi+u2Bosdc4xI9AopxYeBqJdPdF886G9O3Pd4B0pU5+etJ9MbqbGigIPJAY
4ofQHyT30egGStFr+zg2LYQh4qCbj8AtBK9OO3dIllZ151q6HUnnrcm//crr2CMy
J60p0hW0Emar+aBnBKZMqTrfXof5wUd2CzPt2PRZnGkzRmq1qHfeecD/eimnYrFc
/qzXrOdWlnIGqV1oT7Tlafd/7wa7YGtEe5x9uzTQyNkskXWaX7iW9PHiRGshEH57
nI9HblzF/oz0pA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:20 2026 by rpki-client