This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          P9rWOKl9wh6Diz23NcXV21j3RJGXdMbJ3ZDjf5vqg3s=
Subject key identifier:   FB:E9:63:F5:0E:4D:07:62:B1:6D:78:EA:6B:2D:1D:F5:7B:61:24:EF
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       019C1D5E71F6279A247EB72A534897DA7726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0FBA
Signing time:             Mon 02 Feb 2026 08:00:54 +0000
Manifest this update:     Mon 02 Feb 2026 08:00:54 +0000
Manifest next update:     Tue 03 Feb 2026 08:00:54 +0000
Files and hashes:         1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
                          2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: wibLXIvjAJHj7id7YxI4TiXmKRbTNC/NrAfil9iHzlE=)
                          3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
                          4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
                          5: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
                          6: te3FBz79GYifGb3qq-rDfAn5q7I.roa (hash: 8JJ8Rj+5NIqp3neVi3adeudGuIpzTz7arVf+MmH6wks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:71:f6:27:9a:24:7e:b7:2a:53:48:97:da:77:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Feb  2 08:00:54 2026 GMT
            Not After : Feb  3 08:00:54 2026 GMT
        Subject: CN=fbe963f50e4d0762b16d78ea6b2d1df57b6124ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:c7:15:8d:f0:fc:f2:d0:10:00:0f:b7:01:
                    7e:67:61:54:0d:b4:55:f6:96:1d:82:9e:d0:f3:60:
                    64:68:a7:11:7e:b2:e0:7d:b0:9a:ce:93:9e:c7:7f:
                    ff:0f:55:06:b4:b0:0c:d3:54:40:dd:84:8d:ae:19:
                    c2:5e:b9:db:9b:34:a2:70:a3:d8:57:8d:d5:a4:e0:
                    50:0f:78:e8:65:f3:ed:12:b8:ed:63:f6:df:e3:64:
                    bf:6b:c2:76:cf:f5:97:88:5a:4d:f3:9e:83:9d:6a:
                    67:b0:ad:2e:34:05:97:4b:57:11:e3:cc:a6:bf:03:
                    3b:84:f5:73:fd:0e:34:f9:52:0b:9a:dd:b2:0a:27:
                    16:fe:63:2a:c4:32:a5:88:28:b0:be:f4:b8:20:f5:
                    a0:9a:7e:a2:ec:03:7a:63:73:5f:6d:78:3b:14:1c:
                    46:47:bf:e1:c7:18:6f:9a:a0:8b:de:50:28:8b:06:
                    30:cd:84:11:c1:35:2f:5f:96:28:7e:2c:e5:3b:73:
                    e8:fa:f2:8f:65:ce:2c:a9:44:da:a2:69:e2:0a:1e:
                    42:78:19:1d:29:37:cc:eb:6f:d8:a0:4b:8b:a3:2a:
                    0f:d0:01:9e:27:a6:26:ca:72:91:40:1d:91:4d:f4:
                    a3:a6:60:63:94:fa:22:49:a9:85:5f:14:cf:f7:76:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:63:F5:0E:4D:07:62:B1:6D:78:EA:6B:2D:1D:F5:7B:61:24:EF
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:53:7d:68:7e:d3:93:29:8b:2e:b1:78:14:55:b5:b3:4b:
         e9:fe:59:bb:1a:47:4d:58:cf:a2:4e:53:83:24:17:9e:4d:c0:
         0c:35:a7:6c:fd:6f:cd:45:af:0d:18:21:d6:2f:79:f9:fb:0e:
         57:3a:c6:5a:41:e7:48:1e:f9:b1:0b:63:aa:8f:25:4c:d1:6e:
         89:ea:98:25:88:5a:4f:41:6f:83:b0:68:94:c3:ec:21:c0:63:
         de:5f:a7:8b:cd:33:f2:af:95:5e:e7:d2:1a:1f:8c:1f:13:92:
         fe:ce:82:d9:c7:05:2b:75:40:df:82:b6:da:1c:c7:9e:a0:03:
         62:04:4c:63:ff:2e:58:b0:4e:50:71:d0:40:61:0a:75:81:ae:
         9c:04:b8:00:5a:d7:97:23:4e:67:87:66:2f:e3:f2:53:f2:cd:
         78:47:8e:17:b5:ab:58:25:91:2b:e6:18:b6:42:c4:3d:05:6a:
         0f:4e:3d:60:4e:a1:5f:8e:b7:e7:36:00:64:15:17:63:a7:c0:
         40:b7:ff:c4:81:1b:d6:5b:91:8a:0e:b2:84:32:9f:9e:8c:37:
         12:b1:b6:d0:11:66:6a:23:bf:33:a8:43:1d:59:72:9d:1b:22:
         36:06:a6:bb:4b:c2:bf:86:93:8f:73:46:06:c8:69:5b:dc:68:
         f6:33:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:53 2026 by rpki-client