This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File:                     XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier:          6DYsgZJMepzLdJ/c8w+rLrp08zIQSw6t+sD7aI2HoWk=
Subject key identifier:   AB:9C:7E:8D:3A:22:31:BE:58:0C:2F:30:68:48:7B:5A:7B:B8:6F:82
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019C1C83422E63CDCB43A5F4AED6519584E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number:          182C
Signing time:             Mon 02 Feb 2026 04:01:30 +0000
Manifest this update:     Mon 02 Feb 2026 04:01:30 +0000
Manifest next update:     Tue 03 Feb 2026 04:01:30 +0000
Files and hashes:         1: 03ILpCkUnmq5BI8Qbjtxy23Vm3w.roa (hash: so/wDftuCuhVwNVUjhg5MbT2/4hCaRH4nYQ0u3BjKb0=)
                          2: 4zySZiWhTUg_rSb8KoK0O9QlCnc.roa (hash: gFl6wOPf/Gu9CFX49zoLAcByVCFuRBnN0N7UMDgQVbw=)
                          3: 6okDW562ptIs4iN1y-WMYg-45jY.roa (hash: KaiRGaOivd7uFd01xG4Jps9z07e2u3NUoDlDSh+lkH4=)
                          4: BHlTz3-_hk0tMzZp-IRVezg5RNg.roa (hash: 3CAUKuO6yLGGc6BqD8YXI8xLV+Hesf2PBsRTTbbaRXY=)
                          5: Gxw_WTtXXlB9ovzVsZ-LJ4z0v8Q.asa (hash: WH1dBt0aNelRDH5woRZUZpaGD5516U5Tlex+HGGo1Mg=)
                          6: T7EjLOUNjE599ece2DV4T26b9xY.roa (hash: fsf0dRPygHs9hSe02Kw5kkb/kNnztp8TK8bBIMk8jhU=)
                          7: UlJaOFnMpoO5SgKO7Th_pY-ZAjo.roa (hash: jUSX0KizK2PQI3mj5biaakX23YPg0NJIgDEQv+TXIfQ=)
                          8: WRCnuaJzRXm83oAAxB0GzCKosjw.roa (hash: Zlyy/Icbe5M8aCeFBu4UmwH/OngNWuHDogd3Lscyms4=)
                          9: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: liFdzHn+elZNR/ZbcH2gwZIsHyeXKdCRKCNwp99VBtk=)
                          10: b24MgnJElk0t0CZYGUPCS0WiBxQ.roa (hash: cWHhW2paDx5FRXzehDQT7p6siSal6c3Aqs94Jvc3VHg=)
                          11: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (hash: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ=)
                          12: hAf22SRJwgs0SWkdAxUs95Fa0v0.roa (hash: 7vak+mJ/sIQOwdjrAkPrbLJTSGMQ1rFuipgFbAcPiHo=)
                          13: jo0S6BCyBQrOEg52gm9FgJ9XE4o.roa (hash: 0xPjFQyLdMuqT+l7cmEhhj8WC9rilD8CahSrHUjkdaE=)
                          14: k09qltBTafYPaN8mKEjySL8ft6A.roa (hash: MFuya8B+MwfIjFnhNi4ZBDH/cZzScHZPkCXENvMvREQ=)
                          15: nkrV5tLs-lefafrDVBSQgulDPOI.roa (hash: 9SSFucsxAfajh5jClHvePjClBs0ArUj4EcuwFRS1hBA=)
                          16: q7ejmoUa5CLp8FjjBu9-Afywcr0.roa (hash: g5mShwr6G9nNz1wO7zkLNb/6wzwAilrCOEifz/cQvrY=)
                          17: wC2w3-1Ro5EWjGBRrDuyblFUfkw.roa (hash: DtOCWrW/1nLce+oLk7kSY37T9S5ZLMhN/Uio3q7OELI=)
                          18: xI9niScPVURzbD2atpgMk7GVunU.roa (hash: wBTDsm/pz9hBwb3Vy+BwrclzAnI72KZbmuOWlENCDso=)
                          19: yNIYxMnUO5naybwPyNyh5ewSWWc.roa (hash: JUSRTIxpmqX2Md1pS2aFTtzHv44wRgNWsPuej9W1PDw=)
                          20: yTtc9_cvInn7yvfcK78WqTzFBDM.roa (hash: GZqbLQNtSwfpqv55KNnGoj2TZ2D+L4eB5ErF2hLFt3Y=)
                          21: ztKZKXz5sSSd9mxS9EgI0poqAYg.roa (hash: nBdrQf8RxLCFFDAly/9t+zuqKEqOGBMYF3lSM61ag10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:42:2e:63:cd:cb:43:a5:f4:ae:d6:51:95:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Feb  2 04:01:30 2026 GMT
            Not After : Feb  3 04:01:30 2026 GMT
        Subject: CN=ab9c7e8d3a2231be580c2f3068487b5a7bb86f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:ea:ea:74:59:95:24:8d:d1:84:d4:2a:88:
                    dc:80:f8:46:8d:a5:df:90:d2:52:40:52:de:e9:85:
                    6d:ee:28:d8:e9:e0:3c:17:d6:d3:27:96:1d:3e:ec:
                    fe:06:80:f2:2b:a4:3f:39:a9:43:58:61:aa:37:06:
                    59:e0:0a:ab:95:22:74:78:3d:84:35:ca:a6:97:fa:
                    9c:b2:63:f3:a2:61:5b:c8:90:81:01:ed:ea:6c:d7:
                    f0:c8:11:70:0e:79:90:45:94:2d:20:49:df:48:09:
                    12:de:7a:3a:ad:be:5a:15:06:67:06:89:04:5a:9d:
                    cb:c8:1c:b4:0a:ea:46:75:e9:65:04:e4:1d:97:e4:
                    69:e4:3c:74:61:bf:3f:f6:3b:13:bc:62:8e:2a:7b:
                    ec:73:9e:17:08:84:9b:1c:df:72:f4:b3:9d:03:5f:
                    c5:2d:cc:6a:8e:2c:3e:a8:05:28:2b:ef:75:5d:4a:
                    14:bf:b4:c3:18:31:9e:0c:5f:2f:c1:0b:bc:d1:8c:
                    72:c2:ef:3a:b6:b1:5e:6e:05:fa:48:17:cb:1b:5c:
                    54:97:31:ff:13:4a:53:55:08:d3:64:25:96:be:19:
                    09:ed:95:7d:e7:7a:00:14:f9:f5:0b:6c:f7:b1:8b:
                    f0:1f:a3:aa:df:f6:e5:20:a9:62:b3:4f:96:04:df:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:7E:8D:3A:22:31:BE:58:0C:2F:30:68:48:7B:5A:7B:B8:6F:82
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ae:f5:9e:4b:3a:30:ae:38:6e:de:b6:89:ac:5e:ad:6d:c6:
         99:08:54:39:70:5e:6a:e0:ff:b2:34:32:c9:b3:e9:2e:bb:0e:
         84:7a:9a:be:be:e1:cf:32:89:41:82:aa:53:cf:65:06:b0:48:
         2e:1e:e4:cc:0a:dc:34:b4:64:8a:63:25:cb:75:f4:14:14:d8:
         ab:6e:b6:57:af:19:de:d4:d0:b5:4d:00:37:c7:b3:59:b2:db:
         e9:f3:ca:06:f4:77:8e:e8:e2:74:32:8f:a5:19:eb:fd:6c:e2:
         5b:d9:bf:74:7c:d1:5a:78:f7:e5:04:61:74:73:a3:82:66:0d:
         d7:21:12:43:f7:4e:d3:45:b9:35:75:5e:8f:e0:e4:9b:dd:47:
         47:7c:1f:9d:d8:b2:7d:d7:20:7c:e3:9f:37:39:11:22:21:0a:
         13:ba:52:2e:bb:f8:6e:fd:3a:73:01:7d:05:bc:2e:89:00:37:
         0c:93:3c:0c:96:b8:18:2d:0a:d5:aa:87:21:26:0f:21:48:6d:
         5a:93:8d:d4:0e:7f:74:ad:52:fe:14:2b:e7:59:93:0c:a1:16:
         01:d8:e4:bf:79:d4:35:80:94:29:69:4e:41:31:19:30:6f:4b:
         36:a8:70:01:60:5c:3f:98:db:af:62:31:3f:3d:64:9f:82:87:
         a8:db:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:10 2026 by rpki-client