This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File:                     xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier:          YJAdNHFVcekEkm+cXJEY9TnYi99zSM90cuCxU8i8bnc=
Subject key identifier:   BF:2E:2D:88:FA:AB:70:E7:81:C1:4B:C0:E0:A3:B5:94:04:AA:4D:62
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer:       /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial:       019C446C6CF1016CEF92608CF0439AD6DF57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number:          1473
Signing time:             Mon 09 Feb 2026 22:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 22:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 22:01:22 +0000
Files and hashes:         1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
                          2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
                          3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: P7/+8j43C9xsqbHsUQgag4jFMlHZ2S8yQ1dr8JA8QYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6c:6c:f1:01:6c:ef:92:60:8c:f0:43:9a:d6:df:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
        Validity
            Not Before: Feb  9 22:01:22 2026 GMT
            Not After : Feb 10 22:01:22 2026 GMT
        Subject: CN=bf2e2d88faab70e781c14bc0e0a3b59404aa4d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:bb:d7:35:4c:3c:d7:8c:db:b8:41:26:bc:
                    de:87:bd:4a:f4:06:fe:7d:59:37:7e:37:83:66:1c:
                    be:50:60:9b:1e:ea:8b:2c:0b:7b:0a:5b:5b:18:8c:
                    b1:16:35:84:26:b0:31:10:a9:cc:95:01:df:6f:8a:
                    7f:55:2f:5e:90:a3:37:a1:1e:0f:80:05:87:e1:20:
                    f7:67:b4:30:ed:13:4f:fd:e2:13:72:d2:b1:2a:ef:
                    8f:1d:2b:51:59:03:87:83:91:1c:84:24:dd:4f:21:
                    d5:f1:c0:12:52:60:9f:c2:13:7c:8c:e9:48:4c:aa:
                    60:a8:7e:e8:59:fc:03:e1:6b:0a:66:c5:78:9c:ba:
                    2b:9a:9c:d1:69:b3:68:a0:4c:99:b5:29:e4:a0:53:
                    c9:03:44:6c:b4:97:ac:c3:f2:43:ed:75:a9:a6:0e:
                    99:8a:fe:dc:63:60:b4:ea:54:87:58:11:b9:39:7f:
                    ce:f8:ff:da:4d:fb:4a:32:11:92:b1:d6:9a:c8:57:
                    fc:84:bd:27:fe:12:5a:15:13:47:57:91:03:25:fe:
                    ad:3a:3b:d2:2c:67:b1:65:b9:62:6c:06:98:27:bd:
                    1c:d6:08:37:16:23:bf:c4:d4:3a:ed:0f:ff:89:42:
                    ca:6a:f2:6c:77:ee:51:f5:90:98:86:b6:ce:7d:10:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:2D:88:FA:AB:70:E7:81:C1:4B:C0:E0:A3:B5:94:04:AA:4D:62
            X509v3 Authority Key Identifier:
                keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:52:3a:d6:35:cb:a3:df:54:9a:c4:40:3c:ab:18:0e:86:
         c9:cc:8b:79:b7:78:6a:8a:f4:d7:1e:da:92:1b:6b:04:3f:22:
         b9:6c:8e:f9:7b:59:63:20:3d:f8:b3:82:eb:c8:54:a0:3a:79:
         5e:37:a3:30:45:89:55:7c:d1:5d:93:88:2b:ed:bb:04:dc:38:
         a7:f0:95:8c:d0:70:dd:1d:13:66:4a:41:fc:08:e6:ee:a9:e4:
         9d:97:e0:93:e7:14:37:85:9f:d3:9a:4e:9f:1f:77:95:5f:5e:
         04:cf:bc:ab:4f:1d:24:80:e3:37:b6:0a:ee:6e:da:97:83:3c:
         0e:c8:af:83:fb:c2:e0:4c:d4:8b:03:b2:84:9b:ce:4a:45:33:
         00:cf:3a:ad:4e:a1:b7:aa:a7:6e:6c:82:93:b4:20:6f:d5:40:
         da:15:5a:fb:f9:21:67:d6:7a:41:ca:01:82:8f:e8:e8:27:34:
         a6:e2:f9:bd:57:d5:50:7a:3c:93:fa:7e:86:2e:ff:26:32:52:
         5d:d6:04:a0:a4:b4:91:5d:03:11:7c:3d:61:2e:b7:47:7a:04:
         7f:62:ae:59:d6:cf:a9:91:e4:84:4b:0d:f3:b6:6e:f7:23:85:
         3a:d1:5f:25:98:fa:71:84:7c:07:e3:c7:d6:59:f7:2a:e6:b3:
         f1:36:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:18:48 2026 by rpki-client