This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File:                     xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier:          sIrUqnq2FXBd/wySy7Aoq/eptPrhaOaqXPxQ11b9GVU=
Subject key identifier:   21:79:AC:79:F6:17:7A:29:A1:A7:C4:A0:78:44:81:3D:A2:18:73:79
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer:       /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial:       019C43FE0F0DEEAA0743A2ADAA30C557D259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 20:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:49 +0000
Files and hashes:         1: 3gfFN41_-V5KCVj9bLCnPzDA4Sg.roa (hash: feVZbY6ZTCnUm+ks82CSr0rpu6G60t2RiQeNmO5z3TE=)
                          2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: 0b7xTqElonrkXhHJzTrYFcPUzgUPSiUiq2J/sz17RdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:0f:0d:ee:aa:07:43:a2:ad:aa:30:c5:57:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
        Validity
            Not Before: Feb  9 20:00:49 2026 GMT
            Not After : Feb 10 20:00:49 2026 GMT
        Subject: CN=2179ac79f6177a29a1a7c4a07844813da2187379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:43:86:00:cd:0f:cd:d0:c7:de:d6:3f:33:4b:
                    85:79:e9:5b:18:15:47:6f:2c:bd:a2:b0:64:2c:ed:
                    c5:7b:05:d8:44:8e:4b:eb:2d:bf:20:cf:21:eb:b0:
                    f2:24:f7:51:22:db:d3:e6:a0:34:f1:7b:91:4b:2c:
                    95:4b:f9:f2:89:3e:08:c3:8f:b3:c1:be:81:f5:bf:
                    8c:45:d1:70:d0:29:6e:a8:ef:b5:b1:18:8f:8e:79:
                    3e:aa:91:35:98:38:0d:8c:37:e7:31:f2:63:15:3c:
                    6a:cb:a1:8c:4a:ac:71:34:56:36:63:10:bf:5d:f4:
                    95:b8:2a:59:76:b7:09:00:85:ef:7b:10:c4:7f:33:
                    9c:6e:32:b7:aa:0a:57:43:a8:0a:cf:78:85:6c:d4:
                    d1:2b:c0:e1:90:b7:5a:fc:d8:2d:89:2f:1c:05:d4:
                    dd:1d:31:2c:c7:18:53:11:4d:2f:f7:59:29:e4:74:
                    5b:54:5f:4b:43:c8:50:83:5c:db:58:cc:ad:14:ba:
                    9c:6d:8b:24:80:20:a5:c5:15:df:0f:0a:9c:0d:ca:
                    eb:97:f7:29:8b:80:88:25:02:b3:3b:fe:69:35:8f:
                    75:78:ea:00:05:1b:66:88:3f:89:30:07:e5:94:87:
                    48:dc:4b:d6:ea:cb:54:bc:42:cb:61:85:6b:f1:ec:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:AC:79:F6:17:7A:29:A1:A7:C4:A0:78:44:81:3D:A2:18:73:79
            X509v3 Authority Key Identifier:
                keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:63:7f:49:a6:f1:86:01:93:d1:a4:31:2e:0b:b3:1d:fc:0b:
         6a:76:2f:93:56:b8:97:8a:30:b9:af:23:6d:73:69:04:55:f4:
         06:fe:9b:46:7e:16:b3:0f:31:96:73:ba:41:4c:ef:75:10:1f:
         90:39:68:5a:89:73:61:a8:11:e0:ef:c7:af:4f:46:f2:36:31:
         24:1a:1f:1a:1e:8f:8d:83:86:2d:eb:52:7c:83:72:d0:fe:62:
         4c:81:51:76:b6:ef:8d:e7:40:d4:78:30:54:2a:53:ae:a9:f1:
         7a:b6:69:6a:57:8a:c2:af:f4:41:e8:ef:75:c5:d9:84:8c:52:
         a6:a1:63:f6:25:66:ba:70:85:97:86:a5:5d:8c:33:a2:88:d4:
         8a:5b:66:2d:87:7b:f5:cc:b4:a0:f8:56:fa:69:fa:64:68:e7:
         96:54:bd:09:fc:01:ce:c8:9f:33:2b:64:4c:06:a9:c8:fc:7a:
         af:cb:5a:99:df:e0:dc:93:64:b8:3f:31:c3:84:cf:15:da:45:
         3c:b7:39:54:89:15:7b:6c:b5:61:40:05:cb:ac:b6:c9:c0:bc:
         9e:a4:0b:73:52:60:56:ea:9c:40:07:ac:22:fc:bd:e8:45:26:
         f4:48:36:ca:63:ef:9b:34:2b:a3:e8:ae:b1:1d:0b:25:fa:80:
         6e:44:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:44 2026 by rpki-client