This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File:                     xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier:          YgUI/HMMcfOYmjTcu277AL5xKSy+Jf116hN6lk4bKsA=
Subject key identifier:   D7:E8:B2:FB:38:E7:9D:3A:EA:9F:55:66:CE:63:E9:46:33:19:E1:33
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer:       /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial:       019C41A1C68FE3B10B21AC589CA1CC567326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 09:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:46 +0000
Files and hashes:         1: UVWbdtgMtPSlXPD-ljLhVUXQTLI.roa (hash: 0y9dv3rbyul1H/gRs5dF3tqgdi9jkPTntAurTA6guBk=)
                          2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: VX3lOAJ7PUh00C/EA/M/ZRI4ZFOQ36OlV8eBBE63JtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:c6:8f:e3:b1:0b:21:ac:58:9c:a1:cc:56:73:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
        Validity
            Not Before: Feb  9 09:00:46 2026 GMT
            Not After : Feb 10 09:00:46 2026 GMT
        Subject: CN=d7e8b2fb38e79d3aea9f5566ce63e9463319e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:2f:e9:3f:83:ae:ee:f0:9a:cb:fc:e8:db:
                    c6:90:20:5a:23:27:9c:c3:65:02:1f:c3:79:62:c1:
                    32:ce:02:91:bd:55:53:9f:14:6f:53:d2:69:66:65:
                    fe:23:bf:50:d4:75:be:cb:56:70:d3:b5:01:5e:39:
                    e7:fe:d8:6b:20:9c:44:04:2f:a7:db:ce:2d:78:76:
                    d5:4e:96:85:3f:17:ed:89:c9:4d:d8:1f:63:eb:43:
                    5f:95:54:b4:74:27:f8:7d:03:ad:2a:6e:2f:e1:1a:
                    cb:b7:03:2a:57:f6:99:6f:2a:98:98:a6:73:22:93:
                    3c:33:22:22:e2:44:7c:87:a4:f6:c6:a2:cd:2d:4c:
                    c8:d7:da:a3:fe:c8:66:69:28:ea:20:fb:7f:4e:11:
                    bd:6f:86:90:12:a9:17:72:68:69:78:1f:e5:e8:d5:
                    5d:51:b4:78:96:08:49:9d:bc:b8:05:d8:1e:43:35:
                    be:0f:2e:a3:43:b3:32:d2:88:39:c8:39:66:84:05:
                    d3:ce:01:99:58:e9:f6:c2:e1:fb:57:fe:de:33:5a:
                    69:12:d4:8e:99:6c:d3:93:7f:74:b4:28:02:e4:68:
                    69:63:78:e8:d2:4a:1f:a0:f0:1c:cd:f2:41:ed:91:
                    2f:07:87:d2:a0:10:d4:86:83:b8:c8:82:08:57:4c:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:B2:FB:38:E7:9D:3A:EA:9F:55:66:CE:63:E9:46:33:19:E1:33
            X509v3 Authority Key Identifier:
                keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:21:26:92:47:35:9c:7a:7a:34:ab:fb:46:8d:60:de:ec:65:
         90:f1:ac:4b:0e:2d:5e:f1:93:70:89:39:40:5d:34:e2:07:17:
         e3:29:72:a7:b2:d5:94:43:50:f9:3d:ec:35:fe:21:be:d5:d2:
         34:d6:4f:47:b4:50:ab:70:0c:bb:77:fb:f4:cc:77:e5:b2:1e:
         ac:78:73:9a:c0:a9:42:ab:d6:cc:20:65:61:b6:1d:a3:07:a4:
         9f:8d:21:6e:80:cc:62:07:ae:b4:c3:da:16:c6:67:c1:f8:4b:
         cb:ed:b7:b8:76:df:7d:82:1a:4f:4f:68:4b:ba:f0:c9:48:99:
         74:18:e0:82:63:cd:6b:57:54:2d:05:49:f6:d2:ba:3b:9a:5c:
         47:ef:bb:48:cc:1e:10:a0:c5:2d:79:8a:0c:7c:ca:0e:f6:a0:
         54:e5:38:a7:c7:b3:a8:22:fa:b4:71:bd:f0:a2:21:09:a5:bc:
         e8:5e:35:38:24:fa:22:d8:54:17:b7:9d:47:d9:ae:8e:18:12:
         ed:66:d1:58:1a:4b:b1:0f:65:42:b9:7d:9a:1c:a7:76:8d:3c:
         ee:76:8c:01:54:cc:82:f1:3a:8f:e6:9d:2d:39:58:69:85:a0:
         51:54:e3:00:71:04:37:de:b2:70:22:89:8b:98:34:af:24:7d:
         d5:2c:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:15 2026 by rpki-client