This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
File:                     XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json)
Hash identifier:          c5PEWY3EqNsXCpwT2LLNoetRlkVDmKyJJNEWmm8z1Uc=
Subject key identifier:   7D:3F:C8:69:A9:CF:EE:AC:D9:9A:1F:E2:20:48:19:A1:2C:02:6C:AF
Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA
Certificate issuer:       /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
Certificate serial:       019C44A2BF8598408A42C80C86A35F7882A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 23:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:42 +0000
Files and hashes:         1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: o1BNwgm/wvQ5xb9GSRpWMH4n1lxhtCPBHBFzKUBm2MA=)
                          2: wl8tu_weubNfXZ1raiwB59IrcEQ.roa (hash: /fuDNkfWdHCDDOTyXjSm0MpspTRxJW6ZGeRcO5DS8Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:bf:85:98:40:8a:42:c8:0c:86:a3:5f:78:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea
        Validity
            Not Before: Feb  9 23:00:42 2026 GMT
            Not After : Feb 10 23:00:42 2026 GMT
        Subject: CN=7d3fc869a9cfeeacd99a1fe2204819a12c026caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:5a:72:61:9e:1d:0e:c4:e2:44:56:ca:c7:
                    82:a9:15:a1:c4:ee:78:4b:92:d1:10:26:d5:e6:e4:
                    a5:af:f8:ae:19:9b:f8:48:5b:67:90:05:9e:ed:90:
                    66:5d:d4:7f:86:19:c3:da:1d:b4:b0:cb:0b:38:14:
                    9d:3d:7d:db:69:54:c2:66:64:13:f7:e4:f3:2d:00:
                    1f:13:dc:89:f6:60:7b:82:d3:bd:af:83:e1:43:49:
                    66:58:8e:e2:27:e3:65:c7:2c:c8:68:80:02:72:a1:
                    21:b9:df:50:65:c7:1d:b3:d7:31:bd:be:a7:3b:ad:
                    23:e8:89:8a:e7:8a:2b:6e:e5:95:e0:d7:eb:ec:28:
                    9d:26:1f:35:1c:de:fb:90:c1:ce:e3:4c:7c:78:35:
                    1a:cf:0f:8d:cb:7f:65:f8:e0:67:8c:b3:23:0d:d5:
                    e1:5a:49:db:51:8d:60:38:3a:c5:0e:18:10:88:0d:
                    79:b3:b5:8e:b9:13:48:75:7e:3f:e8:34:09:fa:d2:
                    63:d6:2e:12:bb:49:f4:75:de:74:ff:a4:77:79:9a:
                    6a:3b:bf:ec:1f:23:18:77:23:67:18:c3:03:85:d8:
                    5a:bb:15:db:ae:e1:b0:8a:4e:71:59:13:0e:cb:25:
                    1c:41:1f:4c:66:14:45:50:4c:1e:54:d7:58:f6:35:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3F:C8:69:A9:CF:EE:AC:D9:9A:1F:E2:20:48:19:A1:2C:02:6C:AF
            X509v3 Authority Key Identifier:
                keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:d7:57:4b:ae:56:87:63:da:a7:8a:9d:46:3e:90:db:f7:
         a0:97:5e:1a:c8:fb:b9:0c:32:66:e3:a9:c0:ae:4d:b1:91:36:
         34:4d:7a:89:4e:51:86:f1:05:9f:fe:24:fd:2b:9d:1e:46:cd:
         e2:af:62:65:98:8c:19:41:4e:b5:99:d6:2a:92:d7:ec:79:30:
         e1:1f:0d:a5:12:bf:69:c4:bd:a2:09:28:ae:ca:ab:95:28:b2:
         14:36:c3:c4:b2:a2:a8:86:db:51:b8:7b:22:c0:ef:d7:f5:66:
         e1:8b:e3:5b:2a:bc:cd:b6:05:2a:78:0d:84:47:36:a9:d3:0d:
         48:67:5e:cd:07:ca:0f:43:05:47:a5:a0:13:cf:11:a2:4c:e1:
         7d:b9:b1:65:41:fe:84:0b:ff:28:10:f0:9b:c1:59:77:5f:8a:
         bf:1a:9b:16:a5:97:fa:d9:21:f7:67:d4:f3:19:08:d2:6c:f5:
         7c:8d:07:b5:97:e7:f2:60:46:e7:d1:23:e9:e2:c0:58:db:30:
         fd:14:66:4a:7e:27:a0:b8:42:8e:4f:46:89:a4:ff:e7:51:63:
         9f:6e:fe:ad:31:ef:d2:b4:62:5e:7c:bf:c8:83:db:a0:3b:42:
         ea:ce:60:02:91:7a:ad:33:63:2f:c5:0f:b2:b7:9a:d6:3f:7a:
         51:ef:60:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEor+FmECKQsgMhqNfeIKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3
ZGE3ZWEwHhcNMjYwMjA5MjMwMDQyWhcNMjYwMjEwMjMwMDQyWjAzMTEwLwYDVQQD
Eyg3ZDNmYzg2OWE5Y2ZlZWFjZDk5YTFmZTIyMDQ4MTlhMTJjMDI2Y2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1xacmGeHQ7E4kRWyseCqRWhxO54
S5LRECbV5uSlr/iuGZv4SFtnkAWe7ZBmXdR/hhnD2h20sMsLOBSdPX3baVTCZmQT
9+TzLQAfE9yJ9mB7gtO9r4PhQ0lmWI7iJ+NlxyzIaIACcqEhud9QZccds9cxvb6n
O60j6ImK54orbuWV4Nfr7CidJh81HN77kMHO40x8eDUazw+Ny39l+OBnjLMjDdXh
WknbUY1gODrFDhgQiA15s7WOuRNIdX4/6DQJ+tJj1i4Su0n0dd50/6R3eZpqO7/s
HyMYdyNnGMMDhdhauxXbruGwik5xWRMOyyUcQR9MZhRFUEweVNdY9jVyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0/yGmpz+6s2Zof4iBIGaEsAmyvMB8GA1UdIwQY
MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt
MzUyMDA0YmMyMjgyLzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy
LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC3XV0uu
Vodj2qeKnUY+kNv3oJdeGsj7uQwyZuOpwK5NsZE2NE16iU5RhvEFn/4k/SudHkbN
4q9iZZiMGUFOtZnWKpLX7Hkw4R8NpRK/acS9ogkorsqrlSiyFDbDxLKiqIbbUbh7
IsDv1/Vm4YvjWyq8zbYFKngNhEc2qdMNSGdezQfKD0MFR6WgE88RokzhfbmxZUH+
hAv/KBDwm8FZd1+KvxqbFqWX+tkh92fU8xkI0mz1fI0HtZfn8mBG59Ej6eLAWNsw
/RRmSn4noLhCjk9GiaT/51Fjn27+rTHv0rRiXny/yIPboDtC6s5gApF6rTNjL8UP
srea1j96Ue9gJg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:44 2026 by rpki-client