This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File:                     xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier:          i9bHeoCqcr3W6Nv6sSzqTpWZQAl7HeyUGco+nalng3M=
Subject key identifier:   09:E6:C8:D0:94:9D:2A:8A:FB:E4:5D:00:ED:3E:39:02:95:3F:82:4F
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer:       /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial:       019C427D5D8EEE5E93935A6C572F91012218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:38 +0000
Files and hashes:         1: ghzuYkE_gnJGPgiMxRgv65RQqec.roa (hash: 1+GlWtDdPLwRz4VbLN8GbkLKLROJEbW43VoOa31HX4g=)
                          2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: 1R3JmOdI4nPS0GXp/35zVmhZH3Fluf/ZUAzw/YIu1s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:5d:8e:ee:5e:93:93:5a:6c:57:2f:91:01:22:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c98430885628971307c59b5cf241682102378
        Validity
            Not Before: Feb  9 13:00:38 2026 GMT
            Not After : Feb 10 13:00:38 2026 GMT
        Subject: CN=09e6c8d0949d2a8afbe45d00ed3e3902953f824f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:27:6a:52:36:0c:0c:ce:11:f1:ab:5c:70:
                    42:c0:16:62:c0:38:49:82:99:d2:a5:f2:f8:80:e2:
                    bc:15:8b:f9:da:b5:5d:07:51:90:bb:9a:a1:fc:fb:
                    3a:70:bf:bd:67:a7:3b:49:4b:16:9c:39:84:b2:25:
                    2c:cd:00:96:f2:f7:c2:95:f5:43:6a:8d:f4:dd:b9:
                    55:26:bf:1d:af:32:9c:75:ee:f3:3e:f2:a8:1b:ec:
                    ce:23:3b:58:b8:85:6d:a3:14:ff:ba:b6:d1:12:ad:
                    11:43:39:01:6d:35:5a:b4:b2:0b:16:a5:e8:50:46:
                    16:f2:2a:a9:48:24:0e:5b:f7:bf:73:dc:8e:74:7f:
                    d9:ed:38:47:bb:13:fc:bf:78:fe:59:e6:ed:ec:4f:
                    eb:b5:2c:60:7b:7c:06:b6:56:8a:87:d2:b3:3a:86:
                    77:e5:5f:23:ad:bf:cb:e2:28:b0:a3:18:56:6c:e1:
                    15:86:4e:50:36:78:06:ee:4a:4b:12:c6:56:8a:3e:
                    5e:ad:f4:94:82:8f:55:97:dc:7a:5b:ec:63:60:6d:
                    1e:01:52:6f:73:1e:35:36:2f:d5:35:e0:9a:2b:b9:
                    01:88:44:99:b3:71:79:76:1f:b0:67:10:af:d7:d8:
                    95:b9:fc:8f:2b:76:0a:d4:4f:33:ae:a4:34:51:cc:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E6:C8:D0:94:9D:2A:8A:FB:E4:5D:00:ED:3E:39:02:95:3F:82:4F
            X509v3 Authority Key Identifier:
                keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:91:f1:b7:ef:fe:38:34:42:0f:8d:3d:7f:9e:de:cc:ab:65:
         fa:4b:43:7b:f0:70:b7:15:bf:f6:f1:82:2a:55:0b:06:94:5f:
         0a:a0:46:55:67:30:5a:76:c2:5c:7c:b8:39:5e:62:25:20:c3:
         a2:70:8e:11:71:c2:83:f7:6a:66:dd:e2:92:ea:f6:22:45:35:
         20:f6:d7:03:a5:f7:c7:d9:dc:0f:4b:af:ec:28:12:90:e5:13:
         dc:82:8d:b2:c8:6d:9b:20:d8:cb:76:59:55:0f:c7:38:93:1a:
         6d:1d:88:66:d6:c9:54:54:70:59:45:57:1e:10:4b:a4:47:c9:
         30:12:7e:61:a5:fe:3b:02:7b:66:58:b8:49:66:ea:c0:48:2d:
         ee:cf:72:8f:0d:84:86:08:8a:62:71:d7:59:41:84:54:00:73:
         99:7a:b6:62:ac:ba:87:ea:e0:31:25:78:93:8b:32:d2:fa:73:
         78:19:e8:8f:56:4b:8d:62:95:b1:29:83:f3:d2:fe:33:3d:ae:
         e8:4a:99:ca:83:ab:30:b3:d8:3c:94:41:0c:d0:27:b7:2d:7a:
         a7:0d:af:55:53:dd:e4:2c:09:a9:9c:48:af:79:48:8b:be:84:
         7b:15:ec:32:0b:b9:27:89:ea:ed:b4:71:f3:a0:d0:c1:23:70:
         00:55:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:42 2026 by rpki-client