This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File:                     XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier:          jex0PDeEp+wVp6zfHK1yCcMh26mFWVtHTuK+2n5ao6U=
Subject key identifier:   63:CB:D1:08:4E:3A:E6:8F:8A:A0:0A:4D:8E:D6:C9:B6:B9:58:A7:35
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer:       /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial:       019C427D34F9B3C9A0E16CB56683DF2E56E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:27 +0000
Files and hashes:         1: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: Wws6hPxvPUeF2HYTApaeZy2UYg3ZtkGlWK09i+FpFzA=)
                          2: b2Q2Eat3_cux0yjgVGOzDFtgpic.roa (hash: jMq1XWA6LmE8jKy6nS6lDU5q1VTY7iuwpA5ReXp7Ws0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:34:f9:b3:c9:a0:e1:6c:b5:66:83:df:2e:56:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
        Validity
            Not Before: Feb  9 13:00:27 2026 GMT
            Not After : Feb 10 13:00:27 2026 GMT
        Subject: CN=63cbd1084e3ae68f8aa00a4d8ed6c9b6b958a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:63:c2:24:70:7b:eb:dc:d1:7b:bc:22:c8:
                    da:7e:cf:a8:c0:b7:49:27:3e:f0:44:98:62:25:96:
                    eb:95:a0:cf:08:b2:7f:71:ab:a2:a6:60:57:8c:b1:
                    73:92:d1:72:21:7a:a3:66:82:a4:68:48:2e:24:38:
                    8c:37:d5:dd:1b:eb:c1:0f:10:37:39:9c:e3:45:16:
                    ee:22:bf:87:f5:99:b5:48:2d:07:c4:6a:b3:72:bf:
                    3c:d8:ac:91:3c:f0:37:46:10:ad:3b:1f:65:af:44:
                    e5:61:84:96:72:4c:6e:2e:31:77:b1:cd:6c:c2:66:
                    15:41:31:09:c5:17:e0:53:c1:82:cd:39:cf:3c:ee:
                    a6:38:5e:a0:dd:b4:9f:48:10:ac:9b:e9:db:3a:e0:
                    03:8d:f9:b2:e6:ea:5b:7a:43:f4:4e:5f:ac:ed:3a:
                    e0:1e:ad:9c:f9:33:7d:4c:1f:b8:86:03:f4:31:71:
                    d1:be:f5:6c:ad:55:98:15:3d:4f:f6:a6:7f:4b:ba:
                    a9:8f:a6:bd:37:83:a3:a5:e6:78:60:28:33:c4:66:
                    b4:68:6d:37:13:74:3d:93:49:3a:f7:9d:91:9b:7c:
                    8e:49:ad:ed:15:04:86:15:cd:f5:27:e5:3d:9b:7d:
                    31:8e:2a:94:42:89:23:20:a1:23:6b:83:27:30:49:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:D1:08:4E:3A:E6:8F:8A:A0:0A:4D:8E:D6:C9:B6:B9:58:A7:35
            X509v3 Authority Key Identifier:
                keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:f7:72:5f:ab:4c:0b:fd:28:d3:e7:81:e6:3d:21:2e:79:
         aa:b7:1d:7e:59:bf:b3:fe:92:53:4c:cf:bb:84:6c:7f:b3:63:
         af:a0:6e:df:70:5a:11:1a:01:e0:e1:fe:31:f3:ce:0d:cb:c5:
         12:0f:c1:82:a5:21:5d:45:a0:65:84:21:bd:12:2e:31:50:54:
         e4:e8:f6:fc:ad:ae:02:f2:a0:98:8c:63:f4:1e:18:fb:52:e5:
         cb:c8:36:45:93:dd:e4:34:30:53:5a:8b:ae:91:fd:d1:49:c1:
         6c:29:cb:ac:26:c5:b0:47:4f:85:a0:66:0e:bd:6d:b9:f3:65:
         f3:d3:ef:d5:c6:d6:99:58:bf:6f:27:dc:06:9d:97:06:91:e8:
         8b:42:78:3b:43:2c:23:fe:62:0c:bf:6f:3e:66:ac:90:fe:60:
         26:f3:27:3a:c8:f4:d9:96:a5:16:29:21:21:d5:32:91:80:e5:
         a7:54:e8:57:43:e9:e1:c1:85:41:ad:47:e0:e6:0a:0f:f8:85:
         27:c1:2b:7c:dc:77:d5:fd:31:d2:89:aa:3e:f9:ef:70:b0:bc:
         af:5b:74:d6:e4:ed:da:5f:4a:b2:42:cd:b6:1c:1e:79:ca:fc:
         68:78:a2:d7:54:e9:5d:10:18:af:84:5d:f6:5b:11:52:af:6a:
         57:a2:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:28 2026 by rpki-client