This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File:                     XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier:          T2f33YY4binxadruzhU5nGJeJfxJWNulSb7Ij7sQc48=
Subject key identifier:   93:73:8A:16:AA:1B:5D:CB:DC:DD:94:1E:18:EC:CD:00:B7:C0:C3:12
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer:       /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial:       019C44DA4C220284A12A96876F65D7D470F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number:          0EF9
Signing time:             Tue 10 Feb 2026 00:01:22 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:22 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:22 +0000
Files and hashes:         1: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: TLFGmKVWjDNWdoQgaRY0BrgrnPaHvO6W+ZPZub/uvuQ=)
                          2: _4iBeTs5cxfGTAtYktUUrEwV_VA.roa (hash: N664oCzOfQ38VT4ESVgwevGf4XPQ0H5eTMOYBDJq9m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:4c:22:02:84:a1:2a:96:87:6f:65:d7:d4:70:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
        Validity
            Not Before: Feb 10 00:01:22 2026 GMT
            Not After : Feb 11 00:01:22 2026 GMT
        Subject: CN=93738a16aa1b5dcbdcdd941e18eccd00b7c0c312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:30:b6:79:99:27:76:da:05:28:d5:42:c9:
                    2b:16:8c:fe:14:56:43:d7:5c:50:7e:3c:19:b8:cf:
                    78:63:0b:a8:93:0a:58:93:7a:22:74:7a:65:ee:4e:
                    15:5d:e2:0f:f0:b1:70:6f:93:ca:cc:f8:eb:f5:03:
                    08:df:ca:c8:f7:5b:2e:c2:f8:9d:f7:a5:50:0a:d6:
                    dc:5c:6b:63:f6:b1:08:f0:a9:30:c0:1b:57:a1:c4:
                    a1:ad:90:0e:af:69:a4:f4:e1:90:4f:94:96:c7:90:
                    ed:d9:af:05:de:f4:84:b6:94:c4:f4:d4:58:8d:23:
                    b2:bd:91:4f:6d:2d:12:37:48:a8:98:9a:93:f2:6f:
                    b0:c3:fb:32:a8:e9:45:88:7a:e0:d0:bb:01:4e:c1:
                    4d:9f:b9:2c:ee:2b:ab:b3:dd:d5:70:3d:87:35:fe:
                    64:8c:f0:9c:96:1d:69:41:18:d6:cc:eb:d1:8a:de:
                    be:12:7f:80:b5:58:08:65:c4:82:48:a0:ea:62:6a:
                    aa:a2:80:49:22:87:bc:d6:d9:08:1d:9e:9e:9a:e8:
                    93:0a:70:5a:6c:4b:a3:82:fa:18:77:93:e4:fd:de:
                    e9:4c:01:3e:af:43:0e:37:e8:a4:38:96:81:5e:15:
                    69:e9:df:bf:5e:70:5f:17:c6:f1:7d:a0:c1:cc:b6:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:73:8A:16:AA:1B:5D:CB:DC:DD:94:1E:18:EC:CD:00:B7:C0:C3:12
            X509v3 Authority Key Identifier:
                keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:2c:c4:4e:1c:6f:a7:5f:16:e0:d7:a6:4e:49:92:fa:79:
         c5:82:65:89:26:81:c6:b3:75:a6:02:74:ec:1b:0e:c3:80:83:
         ff:43:81:4b:17:2d:5a:6c:18:5e:d2:1a:30:b4:ef:0a:cf:3a:
         58:3b:f8:49:dc:3f:9f:a6:60:e2:5c:ef:02:f2:c2:ab:01:b2:
         eb:ea:37:a6:d4:58:fc:8d:60:2b:74:d5:a1:f7:b8:e1:7e:c3:
         8f:83:0a:6b:62:d2:41:22:56:f6:ba:91:20:7d:2d:c8:f9:88:
         a8:1d:c3:d2:cb:a6:fe:ad:7a:48:c6:00:15:e5:27:d4:ad:ab:
         58:bf:bb:54:42:e0:00:7e:b7:e5:bb:a8:8a:14:6e:7e:d7:20:
         d4:d7:15:b5:b6:40:c2:34:47:24:18:e8:ca:c9:ee:1b:63:16:
         02:53:d5:1f:2d:aa:bf:05:36:1b:d2:84:f6:07:8c:13:09:ba:
         b5:64:ce:17:c1:05:da:3d:d7:88:18:15:03:08:5f:df:f8:f4:
         e6:05:57:45:54:44:03:5e:86:6b:f5:9a:08:5a:f3:1f:38:d2:
         18:a4:63:79:30:13:85:7f:7a:81:3e:76:0e:47:02:ee:cc:11:
         9c:65:fd:d1:5c:a6:84:55:66:ce:c4:c3:45:48:ba:e2:79:31:
         ae:ef:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:56 2026 by rpki-client