This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          8ftx9Tnk4pBK5tsszh2eeXmRnQ5EI6AfG7US513vrDg=
Subject key identifier:   37:A5:FC:80:82:C0:ED:38:AF:FB:04:74:BB:7C:72:56:4E:BA:E6:96
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       019C427CFF90B27E9D5569C09852795B6B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          0ADF
Signing time:             Mon 09 Feb 2026 13:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:13 +0000
Files and hashes:         1: 42mOJ3kHdwuFCzoSOI3N3ulVxfY.roa (hash: eqCYV3DSa0ilBw3MnAd/50LEsSGMdE5H8gvqRFLf8cs=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: 9OOHT0aMpaUyJvB5EJFOhH/TnSTBU/zvU+nGCcAKBZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7c:ff:90:b2:7e:9d:55:69:c0:98:52:79:5b:6b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Feb  9 13:00:13 2026 GMT
            Not After : Feb 10 13:00:13 2026 GMT
        Subject: CN=37a5fc8082c0ed38affb0474bb7c72564ebae696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:05:a9:93:fc:e9:d7:78:4a:f3:9d:72:a7:
                    60:86:04:75:be:a7:53:03:6b:c5:ae:6a:16:1a:01:
                    e3:d6:37:b8:96:51:ec:d5:98:33:13:6c:aa:e5:95:
                    df:93:2a:7a:73:99:1c:46:0c:2c:31:cb:9a:d8:c9:
                    e6:7b:95:4f:36:78:a3:2a:80:e9:31:86:b8:75:19:
                    ba:2b:48:6e:e6:90:8c:15:a7:ee:38:80:9b:da:fd:
                    54:2b:64:1b:ed:19:23:08:ea:39:70:39:a2:29:fc:
                    63:2f:f9:8d:16:f4:37:50:be:d9:92:3a:a0:02:f2:
                    81:2d:24:dc:e8:15:db:a4:1a:bc:4f:30:c8:99:eb:
                    ce:4c:86:05:31:4c:7c:9a:71:0c:24:22:86:ea:e3:
                    a6:dc:df:1e:09:d5:c7:5b:4b:4a:51:69:09:8c:b7:
                    96:5e:ec:62:d8:26:c4:5f:87:36:49:74:f1:e6:04:
                    f1:be:02:62:d2:83:5d:f9:81:9a:f0:99:d8:d8:df:
                    fb:87:c9:19:cc:85:e5:19:8f:f3:f9:12:13:f2:bd:
                    cf:a5:28:ac:ee:37:4d:d2:74:7b:b8:43:4c:7a:78:
                    65:da:b8:a9:d5:88:d0:57:49:4d:5c:e4:53:96:2c:
                    7a:dd:99:22:5c:3e:4b:0e:a4:10:35:b5:b8:83:79:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:FC:80:82:C0:ED:38:AF:FB:04:74:BB:7C:72:56:4E:BA:E6:96
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:45:f0:d5:75:ce:cf:23:af:f9:37:64:81:90:05:40:16:f3:
         84:77:b2:9e:a5:0e:61:41:c1:37:e5:04:74:ff:98:65:a1:23:
         1f:30:d0:f8:5a:7d:b4:0c:19:6b:ab:e7:28:77:77:af:11:64:
         75:03:fe:a4:e9:78:af:bc:d3:cd:69:a0:91:9f:ed:1c:94:12:
         47:5d:b0:cf:d1:cd:9d:09:c3:06:a2:ec:29:7e:f4:5c:5b:77:
         f6:76:7f:71:11:ed:2c:dd:f4:cd:e7:0d:f7:bd:87:e2:ff:e6:
         78:ca:51:50:a2:7b:bb:11:29:3e:0b:ed:12:76:91:32:04:e0:
         b4:cb:7b:b4:87:63:26:3c:d6:e1:0d:32:b1:00:e5:56:94:18:
         ee:fb:73:36:87:6b:06:51:86:e8:c0:27:26:cf:c0:f2:4e:0e:
         44:60:a3:52:09:cb:fa:1e:9f:57:3c:fc:48:8f:7c:6f:06:be:
         6d:d5:02:07:a5:e6:e2:37:39:b6:c4:d3:be:b9:3f:26:e1:8a:
         30:ab:d3:ac:06:51:18:fb:aa:cf:d5:fc:28:f4:7a:2f:de:87:
         76:70:c0:43:81:09:6b:84:10:90:65:40:c5:4d:85:bd:99:bd:
         cc:44:bb:3a:1b:75:54:c7:b1:33:e0:19:7a:2a:92:42:fe:f5:
         b9:62:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:38 2026 by rpki-client