This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          K2LeKFx6dBXIO+II/nIV2IoT8SF48qDH8pd4kxhWqrs=
Subject key identifier:   A2:B5:0C:0D:6D:4A:D3:58:5B:C1:8C:AE:9B:9B:5A:FD:90:F3:04:2E
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019C43593CD8E63B243889A920F3157C403D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1B43
Signing time:             Mon 09 Feb 2026 17:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:47 +0000
Files and hashes:         1: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (hash: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY=)
                          2: 6AvQ5P72waQCsd6_-5_tagWhMp4.roa (hash: QW6y0cdxRGaHGDlUuqxVHCzb0qfk4IRVCXJMJRbFx1Q=)
                          3: RKZGTqKVMQNjyIVPqTs7YC9o6oM.roa (hash: JF4mJZ36GRphyrl7JxuHty3YCtuHLtR2mn1mriUneic=)
                          4: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: PTqNDOZQ1qPeTtnQP64+vw5rvYQuJm/5DDJDrKHSfm0=)
                          5: bOokuOsju8PnBI6u6F8O0HKF1FM.roa (hash: Vthj7p1cIv6iVGx3mxyo2OfOaTKlZipdajiwxClSlBE=)
                          6: onUcHcMkvFv3eRd2HH3aPRf6vhg.roa (hash: FMvdGW8G/i8Ujn/8ecIl88xpPzK27z5df59EqMBKxi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:3c:d8:e6:3b:24:38:89:a9:20:f3:15:7c:40:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Feb  9 17:00:47 2026 GMT
            Not After : Feb 10 17:00:47 2026 GMT
        Subject: CN=a2b50c0d6d4ad3585bc18cae9b9b5afd90f3042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:53:3b:17:6a:e8:35:b7:f1:97:60:ae:d5:
                    e2:08:ab:12:93:80:ff:53:fd:ab:72:d5:9f:82:74:
                    94:d0:5c:92:0b:7a:5f:99:ee:3e:54:57:93:fb:8c:
                    67:54:10:44:a8:fd:03:d9:bf:24:a4:3c:43:65:34:
                    36:2f:4a:c4:6e:df:62:f1:45:90:7f:5d:fa:99:f2:
                    20:3e:ac:42:32:f2:39:fa:e6:f2:93:59:6f:2a:b5:
                    96:fd:05:ed:9c:07:ff:df:e3:3b:da:43:0f:ad:56:
                    0b:3a:90:3c:52:e6:44:bd:f0:30:45:8e:9f:b3:02:
                    2b:bb:49:94:ab:7d:50:ad:aa:b6:33:9a:64:ae:7e:
                    84:2c:18:13:c6:53:f7:a1:2f:8c:d3:0c:d7:66:89:
                    a5:5a:6a:aa:09:b0:7e:1f:48:9d:ab:d1:73:69:9e:
                    78:53:b3:4b:e1:71:d6:c8:40:20:c4:23:37:bf:be:
                    72:ec:f1:9d:8a:1f:4c:00:74:11:9f:dc:48:01:2a:
                    ad:53:02:b7:7c:81:1f:84:98:6b:c7:aa:fe:f0:69:
                    fd:b7:2b:5e:36:07:7a:b0:1f:d0:bc:8d:a2:00:b9:
                    a3:c0:cf:f7:61:66:49:48:4e:cb:2b:9c:dc:e2:99:
                    34:37:80:6f:f1:b1:76:66:f5:fb:bc:3c:5a:62:f6:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B5:0C:0D:6D:4A:D3:58:5B:C1:8C:AE:9B:9B:5A:FD:90:F3:04:2E
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:ed:bc:49:ad:26:23:44:dc:d5:49:fa:de:84:bd:be:7b:
         77:7a:c3:73:db:cf:ef:bd:8c:5e:e2:e3:4b:3e:73:9a:bc:8d:
         04:75:45:e0:ef:37:da:cc:67:32:bb:67:7f:11:b7:3b:1a:bd:
         07:85:58:ae:21:31:90:55:14:6c:cb:4b:52:19:97:c5:65:93:
         ff:47:e1:f5:ec:14:17:c1:dd:3e:81:86:b0:32:8f:94:c8:c7:
         a9:fd:11:27:42:d0:aa:99:b5:3d:0f:3e:89:97:18:c4:82:ef:
         01:ea:a4:d8:56:35:d4:2b:2c:cc:e1:9e:6b:05:11:e9:03:3f:
         de:a3:6c:e1:de:5a:b8:97:f3:29:b2:4f:d5:05:38:84:3e:40:
         f2:36:87:b4:b6:f7:df:9f:32:30:89:48:94:e8:1f:65:5c:a3:
         98:8b:e1:13:92:21:ea:f5:c9:fc:9b:40:69:db:8e:98:fc:78:
         ad:fc:69:07:ef:d5:1c:0f:30:cd:c8:3e:79:8e:ff:9c:1d:19:
         88:2d:92:89:d5:1b:14:bd:ea:99:8a:42:db:7f:c8:1a:7a:b6:
         12:7a:81:30:bf:0b:13:9e:24:4b:10:36:8c:18:22:62:77:a9:
         be:57:c9:5c:5c:5d:c7:dd:d9:1a:2f:89:23:f5:2d:bf:c3:ff:
         46:59:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:36 2026 by rpki-client