This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File:                     xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier:          ig0nrXKY2hEBncCM9E22reaORjH+ngRP+EcCcUjR4ns=
Subject key identifier:   CB:33:7A:6C:63:5C:28:07:94:9A:49:66:CA:0F:FA:82:53:32:1C:A8
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer:       /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial:       019C420F6EE889F2C6BAE2DD3152D6255CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number:          077C
Signing time:             Mon 09 Feb 2026 11:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:33 +0000
Files and hashes:         1: L_g2HP_CSAtm_vjUjW7o_vi4UHY.roa (hash: nJArAGNM9l+5POjmpHW3gMbXMxSlqtaHWT5uXV2T09Q=)
                          2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: 1TkPUM0FEJns4rgVIrur5siH3wysDoEUYvkdyyXcEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:6e:e8:89:f2:c6:ba:e2:dd:31:52:d6:25:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
        Validity
            Not Before: Feb  9 11:00:33 2026 GMT
            Not After : Feb 10 11:00:33 2026 GMT
        Subject: CN=cb337a6c635c2807949a4966ca0ffa8253321ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:27:4b:67:64:ee:48:3e:a9:e1:21:ae:8a:
                    9b:72:ee:d2:a0:8b:45:4d:1a:e9:ab:30:4c:2d:0c:
                    74:5b:83:85:1d:3a:92:8e:ed:9d:3a:7f:bf:02:5a:
                    56:45:b8:60:2e:7f:d2:d4:74:e8:c9:e0:5a:aa:82:
                    51:d5:eb:78:83:22:fd:d9:38:37:8d:f0:18:1e:e5:
                    60:f1:45:6d:44:7c:42:84:d0:25:81:af:c3:32:d4:
                    db:af:f7:f9:43:1a:8a:d5:c2:b1:be:e9:12:50:55:
                    66:64:fa:dd:eb:af:8e:b5:3e:8b:6e:2a:0f:34:c7:
                    41:0c:24:67:23:db:e1:d8:59:b8:74:01:78:57:dd:
                    68:64:87:16:56:05:ee:88:96:03:62:2a:04:dc:6a:
                    06:87:43:46:80:c8:6e:76:fe:d0:ed:b2:9c:42:a1:
                    bc:66:e9:f7:10:8d:01:a0:2c:12:1c:c0:e1:d5:31:
                    9a:f5:16:5a:cc:e8:6b:08:f3:8c:8c:b6:46:a4:a5:
                    4e:81:93:68:ee:9a:f1:85:0c:b3:00:c3:09:0f:6b:
                    3e:88:d2:78:de:f9:3b:2c:24:2c:a6:31:c2:75:69:
                    fd:02:fe:9f:f4:1e:9c:fe:e0:70:09:bd:30:a1:5e:
                    03:ca:e8:ac:88:8e:42:cd:77:52:74:8a:8c:65:bc:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:33:7A:6C:63:5C:28:07:94:9A:49:66:CA:0F:FA:82:53:32:1C:A8
            X509v3 Authority Key Identifier:
                keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8a:ec:24:93:3c:ac:98:bb:e5:4b:46:dc:69:ce:90:79:a5:
         13:1a:f4:5b:a0:8d:fb:2f:6d:74:91:33:91:dc:e0:43:c1:a1:
         5b:f9:a8:57:e8:20:a4:c9:de:e6:0e:d2:db:35:67:d5:72:17:
         f3:04:7c:e0:06:62:56:dd:98:74:81:b0:c3:db:d1:68:a9:91:
         b1:16:10:f3:ec:e0:70:34:48:e8:f9:32:4c:40:1a:5b:09:f6:
         5d:5b:a2:33:0d:f0:88:38:98:28:ce:15:d9:69:cb:e9:57:80:
         6a:ac:e0:c7:0f:5c:af:09:7b:b7:a4:20:f6:13:bb:6d:d3:d5:
         1a:44:66:5b:8c:d4:44:c9:92:18:02:dd:70:9e:21:5b:47:b8:
         d8:0b:13:e7:7e:83:74:a1:07:4c:ac:0b:40:c2:f7:cb:a0:35:
         5c:24:ce:66:ac:de:67:bd:63:13:f4:fb:1f:38:c5:92:d0:6d:
         3f:cd:ca:c3:05:21:1a:45:d0:e4:3d:51:76:31:82:eb:54:5c:
         22:4d:10:0f:f2:43:dd:6d:4e:70:7b:78:ec:d5:5b:32:d4:cf:
         6b:05:ba:fb:78:7a:17:0b:97:e7:de:52:3a:db:56:fd:42:e7:
         3a:cb:ca:90:02:e4:7c:39:9e:43:3d:b3:df:8e:4d:c9:d2:1c:
         e5:e9:c5:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD27oifLGuuLdMVLWJVzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTM4NjkzMTY3YWZkNGM1YWFlNTFkZWE3ZTVmM2Y5OWJh
NjViZTkwHhcNMjYwMjA5MTEwMDMzWhcNMjYwMjEwMTEwMDMzWjAzMTEwLwYDVQQD
EyhjYjMzN2E2YzYzNWMyODA3OTQ5YTQ5NjZjYTBmZmE4MjUzMzIxY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrEnS2dk7kg+qeEhroqbcu7SoItF
TRrpqzBMLQx0W4OFHTqSju2dOn+/AlpWRbhgLn/S1HToyeBaqoJR1et4gyL92Tg3
jfAYHuVg8UVtRHxChNAlga/DMtTbr/f5QxqK1cKxvukSUFVmZPrd66+OtT6LbioP
NMdBDCRnI9vh2Fm4dAF4V91oZIcWVgXuiJYDYioE3GoGh0NGgMhudv7Q7bKcQqG8
Zun3EI0BoCwSHMDh1TGa9RZazOhrCPOMjLZGpKVOgZNo7prxhQyzAMMJD2s+iNJ4
3vk7LCQspjHCdWn9Av6f9B6c/uBwCb0woV4DyuisiI5CzXdSdIqMZbzS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMszemxjXCgHlJpJZsoP+oJTMhyoMB8GA1UdIwQY
MBaAFMVThpMWev1MWq5R3qfl8/mbplvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDIt
YmMyYjdlNmYxY2E0LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDItYmMyYjdlNmYxY2E0
LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANorsJJM8
rJi75UtG3GnOkHmlExr0W6CN+y9tdJEzkdzgQ8GhW/moV+ggpMne5g7S2zVn1XIX
8wR84AZiVt2YdIGww9vRaKmRsRYQ8+zgcDRI6PkyTEAaWwn2XVuiMw3wiDiYKM4V
2WnL6VeAaqzgxw9crwl7t6Qg9hO7bdPVGkRmW4zURMmSGALdcJ4hW0e42AsT536D
dKEHTKwLQML3y6A1XCTOZqzeZ71jE/T7HzjFktBtP83KwwUhGkXQ5D1RdjGC61Rc
Ik0QD/JD3W1OcHt47NVbMtTPawW6+3h6FwuX595SOttW/ULnOsvKkALkfDmeQz2z
345NydIc5enFSA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:44 2026 by rpki-client