This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File:                     XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier:          46aFfLSgcbxdKw86IlKOJwsVuhOJW/aAYCZq6Br/XyY=
Subject key identifier:   67:CE:7C:E8:0F:D1:84:FF:B1:38:5B:8C:A8:B0:28:9C:90:66:2D:5A
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer:       /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial:       019C42B41D3B0DA7EED8BCC52CDC0D1A395B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number:          1521
Signing time:             Mon 09 Feb 2026 14:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:25 +0000
Files and hashes:         1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
                          2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: gFdOPJHRgm82mzLMi78yRD9nM20roHqsCpHYaI9GvQY=)
                          3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
                          4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:1d:3b:0d:a7:ee:d8:bc:c5:2c:dc:0d:1a:39:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
        Validity
            Not Before: Feb  9 14:00:25 2026 GMT
            Not After : Feb 10 14:00:25 2026 GMT
        Subject: CN=67ce7ce80fd184ffb1385b8ca8b0289c90662d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:c8:c8:58:b6:42:2a:92:26:f1:33:03:3f:
                    3e:ca:5d:0d:64:80:b0:18:57:76:32:e7:00:a1:97:
                    ec:a6:07:a1:e8:50:62:fc:83:a3:e6:cf:05:17:4c:
                    0f:35:f3:57:d8:73:f2:e2:17:61:4d:88:23:1f:7c:
                    34:74:e9:83:39:56:62:87:7e:00:49:7e:35:a0:c9:
                    18:f5:b9:f2:7e:37:51:47:7d:ac:85:1d:42:36:25:
                    e9:50:10:72:24:57:46:23:00:06:73:5b:db:63:f1:
                    d9:ce:a6:d2:d5:5b:89:3b:c7:c3:08:97:a5:4e:38:
                    af:aa:ef:dc:64:d2:90:00:ef:0a:18:3b:09:0e:58:
                    95:96:1a:2f:9c:70:2a:97:2a:96:2d:b7:69:21:8d:
                    3e:b6:f1:4b:fb:57:e1:79:12:a3:48:ba:9d:52:51:
                    15:76:c8:91:ef:fb:b5:31:33:9b:35:2f:71:ea:8b:
                    f5:39:fa:78:d7:2f:71:0f:00:0a:d5:b2:d2:c3:e9:
                    81:3e:6b:dd:ae:f8:6e:37:6e:29:45:d6:18:ec:fe:
                    38:59:f5:6f:0f:66:ba:36:b4:43:7b:d6:6e:e5:53:
                    7d:69:31:dd:90:bf:87:2d:d4:c8:86:78:1c:42:a5:
                    9d:26:21:5e:f8:94:6f:e3:df:be:8d:30:88:53:5b:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CE:7C:E8:0F:D1:84:FF:B1:38:5B:8C:A8:B0:28:9C:90:66:2D:5A
            X509v3 Authority Key Identifier:
                keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:27:3f:34:f1:2f:fd:81:51:12:ea:2f:42:71:81:07:7c:fe:
         97:67:89:f1:b5:f6:07:39:3d:28:da:83:c1:ea:51:14:fc:85:
         af:a1:9b:84:a5:d9:a3:77:6e:e6:5e:ab:d3:b2:cd:de:7c:3e:
         3b:ad:51:3c:aa:2f:dd:25:1c:72:0d:dc:b6:54:87:30:de:1a:
         f7:f5:25:b1:29:37:4f:24:06:33:4b:9d:f0:43:c6:77:16:c4:
         71:e0:b9:f1:91:d2:e7:74:d6:3e:59:e9:e2:7d:ae:f5:c3:87:
         a9:28:d6:2a:3f:a9:96:23:38:4f:ca:0a:d3:38:47:00:12:74:
         f4:55:69:d6:14:85:64:b4:21:a8:78:09:fe:28:f1:f2:64:c0:
         47:34:da:7e:b0:a1:ef:b1:26:cd:ce:27:6f:be:c4:83:63:19:
         bf:44:70:72:5a:67:62:2a:f9:06:30:00:df:5b:89:ac:cb:4b:
         99:d1:78:0a:7c:a3:c2:e4:4e:1f:12:e1:d0:43:1b:8e:de:7b:
         1a:7e:2d:3b:6c:f8:7b:b5:75:84:1e:2f:da:b3:31:46:6a:33:
         30:96:2b:93:13:7e:1b:ff:59:93:81:3f:09:51:b8:09:2f:05:
         57:4e:4f:d2:a5:69:5f:f3:03:99:54:31:59:85:7f:30:a7:3b:
         98:bf:fd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtB07Dafu2LzFLNwNGjlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD
Eyg2N2NlN2NlODBmZDE4NGZmYjEzODViOGNhOGIwMjg5YzkwNjYyZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FHIyFi2QiqSJvEzAz8+yl0NZICw
GFd2MucAoZfspgeh6FBi/IOj5s8FF0wPNfNX2HPy4hdhTYgjH3w0dOmDOVZih34A
SX41oMkY9bnyfjdRR32shR1CNiXpUBByJFdGIwAGc1vbY/HZzqbS1VuJO8fDCJel
Tjivqu/cZNKQAO8KGDsJDliVlhovnHAqlyqWLbdpIY0+tvFL+1fheRKjSLqdUlEV
dsiR7/u1MTObNS9x6ov1Ofp41y9xDwAK1bLSw+mBPmvdrvhuN24pRdYY7P44WfVv
D2a6NrRDe9Zu5VN9aTHdkL+HLdTIhngcQqWdJiFe+JRv49++jTCIU1vB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfOfOgP0YT/sThbjKiwKJyQZi1aMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEic/NPEv
/YFREuovQnGBB3z+l2eJ8bX2Bzk9KNqDwepRFPyFr6GbhKXZo3du5l6r07LN3nw+
O61RPKov3SUccg3ctlSHMN4a9/UlsSk3TyQGM0ud8EPGdxbEceC58ZHS53TWPlnp
4n2u9cOHqSjWKj+pliM4T8oK0zhHABJ09FVp1hSFZLQhqHgJ/ijx8mTARzTafrCh
77Emzc4nb77Eg2MZv0RwclpnYir5BjAA31uJrMtLmdF4CnyjwuROHxLh0EMbjt57
Gn4tO2z4e7V1hB4v2rMxRmozMJYrkxN+G/9Zk4E/CVG4CS8FV05P0qVpX/MDmVQx
WYV/MKc7mL/91w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:00:25 2026 by rpki-client