This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File:                     XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier:          Na4Q6LCYn5eT+3xmdJh+nxSNM9kzx3JsZBcvNtDGaFw=
Subject key identifier:   42:9E:65:B9:B7:8B:8B:BE:5F:97:46:45:35:E5:B3:19:2B:91:AB:01
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer:       /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial:       019C43C6C69AC66D1AB7F2C5C643B0302A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number:          0604
Signing time:             Mon 09 Feb 2026 19:00:26 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:26 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:26 +0000
Files and hashes:         1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
                          2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: /JTgLSQqkTBlbeFvUpxGKwsmQW/pyH61EmCNVeTrOCQ=)
                          3: bo5WfapXlg-B8bHycWZVlbYa0_E.roa (hash: zgeOYcSCXR5A+F5TcrL2+OPIXguhUzoA2nj4CspJY/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:c6:9a:c6:6d:1a:b7:f2:c5:c6:43:b0:30:2a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
        Validity
            Not Before: Feb  9 19:00:26 2026 GMT
            Not After : Feb 10 19:00:26 2026 GMT
        Subject: CN=429e65b9b78b8bbe5f97464535e5b3192b91ab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:61:dc:9d:26:0b:fa:a8:09:10:fd:8a:3f:
                    47:47:85:97:29:87:10:c5:19:1b:5a:84:cf:3c:59:
                    a9:39:1b:85:a3:be:52:a0:6f:f0:02:d6:cd:cd:a2:
                    c8:10:65:1a:d0:8f:cb:2a:0d:ed:62:4c:14:85:dc:
                    1a:30:06:9d:e0:01:82:f3:3e:3f:d4:5b:96:32:9d:
                    f8:ec:83:40:5c:f1:4e:92:e8:be:e1:c8:0c:e3:aa:
                    9b:75:5c:45:72:72:8c:8b:a5:87:f1:14:7a:79:1e:
                    2e:7b:6e:4a:ff:19:0e:7d:40:22:1c:5c:fa:dd:a3:
                    63:a4:ae:76:b1:f9:7d:05:a3:5a:d9:91:7c:1d:31:
                    ae:2b:e5:fe:3b:d1:74:20:48:25:55:d7:34:f9:a5:
                    95:63:b3:4d:f1:46:c0:82:20:bc:b7:f4:54:6e:a5:
                    3b:f5:5e:2d:50:b1:ff:3d:43:16:54:fe:40:26:23:
                    76:45:32:81:02:57:03:c3:45:22:cb:99:97:f1:e0:
                    f7:83:70:94:e3:1d:e9:d4:81:d2:92:42:0d:93:5d:
                    b9:fd:6f:8f:30:ec:e1:d5:eb:99:45:11:a2:8c:70:
                    3f:e7:31:d5:41:a5:e5:00:59:6c:28:b5:6a:4a:cb:
                    8a:c4:5a:e9:4f:f4:f5:c6:eb:c5:0b:4c:04:46:3e:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:65:B9:B7:8B:8B:BE:5F:97:46:45:35:E5:B3:19:2B:91:AB:01
            X509v3 Authority Key Identifier:
                keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:64:c8:82:37:20:28:60:90:08:8a:92:e1:8b:0e:a7:d3:0c:
         ee:7a:07:1d:8e:ef:61:8f:71:8c:22:0b:85:19:2a:17:3f:0f:
         ea:fc:36:52:73:e2:f1:eb:8a:c0:7d:8e:80:f5:63:54:ea:d8:
         c9:d2:de:ae:35:a8:b5:d9:7e:23:6b:ac:b7:97:e4:75:43:9b:
         55:f0:2b:3f:5e:8f:d2:54:8d:7f:9f:1c:aa:86:a8:67:fa:d9:
         c0:b3:f7:2f:6d:a4:51:5c:5d:e2:9c:2c:4d:47:b1:da:a4:8d:
         39:eb:7c:77:03:4b:3e:02:6a:e5:8d:20:d7:39:ec:d6:26:1e:
         50:94:f0:81:0c:36:63:d9:4b:1e:df:bc:49:90:89:4f:78:f6:
         56:a3:1c:68:92:03:a0:2e:40:0f:5e:67:8d:1d:c0:b7:c0:a3:
         89:3f:25:d3:c0:d4:e7:c8:e8:e6:3a:4e:bd:0a:b9:21:74:b9:
         f8:47:c6:5d:39:62:0b:40:44:10:e0:5a:05:90:8f:d2:6d:1a:
         2f:c5:87:e1:f1:a0:60:5e:df:2c:31:78:bf:50:58:9e:ed:84:
         ce:31:92:7f:85:ee:bd:1b:a6:e4:3e:27:77:ef:03:4e:aa:27:
         de:36:37:41:fb:04:45:12:15:92:b8:da:b8:2e:12:2b:d4:a0:
         31:05:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:17 2026 by rpki-client