This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File:                     X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier:          oxOoUA6rbhlRqeVEko7lALX9txz+xdNlI9JZu+gqUnQ=
Subject key identifier:   F0:74:C7:EB:67:12:B7:98:21:09:FF:96:28:93:DE:D4:12:E6:45:37
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       019C44D9CFCE7418B5AAE8D46E8038C211B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number:          05B0
Signing time:             Tue 10 Feb 2026 00:00:51 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:51 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:51 +0000
Files and hashes:         1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
                          2: LX-ARaBvjhL1OCxybAxnFHn8WPw.roa (hash: z5k53jG7hGiyHO30GuFIqCTEvuGJih3P4io8dzdcoxM=)
                          3: QDA-i1_uO7l2cpkirQ4QxILDVE4.roa (hash: nlLmxzPV9FPeDWmJ64dZ3ihDAd5qXUMVD7huuqkNYlA=)
                          4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: GhmbTvMGYA93SrIQuQUzeQL4AOKYNFkw2oiZm/qVjHs=)
                          5: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
                          6: faebMvBKgNAhcALx7bgmvRqtTSU.asa (hash: 3/Gz5gkhRQIs39smIrzuVZyy8NlVTqFUelM9l0g73UM=)
                          7: qwtfaNgQd8yPF8nuZ85St5n0hCU.asa (hash: jPCHw2Lbk+9c63R504zupX9R139Wa2eibuwlSjrJsHI=)
                          8: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:cf:ce:74:18:b5:aa:e8:d4:6e:80:38:c2:11:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Feb 10 00:00:51 2026 GMT
            Not After : Feb 11 00:00:51 2026 GMT
        Subject: CN=f074c7eb6712b7982109ff962893ded412e64537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:40:e9:08:af:e0:fd:12:67:81:73:24:d8:
                    80:32:43:7d:99:5f:98:4b:89:60:3d:f5:85:da:ee:
                    0c:87:95:8f:4a:e0:71:e6:02:67:6d:40:31:b0:5f:
                    e7:a6:89:2d:e6:30:76:2e:71:d9:2f:0e:e3:60:59:
                    2c:7b:d0:98:df:b4:59:16:45:d3:5e:27:5f:6d:bd:
                    43:e0:b9:0a:f0:dc:12:94:f6:39:71:fc:37:c0:5f:
                    d2:4f:4c:7f:77:c7:87:11:8e:3e:2f:19:70:4d:90:
                    39:6c:dd:c1:59:77:9b:eb:c7:49:5b:c3:08:54:eb:
                    43:45:fc:39:f3:db:d5:b9:82:de:6b:15:2e:0c:9c:
                    ff:bb:a8:2f:bf:f8:2c:02:6f:6b:48:57:f2:f9:a8:
                    70:d1:f5:b5:8e:4c:34:52:60:e0:10:dc:74:c2:a0:
                    ca:bc:b0:f5:be:3b:e9:1f:f9:78:ea:42:a0:f7:e5:
                    5e:87:19:d3:22:c8:2c:b4:f2:27:eb:4f:b0:b4:9a:
                    57:d0:c8:ee:9b:37:6c:32:62:37:85:59:f0:cb:ff:
                    e9:76:f3:df:6b:7f:37:e2:b0:38:0d:e3:d1:75:6d:
                    f1:07:26:c5:e5:0c:44:5a:76:f2:bc:fd:c8:87:7d:
                    15:cc:33:d6:55:ac:94:c5:23:71:a8:74:9f:bd:4f:
                    84:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:74:C7:EB:67:12:B7:98:21:09:FF:96:28:93:DE:D4:12:E6:45:37
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:1f:6f:fb:23:a1:c5:e3:7e:c6:5c:73:f8:14:da:50:11:2a:
         5f:10:e8:2f:0c:44:e0:d7:6f:78:85:a7:05:8a:c8:cf:2f:e0:
         be:8d:db:f8:68:98:20:9b:9a:e9:4f:ec:7b:c6:7e:1b:08:eb:
         00:ae:60:71:61:42:4b:85:37:f4:d4:65:78:ec:46:58:b9:97:
         99:69:40:95:a6:0e:af:09:98:f1:1e:55:ec:3c:10:45:fd:0d:
         ed:74:d1:62:55:9a:32:d2:3f:86:65:07:d8:77:e1:92:59:bd:
         1c:ad:93:44:95:60:5f:50:7d:62:4e:5c:ae:8b:5c:b9:6f:7f:
         98:1b:b9:72:89:9d:00:4b:eb:c8:21:97:b3:8b:bd:a5:48:a1:
         5c:52:be:a2:e6:f8:de:52:81:39:fa:46:68:f8:20:b8:02:14:
         11:71:14:b1:57:89:d2:43:6a:9f:1c:2b:1a:fe:38:ee:1b:36:
         d9:0b:6b:5a:f4:8f:41:04:b8:b3:02:c8:90:c9:0f:9b:b1:64:
         09:8c:98:83:2d:7d:39:d8:18:c0:ae:2e:f2:4e:ce:eb:84:01:
         00:78:10:61:10:7d:c4:8b:94:54:95:f6:ce:ca:30:b4:2d:4a:
         32:30:73:56:ef:e8:3e:38:0a:9f:e6:a2:a6:5f:fa:2d:57:2a:
         14:73:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:56 2026 by rpki-client