This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File:                     xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier:          IuGvDidHADpvbeQfe52U08k/6LW5l3uUAukPqv3mS7s=
Subject key identifier:   A1:26:3C:B8:DF:71:AE:A5:F2:1F:DE:93:32:A8:44:74:43:13:87:4B
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer:       /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial:       019C40FD42840A313F64217594C97A0E6426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 06:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:05 +0000
Files and hashes:         1: Ey9RDTUKNtpxucDL595am7oxv5w.roa (hash: Tn0c8HJjvP0UNfrsMJSn4uo3H3SBrrgbKleOBTQq0Rg=)
                          2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: rRoNKXhs9ffylh76H2Gzw/mhMHZMN/DmORUz/HytqLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:42:84:0a:31:3f:64:21:75:94:c9:7a:0e:64:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
        Validity
            Not Before: Feb  9 06:01:05 2026 GMT
            Not After : Feb 10 06:01:05 2026 GMT
        Subject: CN=a1263cb8df71aea5f21fde9332a844744313874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:62:a7:ca:92:b3:40:2f:bb:74:fa:7e:f8:
                    fc:e6:24:4c:4a:fe:a5:71:6b:1f:5e:a6:2d:35:be:
                    a1:f5:1a:30:dd:f5:b2:dc:39:72:d8:98:b2:49:3a:
                    e5:72:b4:cb:b9:80:24:7b:66:27:ff:8e:1b:fb:00:
                    53:1e:39:4f:11:8d:65:b0:b5:ad:44:ed:96:46:f2:
                    a0:b0:f7:93:e6:bb:93:5e:71:d5:38:bc:43:9d:85:
                    48:6e:5f:db:37:0f:0d:6e:5a:43:8a:fd:02:2d:27:
                    62:9e:39:ae:92:d4:83:19:5a:bc:c7:c1:90:da:d8:
                    a8:b1:37:f9:11:86:5b:f3:25:21:8c:e7:a0:c3:f2:
                    7f:37:81:28:7c:fe:d0:81:02:4a:e4:f4:67:e9:d0:
                    94:21:a8:a8:a5:ba:2b:c2:c0:1a:33:f4:82:f9:00:
                    89:36:63:02:8b:7a:3f:9a:cc:96:bb:fa:23:bf:d5:
                    25:6b:60:df:26:3c:23:4e:d4:b2:8f:64:da:f8:f9:
                    9b:41:c9:19:ac:94:99:c9:1b:2e:e8:e5:12:6e:f9:
                    55:78:fd:61:b2:3c:49:f9:3f:55:6c:13:e8:d4:1b:
                    53:84:af:ca:85:81:bf:71:67:f1:36:59:5d:54:5d:
                    7f:7f:54:73:08:db:4b:d0:4c:73:b0:a8:02:26:51:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:3C:B8:DF:71:AE:A5:F2:1F:DE:93:32:A8:44:74:43:13:87:4B
            X509v3 Authority Key Identifier:
                keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:00:ff:ae:8e:dd:b4:a4:75:2d:ae:77:c0:7e:98:4f:30:ac:
         07:01:b8:d2:4a:85:29:ff:a9:2d:a7:d7:c5:ea:52:ca:ec:5d:
         d3:ee:fb:db:ff:5b:83:14:59:4b:9a:72:f8:37:a9:be:2f:57:
         80:69:5c:dc:4a:ae:0c:f2:70:14:49:27:6d:12:66:0e:82:f7:
         ec:a9:25:4e:cd:6a:8b:65:cd:07:4c:5b:92:39:13:4a:54:37:
         11:7d:9f:a3:b5:5e:8e:9a:86:10:56:fc:64:8a:dd:2d:d9:e3:
         47:3c:bf:a9:56:87:46:35:16:bf:f1:8d:1f:a1:ed:5f:15:31:
         3b:91:f2:d7:d7:50:af:d1:03:ea:5c:50:af:35:99:f9:9f:0f:
         2d:f6:43:f5:a0:a3:58:3d:2c:a3:10:f0:99:29:88:b8:c2:f7:
         27:b6:19:91:f3:ba:f2:7b:af:9d:64:a7:35:21:d3:54:57:08:
         ad:cc:a3:38:f7:5b:1b:2c:88:da:5a:da:31:3b:74:6e:df:a8:
         18:92:5e:7d:8a:1b:68:b0:d7:f0:cf:ba:20:a4:fa:c4:c5:d8:
         e6:2e:21:ed:49:52:c6:bf:93:5f:81:bc:1c:ce:7b:89:49:27:
         3e:2c:21:7f:6c:1e:e0:6d:aa:42:b4:a0:d4:78:2f:42:b8:8c:
         ca:5b:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:42 2026 by rpki-client