This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File:                     xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier:          DwPFDOOeWn/OGujp9m+p/6ne4g41Kd9/RwHuAuAqOzM=
Subject key identifier:   7D:D1:E6:46:AC:EB:60:D0:FF:A8:D2:A2:A3:C9:D7:74:5C:72:91:9C
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer:       /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial:       019C420F872D5673D9A98295030513EE10FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:39 +0000
Files and hashes:         1: QX0TE-TV3E6_Xery30IllGZ3lmk.roa (hash: 2B0PODYP4I37DhlKEI2C0a2CWIscrasrNeELFrYNHjs=)
                          2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: yRz8GCBLE7wwVRj6IkoVUixc8WZI9FFMy1gPhmI+D3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:87:2d:56:73:d9:a9:82:95:03:05:13:ee:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
        Validity
            Not Before: Feb  9 11:00:39 2026 GMT
            Not After : Feb 10 11:00:39 2026 GMT
        Subject: CN=7dd1e646aceb60d0ffa8d2a2a3c9d7745c72919c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:10:fe:b4:2c:18:3a:0c:53:a3:6e:0d:ca:67:
                    67:16:fc:0a:57:88:7b:b7:62:44:1d:95:26:b3:3d:
                    53:84:57:4b:06:a4:1f:d8:28:e7:41:78:46:f2:83:
                    58:62:5f:a2:a9:35:c8:31:cc:d3:2a:dd:c9:b8:45:
                    46:91:5a:ea:1d:ab:b7:53:89:68:9a:f8:bf:dd:ee:
                    7b:90:87:02:32:97:70:e9:9e:ea:3f:5f:f8:29:21:
                    61:41:7e:b6:d7:5c:05:a6:b8:13:51:a8:e9:aa:f9:
                    1a:3a:e7:33:12:6b:fe:b7:65:70:0a:0c:1d:ae:6c:
                    47:08:cd:bc:09:26:8a:98:a2:db:1c:f7:1e:ef:e7:
                    14:b0:1a:b7:d7:76:99:5a:60:ba:89:ff:16:34:60:
                    4a:65:09:82:70:3e:72:ad:bb:08:55:a5:ad:8f:cb:
                    e2:53:7c:73:66:56:2c:ab:8a:84:e5:95:b1:fd:63:
                    c4:1c:6f:0e:45:9b:fe:1b:a1:22:83:e4:3c:be:81:
                    ae:5d:45:e6:48:bd:6e:b3:62:59:d6:d3:d9:3e:54:
                    9d:17:4d:c3:e9:13:1f:8f:15:7b:8f:37:ae:3e:c0:
                    a4:35:9c:57:60:ed:80:91:d2:8e:5b:02:ff:a2:86:
                    52:d9:c7:61:84:79:d0:28:b7:f8:17:d8:2c:a6:e5:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:E6:46:AC:EB:60:D0:FF:A8:D2:A2:A3:C9:D7:74:5C:72:91:9C
            X509v3 Authority Key Identifier:
                keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3a:47:ba:e6:d0:3f:7f:05:0b:4e:e1:d2:3c:ed:47:7f:c7:
         56:9f:61:e1:82:7c:71:56:a3:47:6e:f3:b0:67:f7:46:9f:94:
         a8:e2:7c:6b:6b:8a:20:ac:12:b2:47:6a:46:00:b9:2a:82:c0:
         66:3b:1d:dd:b1:c7:fe:d2:e6:5d:06:35:91:4e:14:b5:e0:63:
         ef:bb:52:42:1e:83:37:8b:8a:8a:53:4e:df:f2:bd:8d:6d:f3:
         88:d4:9c:3b:ba:22:e4:5b:77:bc:3f:4b:85:a3:e2:78:8c:fa:
         52:3b:5e:ff:4f:17:1f:91:68:b8:35:6c:26:ea:de:32:4b:36:
         57:68:b2:d9:a8:f6:72:ec:f8:8a:7e:8a:d9:44:bf:77:ba:7a:
         23:53:f5:57:18:8a:2f:98:e5:25:c1:20:c3:9c:56:95:b7:6e:
         63:5e:4f:14:e0:56:bb:b7:b1:a2:d6:e1:53:5d:04:63:69:4b:
         d5:eb:09:6f:e1:1f:94:ac:d7:6b:83:f9:e4:58:d6:a8:56:50:
         99:51:a0:92:f1:e4:af:81:3e:db:07:c2:fa:44:45:af:21:41:
         4b:9a:8e:46:c8:47:d6:8c:63:90:c3:b9:a0:fd:d8:c1:27:81:
         77:6b:94:7f:e9:b1:f4:34:ba:cb:19:06:5e:96:9a:c1:fd:0a:
         6c:5a:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:46 2026 by rpki-client