This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File:                     xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier:          MJGBe4Jf4TYpOAbnmeaU7rXmPBQHcGPHEpGnTv0zlXk=
Subject key identifier:   4C:E0:17:43:71:DE:27:47:BF:06:E6:D9:28:04:C4:A7:51:ED:C1:98
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer:       /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial:       019C1D5E361BDD5391E709A1B8617634B17B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number:          07EE
Signing time:             Mon 02 Feb 2026 08:00:39 +0000
Manifest this update:     Mon 02 Feb 2026 08:00:39 +0000
Manifest next update:     Tue 03 Feb 2026 08:00:39 +0000
Files and hashes:         1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
                          2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
                          3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 1hAhGBpgTs6fwGER5MkFkG+DfWd5xFXVzao5iLaQjdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:36:1b:dd:53:91:e7:09:a1:b8:61:76:34:b1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
        Validity
            Not Before: Feb  2 08:00:39 2026 GMT
            Not After : Feb  3 08:00:39 2026 GMT
        Subject: CN=4ce0174371de2747bf06e6d92804c4a751edc198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:2c:c9:81:ed:76:a3:c1:1d:e1:fa:09:fa:
                    9c:8c:7a:8b:44:1c:28:22:1c:d7:20:6c:f3:dd:64:
                    ca:dd:af:41:ef:0b:ed:14:58:07:66:87:97:0f:e7:
                    6e:d6:53:74:07:80:4d:59:c7:d3:96:6e:2f:7a:a5:
                    17:e2:fe:ef:a9:6a:cf:29:52:e2:02:81:c0:ae:bb:
                    b6:f1:f3:4d:3f:bc:e5:1b:8f:81:59:5c:85:90:ca:
                    55:9a:5b:67:60:ee:46:58:e4:6f:ee:3e:a7:7e:36:
                    0b:88:28:39:cd:be:91:40:42:78:ed:38:5d:b0:f2:
                    61:0d:5b:6f:7c:8a:f7:4f:0e:9b:e0:00:c0:2b:87:
                    e8:4e:76:52:d0:31:1c:2b:e9:04:0b:09:d0:93:0f:
                    09:47:17:88:59:62:db:a6:a9:9e:12:e4:43:47:b1:
                    c6:bc:d1:4f:b3:12:a8:ba:8f:93:ca:58:22:00:c9:
                    88:3f:3c:52:ec:ce:9a:bd:e1:41:2e:10:96:00:34:
                    10:58:67:17:57:a2:60:e1:92:48:41:17:13:13:6a:
                    ab:6c:45:38:f0:a9:19:12:88:a4:96:f8:c5:dc:e1:
                    ef:b5:02:f1:fb:f9:33:66:ab:12:1e:0a:3f:0f:fc:
                    d8:e3:8b:09:b5:06:b1:1c:c3:66:61:84:b2:9a:fa:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E0:17:43:71:DE:27:47:BF:06:E6:D9:28:04:C4:A7:51:ED:C1:98
            X509v3 Authority Key Identifier:
                keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:60:79:0d:26:34:aa:33:53:c7:2a:1e:ba:97:e1:92:2c:
         3c:c0:77:2d:ad:1d:d4:73:c3:11:cd:93:27:cf:56:ab:aa:50:
         12:18:fe:5f:8a:05:ef:86:46:fd:d7:e4:14:1e:70:ef:c4:90:
         f9:53:1c:51:a6:7d:a6:35:fa:d2:87:7e:84:d3:fc:e3:38:42:
         97:cb:e5:ef:ac:c3:34:d3:51:94:76:a2:7c:21:1a:15:3b:c6:
         9b:f0:73:79:9b:e3:62:7d:3e:2c:c0:32:39:93:21:1d:6f:43:
         bd:6f:f5:d1:08:78:de:98:27:00:b4:af:fc:7f:47:fa:ad:56:
         aa:9c:f7:b0:6f:c0:5e:1b:9f:37:1c:67:30:00:45:b1:a3:54:
         5a:aa:27:86:b5:b2:c3:b3:1e:25:72:28:5c:0f:41:1f:cd:30:
         b7:0b:b3:3b:8d:fb:22:4d:4b:ad:bf:ea:e9:e5:08:2e:d7:24:
         1c:7c:a6:a7:a2:ee:59:fa:30:18:00:e0:15:3a:29:26:24:82:
         b8:86:59:da:12:ca:94:2d:59:55:75:dc:fd:39:f2:7c:f9:c7:
         5d:22:f0:4b:ac:cc:37:61:8c:c2:24:e4:be:97:da:6a:d5:45:
         6e:9a:46:f0:b8:bd:0b:2d:1b:c3:ed:c3:06:12:a1:f5:05:55:
         dc:25:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:48 2026 by rpki-client