This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File:                     xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier:          +U4op0Sr5+yLtDmP3YVSqF5/E+PM2B6h93i9YsDL/Y4=
Subject key identifier:   F8:A3:D4:01:B3:29:DB:2B:63:17:5A:2E:A9:DD:41:7C:5C:E8:EF:F6
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer:       /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial:       019C435948742777CF075D6D08F50CE1243E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 17:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:50 +0000
Files and hashes:         1: tXhKuNb4B-Nkw-Ko0kv7aBe86Mo.roa (hash: nAgAkoHpMUFVWXw/y+ljVkLkx6oi2l2uF+ZlnoJC4s8=)
                          2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 1/6uTmO4dgIrpmartAyaDqN+SC2Dhb9oi6yKg0N3Eqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:48:74:27:77:cf:07:5d:6d:08:f5:0c:e1:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
        Validity
            Not Before: Feb  9 17:00:50 2026 GMT
            Not After : Feb 10 17:00:50 2026 GMT
        Subject: CN=f8a3d401b329db2b63175a2ea9dd417c5ce8eff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:8f:a1:9f:c9:bb:2e:cc:81:70:9f:b1:49:
                    25:8b:d6:c9:30:a2:e0:8d:d1:b7:bc:3b:c7:43:72:
                    a3:55:bd:8c:c3:c6:73:49:db:28:d9:ce:c7:9f:a5:
                    50:4d:e6:c3:e9:0f:10:4f:74:fd:36:d1:86:fc:61:
                    cf:00:a0:91:6b:3f:ca:92:fb:f2:57:71:44:31:1e:
                    5d:6b:2b:19:4c:fe:fa:bd:8d:84:00:ba:3f:8b:dc:
                    d3:42:ad:ca:f7:ae:cd:6c:8e:2c:c8:df:11:ce:d9:
                    96:79:b1:bc:3f:48:69:62:92:0f:03:b4:d8:5d:9c:
                    1d:0a:11:8d:ad:82:57:1d:f8:ff:9a:cc:d0:50:67:
                    0b:9e:1a:d1:8b:96:21:57:2e:5b:72:b4:d7:80:9b:
                    49:56:1f:a3:ef:f7:b7:41:3d:c9:20:7f:0a:fc:cc:
                    8d:7d:94:b2:86:a8:c6:b2:ef:0a:be:a5:ac:dc:b9:
                    8d:30:16:83:f0:7e:17:fd:48:bf:e5:92:1e:7f:5f:
                    af:14:99:63:a3:87:93:fc:17:e6:c8:2b:8a:b0:4f:
                    4b:62:9a:88:60:c0:7a:62:12:32:92:e0:4b:79:eb:
                    13:dd:d3:bf:88:ce:d7:cc:9b:49:a2:de:61:3d:41:
                    39:3a:ca:50:58:94:f8:0b:29:5b:af:53:ee:d3:11:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A3:D4:01:B3:29:DB:2B:63:17:5A:2E:A9:DD:41:7C:5C:E8:EF:F6
            X509v3 Authority Key Identifier:
                keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4f:c1:53:16:19:7b:d5:3c:0e:02:50:38:bb:ed:89:7d:13:
         8f:8b:1b:49:16:9f:30:c8:d6:1a:71:fe:3c:45:af:ab:60:5b:
         4d:32:04:26:e8:87:9e:14:d2:05:12:b4:97:7f:87:e2:66:10:
         c7:a4:38:48:1e:90:74:ce:1c:4a:2b:bc:6f:8c:8b:93:d0:6a:
         3c:a5:d9:31:89:00:60:0f:aa:a7:f4:b7:9c:4a:be:81:a0:a4:
         8a:1f:e4:30:3f:8e:cd:90:0e:42:6a:2b:bb:07:69:ae:68:a6:
         28:68:e0:ab:c0:3c:74:f7:22:d2:6b:a6:93:ea:c2:28:6f:66:
         c1:93:f0:ba:73:d4:28:e8:44:85:50:c2:05:1c:14:5f:34:51:
         b9:dc:a7:6c:29:4d:04:a0:c4:6d:29:7d:be:48:ce:49:f3:0c:
         da:f0:dc:3b:86:de:93:bf:c8:41:7b:c9:31:ad:dd:c6:06:bf:
         1b:5e:81:e4:15:4a:21:22:6c:8b:ec:61:5c:0a:23:28:e5:00:
         14:56:79:28:c3:fb:d7:fa:bd:27:35:a0:a8:4e:b2:8b:d2:5d:
         28:6a:7b:2a:c2:3b:68:fd:f2:fa:8a:5c:5b:66:b7:49:7a:d3:
         30:08:3f:f8:dd:ed:93:a7:e4:8b:dd:ab:2f:83:1a:24:66:2d:
         28:59:4c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:24 2026 by rpki-client