This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          IjsbGCLNXcGODvXWShJz5pzI96oQh8iHzqfh5oTul4Y=
Subject key identifier:   53:34:3D:D9:40:01:43:27:04:60:62:D3:EF:7B:2F:16:FC:3F:1E:83
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019C4358C43FE2843FBA5F1CD4A810868C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 17:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:16 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: IX0KRCwOgulNNIznXLulOhUS933G2vA/NJgaxAcs9HA=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c4:3f:e2:84:3f:ba:5f:1c:d4:a8:10:86:8c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Feb  9 17:00:16 2026 GMT
            Not After : Feb 10 17:00:16 2026 GMT
        Subject: CN=53343dd940014327046062d3ef7b2f16fc3f1e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:69:fb:8e:3e:ff:d2:93:77:eb:a4:ee:58:
                    db:7f:05:29:3d:ad:72:cb:7a:72:15:0a:8b:7a:99:
                    da:5a:6f:a9:53:f1:73:65:e1:10:46:b8:29:1b:09:
                    35:b5:a7:40:92:db:25:7b:0f:a8:86:fe:5d:3e:f5:
                    c9:c1:a3:2d:0f:fa:f3:03:31:5a:36:36:dd:a5:8c:
                    aa:90:38:3e:1e:7a:a6:75:c7:3b:b9:bd:27:43:c1:
                    18:62:3e:95:cf:58:83:71:12:4c:79:11:a1:cf:27:
                    d8:61:8e:e8:3c:f5:fb:fa:0c:76:b6:b2:e7:2c:79:
                    c7:44:7a:0a:af:93:8b:58:a3:b9:de:2d:58:12:2e:
                    47:85:6c:fd:b0:85:71:26:2b:15:0b:4c:af:a7:ea:
                    70:6c:76:31:d6:3a:0b:26:3d:12:a9:18:d9:7d:4b:
                    da:d1:6e:3e:be:66:87:92:89:ca:88:be:06:15:45:
                    0a:2b:96:b1:3b:1c:6e:4c:e9:9d:1c:66:0a:9d:7a:
                    0c:b9:e6:90:3b:63:41:57:d1:68:7a:2a:cb:68:92:
                    5d:92:53:86:ea:4e:ac:cb:1f:b0:c7:1a:1a:c6:be:
                    a4:d7:e7:69:d1:10:33:55:3d:4f:16:a9:35:95:44:
                    60:10:f9:88:31:09:e1:29:c5:30:50:19:3a:cf:9a:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:3D:D9:40:01:43:27:04:60:62:D3:EF:7B:2F:16:FC:3F:1E:83
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a0:6f:88:5d:aa:f0:ee:72:e5:9c:cd:b9:d1:da:26:00:8e:
         2b:7a:0b:79:92:b5:59:79:69:df:f6:96:1b:c3:32:32:b3:2c:
         89:69:32:8f:c9:0d:de:e1:3f:ae:18:96:28:59:f2:a7:a3:4d:
         3e:45:d0:87:c2:a1:bc:b7:e6:02:00:c2:d2:32:e0:d6:46:89:
         45:4c:3c:48:3d:e5:f5:9a:dc:b7:bf:50:96:18:51:61:7e:be:
         8c:49:5f:fc:6d:af:85:0c:fb:66:b1:a6:0f:dd:b6:b6:e7:07:
         c3:2b:f4:8b:84:ab:1b:68:4b:57:3e:74:01:f6:70:3d:f1:b3:
         c8:7b:5a:1c:b8:17:ef:42:92:8a:50:64:83:c2:cc:c3:6f:aa:
         95:0c:50:c4:88:51:b3:b2:a6:29:78:23:41:44:34:60:32:ed:
         ff:99:ef:0a:4a:ff:37:90:08:1c:00:ae:a7:6e:84:b7:e6:64:
         f2:0b:07:e2:c5:e8:98:b9:37:6f:4a:c5:51:e8:3a:0f:19:72:
         c1:59:b0:c5:e7:9b:22:ab:ec:58:ce:1f:bc:15:fb:15:bd:4d:
         44:51:65:11:74:19:37:6a:d6:94:c4:84:86:0d:2e:6a:9f:c1:
         94:42:69:50:8b:bb:b2:9b:06:9a:0c:38:63:bc:82:9f:2a:55:
         f8:ff:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:01 2026 by rpki-client