This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          G8ycRkMtfwUPhibZaF7wOQ49c3Y4lpipUtEGQuZE05U=
Subject key identifier:   24:8E:F0:A8:64:B3:84:10:47:9C:01:EF:ED:CA:3C:81:5F:C7:36:0E
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       019C42103438E324D98CAA91A1C5F6453A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:01:24 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:24 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:24 +0000
Files and hashes:         1: obbIRXSf7o8eyn8AX9K_sXlcOOA.roa (hash: ju/bIy7nXAPL/xatGDGkzr+qevUa2q9qUxQ/kQdO+6k=)
                          2: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: 1h9k50sCKvr1IYibODo151pj0hwxS7EeX0LMFF2ocbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:34:38:e3:24:d9:8c:aa:91:a1:c5:f6:45:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Feb  9 11:01:24 2026 GMT
            Not After : Feb 10 11:01:24 2026 GMT
        Subject: CN=248ef0a864b38410479c01efedca3c815fc7360e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:81:62:93:50:85:f3:08:a1:d1:ab:ad:d9:
                    52:bf:08:34:38:64:62:af:2d:1d:53:a4:37:78:2e:
                    2f:49:31:1f:bf:30:07:1d:fb:72:e9:18:7b:eb:98:
                    bf:d9:fe:a3:bd:7a:40:45:98:cf:f3:ae:21:cd:9c:
                    16:c7:9b:55:cc:52:50:d2:99:7b:b7:09:f4:b6:cc:
                    ec:3f:b4:88:40:ed:d4:fe:42:ca:1b:64:d9:1f:23:
                    f7:4c:93:58:77:6d:76:7a:77:52:c5:d6:fb:26:77:
                    fa:5d:b5:b1:1c:cd:74:00:84:7c:3c:ec:f8:6e:e8:
                    25:fd:ac:a0:d3:31:6b:4a:42:07:ad:62:c7:13:e1:
                    c6:f4:ba:7e:67:09:36:1b:f4:5e:8c:39:c8:df:d9:
                    dc:12:21:e5:ca:77:f6:84:d9:26:c8:56:b1:a0:33:
                    0b:63:30:e8:25:fc:4f:3d:c1:69:c4:dc:21:86:e3:
                    92:9a:2e:37:23:f0:5f:7f:b3:9c:b1:bd:73:90:38:
                    ff:3e:7d:d6:8a:1b:15:0d:d3:c1:01:6b:72:6a:77:
                    07:6f:50:e0:93:ff:b7:5c:42:95:10:22:5d:48:1e:
                    ed:38:8d:4b:f8:3b:1c:f4:f4:69:08:c3:d5:d8:22:
                    4b:b0:cf:8c:25:2e:b0:46:c8:8a:d4:83:1f:b3:5a:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:F0:A8:64:B3:84:10:47:9C:01:EF:ED:CA:3C:81:5F:C7:36:0E
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:45:bd:e5:60:09:74:d6:11:07:9b:11:39:72:b6:4e:47:d5:
         90:19:f5:e5:03:d4:f3:fe:b1:e4:54:e4:56:c9:5d:20:ce:65:
         5a:cc:23:ec:64:ff:48:26:8d:12:42:2d:a7:70:4c:b7:37:27:
         14:a3:42:3d:37:97:bb:ba:23:16:98:a0:93:d0:b8:61:2f:85:
         18:c2:24:66:7b:34:fc:39:21:0e:b5:1b:87:cd:fc:59:f0:12:
         ad:5c:f8:50:84:6d:92:c9:09:50:fc:79:31:e4:2f:8d:a3:f4:
         6c:ac:41:81:80:41:fd:4a:8b:39:32:5a:22:34:e7:36:fd:93:
         b7:b7:36:16:83:69:f8:d4:ad:96:0b:07:c4:1e:0d:97:db:e6:
         19:99:fd:81:6c:91:f2:3d:87:e3:86:dc:a4:ba:e2:9b:28:8c:
         41:34:a9:c1:2d:21:b3:0b:a0:40:43:92:44:87:fa:9c:96:6d:
         5b:04:1f:bc:94:eb:69:d9:16:5c:06:69:a4:ff:e6:4d:01:6f:
         ea:19:dc:fd:08:e3:d8:ad:c5:f2:16:b4:5e:3e:49:d7:18:5d:
         af:43:76:5e:34:67:41:a1:c6:27:b3:91:04:ba:5f:58:8c:11:
         76:5a:8f:b0:89:aa:60:aa:ff:b6:d8:e5:12:5d:f9:df:e6:97:
         d0:e7:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:09 2026 by rpki-client