This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File:                     xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier:          GAtDuyydhf2wR/x9z6aiBSL/htvNdDaq6vsPmwbzQdI=
Subject key identifier:   12:74:54:80:02:58:E9:DA:38:7B:3C:A2:E8:D8:AC:14:82:7E:BA:0E
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer:       /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial:       019C4434B35A0D7AD35CC4717470B8D7D40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 21:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:30 +0000
Files and hashes:         1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
                          2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: nxNWMEX5u+v5JiqPORvr++3CCHtq3FknfMbZmLMYSBA=)
                          3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:b3:5a:0d:7a:d3:5c:c4:71:74:70:b8:d7:d4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
        Validity
            Not Before: Feb  9 21:00:30 2026 GMT
            Not After : Feb 10 21:00:30 2026 GMT
        Subject: CN=127454800258e9da387b3ca2e8d8ac14827eba0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:06:3a:13:a9:e0:49:ad:77:43:88:69:5a:
                    64:cc:91:d8:55:65:4b:73:37:aa:8b:af:08:f6:c3:
                    19:a4:e0:df:61:83:bd:9d:69:b0:20:9f:24:13:7a:
                    73:12:8e:d6:6f:61:ca:aa:aa:2a:5b:dd:60:82:e7:
                    85:f7:95:10:d7:ca:4f:e8:fc:a7:80:73:5a:cd:fe:
                    0d:6e:06:2e:92:da:60:d7:f4:55:72:b7:b6:c8:ff:
                    d8:04:30:80:c1:c2:aa:24:39:99:de:d7:14:32:4a:
                    c1:fc:1c:d9:25:35:36:24:c1:63:7e:5d:2b:47:84:
                    19:8f:5d:23:01:de:83:f0:c2:18:e2:ad:be:1c:eb:
                    c7:2a:f7:3a:63:0e:77:35:92:54:24:8c:1f:d1:d4:
                    ef:26:e5:23:c8:10:41:b6:ea:52:84:c0:48:9e:c7:
                    95:cb:7a:b9:91:10:83:46:08:c3:16:a4:cd:76:a6:
                    fa:be:f7:69:88:7b:0d:f3:9f:2f:42:75:1e:ae:86:
                    9b:8b:da:2c:3d:7f:1b:0d:1f:e4:fc:63:36:42:2c:
                    04:5f:77:5b:1a:04:7a:ae:9f:83:c9:44:f7:a2:f2:
                    5e:20:42:3c:1f:5f:b6:b1:b2:62:be:a4:2a:ed:ec:
                    b5:9c:e1:ca:c9:5a:d6:ae:4c:2b:a4:68:9d:15:0c:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:54:80:02:58:E9:DA:38:7B:3C:A2:E8:D8:AC:14:82:7E:BA:0E
            X509v3 Authority Key Identifier:
                keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:c2:0e:09:d8:77:d9:ea:72:1b:74:65:27:2e:90:18:53:
         6e:d9:d1:a4:33:1d:9e:56:e2:2b:d0:51:e5:c5:a0:24:2d:70:
         a8:da:68:46:1e:27:a1:91:2d:af:80:97:71:9f:e0:19:eb:13:
         59:db:55:80:6c:de:6e:5d:d5:ba:8f:5b:3a:85:6b:5f:82:31:
         e9:e2:49:7e:6a:74:9f:a6:a9:5e:58:6e:7c:0f:4e:12:a2:4e:
         d2:86:76:21:f0:98:af:89:ea:47:a5:c8:84:a3:2e:bb:27:8f:
         81:ca:b6:9b:f6:88:3a:46:31:44:3d:77:a1:38:e6:0f:59:bc:
         24:73:37:2d:3d:66:f6:39:b7:8c:a1:f7:3f:22:96:1d:61:4a:
         96:51:4a:64:35:68:92:16:26:a8:69:89:78:e6:64:2c:67:52:
         b1:d5:51:48:3f:ed:d7:0d:c2:5f:73:c7:74:6c:b7:f2:48:3f:
         4d:ac:d3:b2:a1:da:9d:ec:07:83:a2:9b:1e:53:a1:1e:55:dd:
         8d:c3:12:9f:5a:00:4c:4f:24:3e:b6:00:c8:b6:7f:73:61:d8:
         a1:d5:08:54:aa:5f:7e:94:12:15:f7:83:39:da:32:70:8a:7e:
         c7:b6:85:37:1c:c7:af:a1:5d:5f:18:8c:67:f0:57:eb:b8:e7:
         cf:c2:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:06:10 2026 by rpki-client