This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File:                     XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier:          /znk3P6rtqsPj2SsfWELPmcvoeFTl1tb7RkogkzhM1I=
Subject key identifier:   2E:6B:89:63:55:6B:22:9B:28:CA:46:D4:E3:A8:DC:B5:86:B4:23:EF
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer:       /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial:       019C43592E73F94AEFB0D7C2782779F35496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number:          181A
Signing time:             Mon 09 Feb 2026 17:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:43 +0000
Files and hashes:         1: EgZw9prYM48BikMrmIquBFUeyCY.roa (hash: ctCXPXYhr5UMOKpyrvlkfwGqe62m7LyduahfprfYDD4=)
                          2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: 0Gc4z+pnQgbtUjkEMoC48pGlC3kZMnF0nVKDkAQ35ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:2e:73:f9:4a:ef:b0:d7:c2:78:27:79:f3:54:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
        Validity
            Not Before: Feb  9 17:00:43 2026 GMT
            Not After : Feb 10 17:00:43 2026 GMT
        Subject: CN=2e6b8963556b229b28ca46d4e3a8dcb586b423ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:5d:44:1d:10:42:02:4d:a7:24:e6:3f:5c:
                    5d:1b:e1:51:d6:4d:88:33:06:d1:03:56:43:51:59:
                    e9:cf:a7:b4:95:be:f6:a8:5e:75:a2:c6:5e:f2:72:
                    b8:78:c8:86:82:74:e3:50:3f:3b:d1:8f:d7:09:01:
                    1b:13:20:b3:a5:f2:eb:f6:25:65:b3:ee:bf:f5:a8:
                    dd:81:17:aa:1d:1d:ca:54:e7:0b:cd:59:b3:1c:54:
                    50:b5:e5:48:28:75:be:9b:04:9d:12:6b:a8:fe:0b:
                    75:4e:09:10:fc:6e:5b:95:73:31:3b:b3:99:33:b9:
                    6c:cc:13:01:f7:66:0c:98:59:4c:75:8e:24:b0:55:
                    b4:50:50:34:92:a7:29:35:8a:fb:c4:e3:33:3c:67:
                    a3:a7:ad:4d:ce:25:57:52:41:0a:b8:ca:98:95:62:
                    e8:3b:c5:96:2d:01:3d:3b:ba:80:38:f4:89:c4:86:
                    25:1f:fd:6c:60:e6:04:e3:d2:0a:ca:48:a8:b0:5b:
                    93:52:52:bf:d6:7b:0a:92:e3:52:77:9a:27:7e:51:
                    cc:56:07:83:da:82:38:62:bc:d3:78:7a:3a:a7:fb:
                    e6:14:01:ad:37:d2:8a:67:7b:a3:21:ba:0b:b2:eb:
                    a4:d2:e9:79:a1:fb:e6:b7:2f:ab:dd:83:1d:85:6c:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:89:63:55:6B:22:9B:28:CA:46:D4:E3:A8:DC:B5:86:B4:23:EF
            X509v3 Authority Key Identifier:
                keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:97:2b:f0:88:98:4c:f0:1b:e8:cb:20:3d:3c:bc:70:24:
         0c:81:10:6f:f9:9f:af:ff:e7:69:5b:3e:fc:e4:02:d6:b8:68:
         b6:1d:29:65:c4:2f:07:aa:99:39:43:f8:8f:39:c3:9c:58:cf:
         a7:6c:6c:57:99:da:73:74:75:61:6d:2b:84:11:03:16:3b:c3:
         a3:12:cb:e2:dc:b5:1c:9a:d9:5a:4a:fc:b7:3d:8f:c9:18:97:
         77:f3:69:ca:00:a5:8d:4d:d6:f9:e9:8a:47:26:60:95:e0:12:
         80:04:d6:55:f4:3f:4e:c6:74:f7:4d:b7:7c:08:ce:67:bd:aa:
         a1:4f:c5:eb:f4:62:61:bc:0f:24:2e:97:14:43:e5:2e:ee:c1:
         f5:08:90:c7:30:e0:e7:bd:5f:79:ce:6b:13:4e:54:2f:a0:16:
         67:cf:88:60:0c:9c:dd:0e:09:29:86:fd:10:da:af:fb:1f:3b:
         b0:63:dc:d7:ec:51:1c:06:57:89:20:90:87:4e:dc:b6:e6:3d:
         db:c1:42:63:70:de:4e:a6:10:61:ac:96:c8:e2:3e:09:2a:2e:
         b6:a2:b8:78:fd:16:f3:93:20:86:9e:12:4c:cc:cd:31:bb:cc:
         7f:6a:73:0c:7a:d5:71:8c:57:7d:b2:56:7a:5d:2b:a4:5c:75:
         3c:fb:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:26 2026 by rpki-client