This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File:                     XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier:          j9+hzKSGJ7kI8NpZysG0BZrmQ7IV3mEy7x/wEEy/qNA=
Subject key identifier:   69:71:2D:E4:04:49:5B:E9:21:05:B0:8C:49:08:15:3B:AC:E1:33:14
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer:       /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial:       019C41A1F2E1786E1FC57D8CD2956E7CE177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 09:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:58 +0000
Files and hashes:         1: QlZ3EwceRly-CQVyh76fsical88.roa (hash: GhqviNkjdeBBcrA1tzvOBRebTTX9kM0EqFFhCTAnsnQ=)
                          2: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: gSnhUhD9nG8VQgfIZMAMTJacPeFsUDkt9d9QUmx1JkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:f2:e1:78:6e:1f:c5:7d:8c:d2:95:6e:7c:e1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
        Validity
            Not Before: Feb  9 09:00:58 2026 GMT
            Not After : Feb 10 09:00:58 2026 GMT
        Subject: CN=69712de404495be92105b08c4908153bace13314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:1e:b9:6e:f3:4c:8c:e3:9c:ec:1d:5f:24:
                    23:83:73:ca:1c:78:86:fb:63:a6:5a:cf:2d:fd:6d:
                    21:3d:51:b7:86:27:f2:6d:3d:9f:dc:bd:ea:51:18:
                    1d:1d:52:6e:78:68:3e:1a:8b:d7:e3:5d:45:00:f4:
                    8c:11:d2:ae:b7:7e:47:b0:0c:90:86:71:d7:8f:d8:
                    1a:aa:ff:4f:56:de:f6:f7:6b:55:cd:c0:f0:95:9a:
                    f7:79:3e:32:07:e6:78:63:a7:dd:87:f7:62:09:3b:
                    0c:31:54:f1:8c:f5:50:d5:03:27:56:8a:8d:6e:88:
                    d6:09:c9:41:40:f7:7d:91:d2:ca:79:41:ef:be:8f:
                    ec:22:47:4c:9f:2c:53:c7:3f:28:89:dd:99:0b:67:
                    9a:c2:1f:40:e4:ab:6d:f0:25:43:62:2c:41:b5:85:
                    66:30:8c:df:7c:6e:67:e0:1a:ea:d9:7e:15:7f:79:
                    dc:8e:d7:97:a0:64:d3:07:3f:68:0d:63:60:ac:06:
                    90:a8:60:31:97:73:fe:e5:de:ed:4d:da:5a:15:f8:
                    c0:30:c8:e0:a8:15:14:83:29:09:89:bc:49:ae:08:
                    99:38:ab:da:a9:7d:12:e2:e5:93:48:42:4f:cd:a9:
                    3d:a7:76:e9:c2:1a:75:64:5a:5a:35:ec:c8:aa:e1:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:2D:E4:04:49:5B:E9:21:05:B0:8C:49:08:15:3B:AC:E1:33:14
            X509v3 Authority Key Identifier:
                keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:32:7e:46:ad:dc:b7:79:25:09:e1:c3:0d:04:72:13:12:
         1d:08:46:61:73:09:93:95:68:dd:83:72:aa:4e:ff:c4:8c:2e:
         46:a4:8c:32:0a:dc:cf:01:4f:1c:09:13:2b:98:9a:68:1b:e1:
         65:36:4b:ab:2e:46:ee:87:b9:bc:87:ca:29:3e:a6:a6:dc:92:
         75:9d:15:0a:0c:23:62:d6:5a:3e:8f:33:23:19:36:74:88:57:
         9d:74:59:6c:0f:e3:84:8e:16:8b:62:e3:df:45:3a:95:13:7a:
         e3:b8:01:85:c1:d8:ac:5e:3d:c9:27:75:84:86:08:b3:a5:e4:
         78:c5:72:4f:55:2d:85:d3:82:8a:b5:26:1d:82:50:af:9a:3d:
         d0:53:5b:19:80:8d:50:48:55:fb:b9:66:75:11:a2:f3:67:54:
         91:fd:34:d5:5a:05:85:cb:6a:b5:b9:88:b2:dc:68:57:02:3d:
         c3:ef:65:be:bd:f4:ba:a1:78:77:6b:a6:b1:58:3d:f9:e2:4a:
         7c:7a:99:77:e4:ba:98:89:fc:f4:56:87:37:c4:a4:3c:34:72:
         51:03:0c:9d:85:16:d2:dd:77:09:be:ee:19:53:cb:bb:e8:a2:
         5b:81:de:8c:ab:98:31:c0:b5:06:24:96:9a:e4:31:27:ba:c5:
         a9:3e:9c:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBofLheG4fxX2M0pVufOF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjYwMjA5MDkwMDU4WhcNMjYwMjEwMDkwMDU4WjAzMTEwLwYDVQQD
Eyg2OTcxMmRlNDA0NDk1YmU5MjEwNWIwOGM0OTA4MTUzYmFjZTEzMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpseuW7zTIzjnOwdXyQjg3PKHHiG
+2OmWs8t/W0hPVG3hifybT2f3L3qURgdHVJueGg+GovX411FAPSMEdKut35HsAyQ
hnHXj9gaqv9PVt7292tVzcDwlZr3eT4yB+Z4Y6fdh/diCTsMMVTxjPVQ1QMnVoqN
bojWCclBQPd9kdLKeUHvvo/sIkdMnyxTxz8oid2ZC2eawh9A5Ktt8CVDYixBtYVm
MIzffG5n4Brq2X4Vf3ncjteXoGTTBz9oDWNgrAaQqGAxl3P+5d7tTdpaFfjAMMjg
qBUUgykJibxJrgiZOKvaqX0S4uWTSEJPzak9p3bpwhp1ZFpaNezIquEckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlxLeQESVvpIQWwjEkIFTus4TMUMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEUyfkat
3Ld5JQnhww0EchMSHQhGYXMJk5Vo3YNyqk7/xIwuRqSMMgrczwFPHAkTK5iaaBvh
ZTZLqy5G7oe5vIfKKT6mptySdZ0VCgwjYtZaPo8zIxk2dIhXnXRZbA/jhI4Wi2Lj
30U6lRN647gBhcHYrF49ySd1hIYIs6XkeMVyT1UthdOCirUmHYJQr5o90FNbGYCN
UEhV+7lmdRGi82dUkf001VoFhctqtbmIstxoVwI9w+9lvr30uqF4d2umsVg9+eJK
fHqZd+S6mIn89FaHN8SkPDRyUQMMnYUW0t13Cb7uGVPLu+iiW4HejKuYMcC1BiSW
muQxJ7rFqT6cJw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:53 2026 by rpki-client