This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File:                     xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier:          i80Jh/LEx3Tz4QiZTmfD2FrHaDPol8ZjD050YSxa9QA=
Subject key identifier:   F4:01:CF:4B:27:6D:2D:82:4A:9E:81:E6:E3:A8:13:9A:40:66:31:90
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer:       /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial:       019C41D8D3E40863326C0AE1C7E95974810A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 10:00:54 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:54 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:54 +0000
Files and hashes:         1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
                          2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: lbCU7jjt/egktawb19KVD5rKc6qCgXYtntE/4ldxaqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:d3:e4:08:63:32:6c:0a:e1:c7:e9:59:74:81:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
        Validity
            Not Before: Feb  9 10:00:54 2026 GMT
            Not After : Feb 10 10:00:54 2026 GMT
        Subject: CN=f401cf4b276d2d824a9e81e6e3a8139a40663190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:99:d7:a9:f6:52:25:54:22:9b:28:51:6a:
                    c3:bb:e1:9f:90:07:2f:b2:bd:a5:64:be:a7:fa:51:
                    d1:f2:34:c9:5b:bc:0f:ee:4f:42:cd:9a:a3:53:97:
                    75:eb:4e:c2:47:6e:ea:d5:71:79:4a:bb:d6:6a:d6:
                    60:43:8c:00:0f:4c:26:46:c5:ff:7b:c0:a1:84:13:
                    45:b4:4b:7b:a4:8d:61:e6:08:de:82:9b:f8:9d:e7:
                    88:73:36:f3:32:33:37:02:31:79:7d:a3:71:e6:fb:
                    c1:a4:54:ea:af:22:d8:76:fb:40:df:c8:9c:3c:2c:
                    e5:d7:b1:6e:df:31:c9:61:c0:ec:ee:be:c8:61:59:
                    02:16:a3:1f:2a:07:10:4e:35:13:69:ba:21:59:be:
                    30:23:99:69:d1:f2:0c:8f:f0:45:ea:84:c3:c0:79:
                    0d:a4:99:4f:91:ae:91:b0:35:8f:f0:8f:dd:2b:58:
                    0f:93:2a:df:1d:8f:62:3c:39:2a:4b:98:fa:bd:5b:
                    a7:0f:f1:83:0d:c7:f0:b5:a3:1f:75:75:80:eb:73:
                    62:41:3f:fc:ed:2c:be:17:80:cb:76:b3:b3:1e:3a:
                    62:02:38:d6:36:91:14:d9:e3:b1:7c:00:9e:77:78:
                    e2:bb:e4:b7:dc:78:ef:d3:04:d5:4f:0f:da:27:6c:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:CF:4B:27:6D:2D:82:4A:9E:81:E6:E3:A8:13:9A:40:66:31:90
            X509v3 Authority Key Identifier:
                keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:6a:93:fc:e8:67:99:b5:68:60:ca:e3:b4:3c:fb:c4:7a:
         37:e5:b1:7a:16:08:eb:4d:d4:c4:94:ce:a9:81:8b:76:4e:f1:
         36:37:4d:1e:f0:52:87:d9:ae:97:35:37:1e:29:3e:f8:0c:54:
         07:1e:9f:f3:b9:a7:bc:98:61:67:fc:da:e2:60:77:d6:3c:ce:
         51:57:16:e6:79:03:52:3c:4c:41:e1:f5:81:1f:74:a2:09:50:
         8c:c0:7b:5b:9c:d9:ea:85:d0:80:68:bd:b7:b8:0d:2b:c6:dd:
         58:bf:3e:07:0e:ba:f7:5f:ae:fa:40:13:11:ce:16:c6:61:c4:
         8e:c4:d0:8a:58:d7:06:e9:c6:9a:99:73:8d:61:9e:0a:93:da:
         eb:7b:cb:4f:6a:6d:91:a4:55:b3:0c:46:de:94:85:a3:df:27:
         6a:41:a9:0e:b1:82:91:b4:bb:7a:9b:57:fa:ac:f8:3c:04:02:
         f4:5b:a1:91:47:d2:b3:4c:17:5b:b3:77:9f:c7:8e:eb:08:b2:
         c5:ac:6d:32:66:46:8c:5f:50:dc:5b:0b:86:cb:67:39:e2:62:
         df:1b:27:4b:9f:4c:b0:02:8c:53:08:2a:b4:bc:73:ae:7b:0a:
         a3:f8:f8:e3:20:ac:dd:f9:b0:87:ee:9c:31:36:66:2d:f9:cb:
         20:e0:6e:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2NPkCGMybArhx+lZdIEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjYwMjA5MTAwMDU0WhcNMjYwMjEwMTAwMDU0WjAzMTEwLwYDVQQD
EyhmNDAxY2Y0YjI3NmQyZDgyNGE5ZTgxZTZlM2E4MTM5YTQwNjYzMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsKZ16n2UiVUIpsoUWrDu+GfkAcv
sr2lZL6n+lHR8jTJW7wP7k9CzZqjU5d1607CR27q1XF5SrvWatZgQ4wAD0wmRsX/
e8ChhBNFtEt7pI1h5gjegpv4neeIczbzMjM3AjF5faNx5vvBpFTqryLYdvtA38ic
PCzl17Fu3zHJYcDs7r7IYVkCFqMfKgcQTjUTabohWb4wI5lp0fIMj/BF6oTDwHkN
pJlPka6RsDWP8I/dK1gPkyrfHY9iPDkqS5j6vVunD/GDDcfwtaMfdXWA63NiQT/8
7Sy+F4DLdrOzHjpiAjjWNpEU2eOxfACed3jiu+S33Hjv0wTVTw/aJ2zVAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQBz0snbS2CSp6B5uOoE5pAZjGQMB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjn9qk/zo
Z5m1aGDK47Q8+8R6N+WxehYI603UxJTOqYGLdk7xNjdNHvBSh9mulzU3Hik++AxU
Bx6f87mnvJhhZ/za4mB31jzOUVcW5nkDUjxMQeH1gR90oglQjMB7W5zZ6oXQgGi9
t7gNK8bdWL8+Bw6691+u+kATEc4WxmHEjsTQiljXBunGmplzjWGeCpPa63vLT2pt
kaRVswxG3pSFo98nakGpDrGCkbS7eptX+qz4PAQC9FuhkUfSs0wXW7N3n8eO6wiy
xaxtMmZGjF9Q3FsLhstnOeJi3xsnS59MsAKMUwgqtLxzrnsKo/j44yCs3fmwh+6c
MTZmLfnLIOBu5g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:18 2026 by rpki-client