This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File:                     xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier:          npwfnmgLyNw5XLyF40JwgUpX0LrNYFz1BXJlsu7cpTY=
Subject key identifier:   23:D7:E7:84:64:2A:06:C3:AB:A6:F7:AC:E0:85:1D:61:B7:4B:F1:64
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer:       /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial:       019C427DFB0265A602442FEA6DDBD9153295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number:          181C
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: 8149JdL_bdhKPVAGngPZY1WVUZc.roa (hash: Vqmxphay09Dowf+HIB9gAzSfzwRKej0t5zClWsx36sY=)
                          2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: NSeoBKpYVyepnUI2vcPlW8+tHx6ER9YpE3I+/Sy9LZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fb:02:65:a6:02:44:2f:ea:6d:db:d9:15:32:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=23d7e784642a06c3aba6f7ace0851d61b74bf164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a9:8e:64:45:c7:8c:18:13:5f:77:c0:31:36:
                    bf:c8:5b:5c:42:a6:9d:cd:84:21:b1:37:06:24:2d:
                    cd:3c:c0:ea:4b:a5:35:63:63:0a:55:1f:9c:20:43:
                    e7:a7:04:3b:49:1e:c2:16:d2:23:1d:78:94:fa:8c:
                    ed:dc:09:83:6a:48:0e:6a:55:21:02:37:d2:d1:dc:
                    d0:b5:e1:2e:0e:4c:38:2a:0a:c0:a5:21:79:2d:99:
                    97:2f:0b:46:43:d4:6d:ad:c4:64:01:10:26:d9:f1:
                    b3:84:7d:61:5e:dc:51:8f:1f:52:eb:35:be:10:6b:
                    84:3d:6d:25:e8:48:59:29:92:6a:54:78:6f:62:27:
                    c9:c4:6a:b1:9d:0e:97:d0:e8:0c:3c:c8:2b:69:50:
                    af:e2:2a:0b:ac:b9:29:61:93:49:e5:82:e2:bd:e2:
                    7b:0f:a8:de:01:1e:f6:8c:4d:48:0c:29:00:10:46:
                    a8:79:b6:82:8f:5f:c1:53:34:9e:0f:85:54:0a:de:
                    39:9a:50:0c:6f:f5:8b:77:f5:35:18:6a:76:d6:27:
                    a1:09:0c:0d:f1:f2:21:f9:90:d7:41:1a:e0:2d:d5:
                    44:fe:81:ac:93:bd:6a:44:ed:54:5d:6f:fa:f3:db:
                    62:14:88:16:19:df:1b:d6:e0:0b:de:cf:8c:a5:83:
                    5f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:E7:84:64:2A:06:C3:AB:A6:F7:AC:E0:85:1D:61:B7:4B:F1:64
            X509v3 Authority Key Identifier:
                keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:74:79:7d:41:d9:e1:aa:44:b0:a1:86:27:ad:05:dc:56:bc:
         fa:a4:f7:38:9d:a8:59:5a:73:0d:77:58:4d:77:82:20:d3:5b:
         d1:0f:1b:16:5a:21:ba:e5:21:e2:4c:43:99:77:f0:b4:cf:67:
         82:75:84:57:86:75:58:1a:29:b3:c5:5b:e1:65:62:de:1c:33:
         7a:f3:8e:ac:3c:45:f3:d8:8d:12:41:ad:9f:74:fb:3b:89:8f:
         e9:d9:71:13:92:1c:5b:1a:f8:d8:13:f8:d8:9f:4d:65:cd:7c:
         9f:58:40:2b:f7:73:6d:9c:32:12:7f:5b:25:72:6c:a5:6e:37:
         0a:e8:86:69:d2:4f:d3:9f:94:17:b3:f9:0b:95:37:09:64:17:
         18:72:7f:c7:94:47:4d:2e:e2:7e:06:38:9a:da:c0:1b:c9:cd:
         1e:0e:13:d9:6f:6e:0d:1b:b4:65:22:7a:00:1c:fd:d6:ba:75:
         fa:3f:d8:d4:21:ce:13:6a:cb:1b:5e:af:e4:b0:88:8b:ed:85:
         1d:6c:15:a8:81:78:59:ff:a1:72:b6:15:7a:24:93:e0:6b:d6:
         7e:4f:f3:40:db:eb:44:1c:9d:1e:2d:0b:e5:6c:1b:3d:bd:bd:
         d3:72:1b:81:dc:34:d8:ea:d0:c5:bc:5f:56:95:d1:81:60:1a:
         ea:c0:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:30 2026 by rpki-client