This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File:                     XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier:          1PBVmnneCUbVxmQ3UXwtROARfvTZfin0JhwoaKx4U44=
Subject key identifier:   43:B5:DB:44:A7:51:36:6D:78:5C:5A:09:EF:C9:CA:AF:C2:52:8C:D7
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer:       /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial:       019C427DAA1BFFC0A9E988AB8B5435D38AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 13:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:57 +0000
Files and hashes:         1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
                          2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: mmttUIUWIKRGizgncuo37lP8pbSOhYgkTWzBfIXA9T8=)
                          3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:aa:1b:ff:c0:a9:e9:88:ab:8b:54:35:d3:8a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
        Validity
            Not Before: Feb  9 13:00:57 2026 GMT
            Not After : Feb 10 13:00:57 2026 GMT
        Subject: CN=43b5db44a751366d785c5a09efc9caafc2528cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:42:99:9d:05:58:84:51:a0:b0:17:2c:9a:
                    31:35:e2:1d:b0:f4:3e:00:c0:5f:85:aa:7c:99:ba:
                    fb:62:b5:16:e0:e5:4c:8c:08:6a:f8:4e:c3:7f:d0:
                    84:5e:1f:06:80:46:14:01:4a:76:cf:0d:d3:80:6a:
                    00:ae:4c:01:e0:11:c4:62:35:47:66:ad:47:8c:08:
                    70:3d:ce:46:05:80:9b:2e:78:f3:4b:ea:9e:cb:50:
                    f7:38:f7:79:95:75:74:de:b5:c7:6f:84:bb:eb:81:
                    a4:f9:2d:c9:d0:5e:70:13:36:fe:bb:0d:77:88:6d:
                    c5:2b:69:4d:f2:ee:a3:af:75:d3:2f:b6:74:47:7a:
                    7e:1a:c9:61:87:19:f8:b5:10:bd:17:96:80:55:3b:
                    05:a3:73:54:2a:36:ff:f7:27:65:43:13:ba:4d:e7:
                    8f:bf:4b:d1:71:3d:bb:e9:0b:6c:59:b6:d3:bd:ca:
                    c4:0f:b3:45:47:04:6a:53:c6:cf:ff:44:42:80:dd:
                    30:24:92:a8:52:b8:33:32:d4:d3:1a:af:3f:e1:b4:
                    72:b2:f9:4d:b8:b0:b6:4a:ce:3c:7b:57:82:24:66:
                    d5:e4:70:84:bd:1b:1f:bf:06:77:73:67:3b:a6:b3:
                    8d:cf:a6:99:14:ae:ae:c1:af:90:b4:49:d4:84:03:
                    f4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B5:DB:44:A7:51:36:6D:78:5C:5A:09:EF:C9:CA:AF:C2:52:8C:D7
            X509v3 Authority Key Identifier:
                keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:53:cd:28:ff:96:d9:c0:2e:2d:0b:7e:8d:70:f8:48:cd:73:
         64:e9:57:d0:9b:81:61:42:a2:93:09:c2:26:4e:04:ef:5f:3a:
         e1:f6:71:0e:5c:af:64:2a:e5:01:ea:a6:fe:66:4a:70:98:c7:
         2e:09:99:de:ff:8b:49:75:4e:4f:81:54:92:b7:d1:b6:26:17:
         94:b2:fd:ba:60:1b:11:af:fa:e8:ac:fa:39:80:6e:64:f3:b7:
         6d:e1:2a:9b:dc:a4:81:54:03:91:68:96:f6:24:f8:83:e3:45:
         5f:16:a7:92:62:6e:42:31:81:39:54:94:fc:09:3a:6c:42:42:
         e4:4e:00:63:de:f8:30:5c:79:9e:68:91:88:5c:57:18:a0:1a:
         8d:56:16:56:56:9c:c0:88:c0:ff:1a:ea:a5:15:a7:be:32:d1:
         ea:28:90:64:af:e6:b8:05:cb:24:da:dc:a8:b6:ee:f3:cb:a9:
         49:5c:f2:1f:5e:bb:50:4b:a7:3a:fc:22:12:d5:83:27:c2:82:
         1a:ee:46:84:50:cd:b5:f1:be:b7:1c:1b:6e:1c:17:95:56:b1:
         d7:90:cb:f7:4f:5a:32:4e:e2:9a:86:17:98:65:42:31:3d:cf:
         5f:a7:72:6a:3d:17:ed:46:ca:00:e8:f5:30:84:56:54:d6:04:
         c3:fa:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:29 2026 by rpki-client