This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File:                     XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier:          w4KJCib5/FRQjuIghOKcPsDbOGg3lVG/mnqaIZHVs5o=
Subject key identifier:   AC:84:3F:D4:87:2E:EC:7E:7F:B4:D3:AD:8E:69:8C:26:BF:7E:4A:1F
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer:       /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial:       019C42B44FBED7BF088E481EF0A9BF5E168C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 14:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:38 +0000
Files and hashes:         1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
                          2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: rmeV/6hRa+i8Rgh1bxhucv8DCsQL68oo9A7I9bHRMlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:4f:be:d7:bf:08:8e:48:1e:f0:a9:bf:5e:16:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
        Validity
            Not Before: Feb  9 14:00:38 2026 GMT
            Not After : Feb 10 14:00:38 2026 GMT
        Subject: CN=ac843fd4872eec7e7fb4d3ad8e698c26bf7e4a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:b5:14:65:f4:ac:6f:ca:39:bb:64:47:21:
                    da:2e:fe:55:20:a5:4f:0a:f6:c0:32:93:80:44:3c:
                    ec:51:7d:12:18:d1:a9:da:86:bd:b0:43:bc:72:59:
                    09:87:b9:bf:a1:cd:55:ea:dd:aa:25:38:9f:92:f6:
                    03:f3:09:30:de:89:74:ee:f1:e2:8c:4f:3c:a9:66:
                    98:93:3e:7e:3b:e9:92:32:8d:79:53:13:40:bc:c9:
                    03:bd:05:4e:c2:7a:a4:1d:66:d0:ff:02:da:57:75:
                    6b:d9:72:39:ca:18:1d:35:c0:be:84:62:07:92:f9:
                    b6:95:fd:5e:6d:b2:69:af:f8:67:b2:4c:fb:e6:24:
                    e2:c8:ff:8c:4f:b0:3d:d9:d2:ce:e6:96:c6:a1:d0:
                    8a:31:80:c8:43:ff:66:5d:31:5f:dd:eb:d3:12:85:
                    89:11:e7:b3:c1:29:b3:38:bb:31:8b:e6:ef:48:3a:
                    10:df:03:78:e2:c7:1f:d9:ac:59:42:e9:bd:91:d3:
                    db:bc:64:24:5c:e5:29:2a:60:03:0a:3f:ba:da:f8:
                    0e:17:41:80:02:71:e2:6c:65:ab:70:c9:af:55:fb:
                    1d:a3:f8:23:fe:38:ab:93:f2:ac:05:a4:0e:ae:14:
                    ab:2d:db:25:d2:39:48:91:67:b5:2a:60:95:08:fb:
                    b8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:3F:D4:87:2E:EC:7E:7F:B4:D3:AD:8E:69:8C:26:BF:7E:4A:1F
            X509v3 Authority Key Identifier:
                keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:1a:d7:cc:a0:61:65:61:a2:fb:0d:9e:af:3a:37:f5:b9:
         eb:34:3b:21:38:6a:a2:2f:cb:a4:43:ac:98:49:5a:d0:04:a3:
         e0:57:fb:45:34:dc:df:53:55:09:74:40:26:9f:2b:37:72:35:
         b8:c5:30:ff:67:91:8f:34:d1:86:3a:d5:06:fb:0b:4b:30:2a:
         c1:74:d4:af:f9:25:b4:f1:6a:ea:cd:f5:d3:03:9b:dc:ec:74:
         32:7d:a9:3d:a7:79:55:36:9a:0d:c9:f6:99:b0:a8:ca:1e:a5:
         3e:d8:d8:4c:97:1a:80:d9:03:a7:7d:d0:a0:13:e7:25:34:7e:
         2b:f2:cd:2d:7c:58:89:3e:fd:db:58:7b:bd:52:72:dc:40:1a:
         85:e2:c8:75:81:e7:e6:34:9c:0f:ce:6a:a0:c3:33:0c:84:4f:
         af:4f:fe:bd:e6:1a:b8:1c:d0:8f:32:c8:a1:f0:0c:79:be:18:
         b2:4c:f4:94:33:b2:4c:bb:a2:01:54:ff:c5:1e:6a:f8:70:de:
         75:d7:71:76:c3:6d:7f:b2:82:31:36:ea:9b:f2:ac:b8:70:87:
         6c:a3:b4:a4:29:eb:3b:ee:1d:4f:7b:3a:ad:1e:56:a4:06:be:
         d4:18:c8:c7:c4:22:9b:8d:5a:ed:08:f6:2c:c5:5f:2d:fd:01:
         c5:0d:20:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtE++178Ijkge8Km/XhaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD
EyhhYzg0M2ZkNDg3MmVlYzdlN2ZiNGQzYWQ4ZTY5OGMyNmJmN2U0YTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIW1FGX0rG/KObtkRyHaLv5VIKVP
CvbAMpOARDzsUX0SGNGp2oa9sEO8clkJh7m/oc1V6t2qJTifkvYD8wkw3ol07vHi
jE88qWaYkz5+O+mSMo15UxNAvMkDvQVOwnqkHWbQ/wLaV3Vr2XI5yhgdNcC+hGIH
kvm2lf1ebbJpr/hnskz75iTiyP+MT7A92dLO5pbGodCKMYDIQ/9mXTFf3evTEoWJ
EeezwSmzOLsxi+bvSDoQ3wN44scf2axZQum9kdPbvGQkXOUpKmADCj+62vgOF0GA
AnHibGWrcMmvVfsdo/gj/jirk/KsBaQOrhSrLdsl0jlIkWe1KmCVCPu4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyEP9SHLux+f7TTrY5pjCa/fkofMB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3Ua18yg
YWVhovsNnq86N/W56zQ7IThqoi/LpEOsmEla0ASj4Ff7RTTc31NVCXRAJp8rN3I1
uMUw/2eRjzTRhjrVBvsLSzAqwXTUr/kltPFq6s310wOb3Ox0Mn2pPad5VTaaDcn2
mbCoyh6lPtjYTJcagNkDp33QoBPnJTR+K/LNLXxYiT7921h7vVJy3EAaheLIdYHn
5jScD85qoMMzDIRPr0/+veYauBzQjzLIofAMeb4Yskz0lDOyTLuiAVT/xR5q+HDe
dddxdsNtf7KCMTbqm/KsuHCHbKO0pCnrO+4dT3s6rR5WpAa+1BjIx8Qim41a7Qj2
LMVfLf0BxQ0g5A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:46 2026 by rpki-client