This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File:                     Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier:          MKobqFgDe4I7d0XmzzXveUhelVGfdoweM1I3E+xqP2Y=
Subject key identifier:   72:13:24:F5:DB:16:B5:38:6D:F6:50:7D:2A:36:30:15:23:12:F4:88
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer:       /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial:       019C4322645F86D085C095E32540A98B40FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 16:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:53 +0000
Files and hashes:         1: JQHrdWqlz2UqGKCLzlTiY4SvfH4.roa (hash: bwaVBJc44mNBjusS1vQzeOwmOeBHHl10XyVb8yiVdpw=)
                          2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: xaL7zF/93viT8o9O6oaYTfQ/wqXGVRvuqoP46cgSAlc=)
                          3: ZjTRqjLbUrNz2NUC-0NUb8hGxVI.roa (hash: lNRVW6GevA3klBK1hehDwbl+8Dt78Jzm0k/Uol69mug=)
                          4: euXoJUWr3F0_dXowhJbULwFHFkA.roa (hash: cczTixdHtcVBoqBRLYhdFy/dK3Tmrb19hmQ27lh4fQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:64:5f:86:d0:85:c0:95:e3:25:40:a9:8b:40:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
        Validity
            Not Before: Feb  9 16:00:53 2026 GMT
            Not After : Feb 10 16:00:53 2026 GMT
        Subject: CN=721324f5db16b5386df6507d2a3630152312f488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:c0:1e:75:e1:f2:61:98:1d:ef:f9:c2:85:
                    0c:4e:5b:f5:22:8b:a0:0a:64:7d:36:85:fa:56:70:
                    17:9e:4c:5c:4b:70:0a:04:e3:fd:c9:52:66:72:75:
                    87:8f:af:b2:68:40:6a:aa:ad:67:07:25:69:94:cb:
                    95:26:7f:90:9f:b5:af:02:b5:b2:b6:e8:65:ef:70:
                    5b:72:da:49:e4:13:ee:77:2a:1d:a6:cd:60:02:cc:
                    5a:5c:38:2f:db:54:22:2e:75:1f:6b:5e:21:6b:56:
                    4f:b0:49:4e:20:c0:22:16:8b:05:b1:39:a5:96:61:
                    cf:24:06:a8:7a:e8:10:f7:39:f7:f8:9f:6e:b4:cd:
                    07:3a:91:b7:dd:24:27:bd:1e:78:2a:4d:c1:49:55:
                    85:75:fa:fd:8a:ce:a4:8e:90:3b:14:60:7e:60:88:
                    5e:c8:07:00:ce:24:eb:00:d6:f2:1f:d6:d9:aa:9d:
                    dc:b5:a8:f4:22:3a:39:2d:01:5f:d7:48:a9:1b:e0:
                    cc:0c:6a:2b:c0:35:e5:a6:9a:93:7f:11:3d:01:e1:
                    ff:30:57:bf:6a:41:32:b3:63:d1:8f:f0:72:05:fc:
                    d9:c3:a4:b8:6d:ab:bb:13:39:9a:36:c5:3d:87:2c:
                    bd:bb:86:2b:7c:f9:47:89:78:eb:02:0b:bc:6d:08:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:24:F5:DB:16:B5:38:6D:F6:50:7D:2A:36:30:15:23:12:F4:88
            X509v3 Authority Key Identifier:
                keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:56:5a:dc:a9:c7:82:ed:7f:42:6c:29:f6:28:f5:89:20:
         13:67:da:04:08:0e:1a:69:01:72:13:e9:9d:a7:0b:02:42:ef:
         79:bf:32:29:ff:dd:38:bf:e0:1a:0e:17:f5:3a:3a:01:c1:11:
         67:6a:97:5e:c9:8f:c6:9e:84:c0:82:58:17:60:8e:33:c7:b9:
         d6:2a:f1:7a:9b:bd:ca:c2:9b:63:07:1e:ab:7b:aa:fd:80:48:
         64:d3:74:18:55:b5:91:60:68:a0:98:59:ed:a4:d2:05:90:7b:
         28:80:70:a8:71:6e:e7:d4:2c:3d:10:86:af:dd:c8:9b:b8:86:
         2c:16:4a:9e:d3:46:6d:37:37:5c:49:1a:14:d9:88:83:7c:21:
         be:d2:19:57:0b:07:80:7b:92:eb:c1:a2:d4:69:6a:d9:38:97:
         f3:5d:b4:ce:08:a4:22:30:ad:b9:01:7b:76:d5:cb:33:10:1f:
         45:63:ce:f9:70:4e:e9:52:50:f3:3c:ae:b5:f1:63:ef:06:0c:
         01:67:12:86:dc:7a:d0:f9:e7:67:2b:33:94:75:08:79:d4:18:
         1e:ae:dc:16:de:c9:8f:4d:83:96:93:6e:1a:47:88:70:64:67:
         48:16:6b:39:57:48:f5:48:15:49:fb:2b:1f:7e:fe:29:18:6c:
         fe:3f:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:38 2026 by rpki-client