This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
File:                     xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json)
Hash identifier:          Yqam8ZNKrjhqmHVv0OlEs/yo2Fkr1+Qj/PvIMqseE8o=
Subject key identifier:   96:80:40:C1:F4:4D:C5:24:0F:DD:C8:FC:2B:6F:31:CF:F2:37:B8:AE
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019C3AC38F2954210301395E432CB333F20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
Manifest number:          0EA1
Signing time:             Sun 08 Feb 2026 01:00:20 +0000
Manifest this update:     Sun 08 Feb 2026 01:00:20 +0000
Manifest next update:     Mon 09 Feb 2026 01:00:20 +0000
Files and hashes:         1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=)
                          2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=)
                          3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=)
                          4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=)
                          5: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=)
                          6: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=)
                          7: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=)
                          8: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=)
                          9: P_x09eaZtSG2b3R4MFY1CeOXltc.roa (hash: NJQa5EFIFTf+Css37a+eCJBdfPHP4A+2ge82BNYGOvY=)
                          10: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=)
                          11: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=)
                          12: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=)
                          13: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=)
                          14: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=)
                          15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: Rf1rVdOXENpGcM+x4cn8qoKSBk51r3UgyiazbdwbkD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3a:c3:8f:29:54:21:03:01:39:5e:43:2c:b3:33:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Feb  8 01:00:20 2026 GMT
            Not After : Feb  9 01:00:20 2026 GMT
        Subject: CN=968040c1f44dc5240fddc8fc2b6f31cff237b8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:4f:cd:c8:b0:79:96:5f:1c:2e:e0:18:93:
                    ae:10:d5:8d:39:fc:02:f3:fd:9d:e9:cb:e1:20:c3:
                    69:8b:28:18:0b:d8:9b:05:b3:4e:d1:64:92:59:01:
                    8a:28:4d:80:ab:a6:58:90:05:21:12:8a:e2:f8:6f:
                    5a:2e:39:3a:b2:64:12:62:69:f2:5d:5e:c7:98:cf:
                    9a:84:9a:63:49:1e:0a:af:96:36:8a:cc:58:74:e8:
                    57:15:e9:16:f1:fd:32:e2:d5:01:af:c7:9f:43:cf:
                    c0:56:03:5a:84:df:58:73:9b:41:cb:3d:56:41:d4:
                    4f:14:a9:ff:46:95:ae:77:1d:2b:45:f3:75:99:4f:
                    f0:04:8f:9e:de:2b:6e:fd:dc:64:5b:3f:8b:e9:f0:
                    07:97:72:fc:40:1f:39:f1:dd:c3:f0:92:dd:21:0f:
                    a3:47:e2:f8:9d:b9:eb:bb:0c:64:ee:8e:6e:b4:f7:
                    49:52:25:ff:a8:e9:ae:37:9a:a5:3a:cb:fb:8d:f6:
                    bb:c5:13:ee:d2:b8:7b:78:17:30:2e:ba:93:1b:ac:
                    15:93:e6:b4:4a:f5:83:9a:4c:19:b9:cf:6d:51:f4:
                    ae:3e:70:8e:4e:4e:0b:43:ed:b8:60:6f:21:09:3a:
                    e3:cc:f2:88:0a:7a:3d:b5:90:35:59:b6:44:a2:4d:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:40:C1:F4:4D:C5:24:0F:DD:C8:FC:2B:6F:31:CF:F2:37:B8:AE
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:9b:19:6e:0b:8f:fd:d9:5d:b5:d3:18:f0:b4:8a:68:94:
         be:4e:4b:23:ed:bc:46:be:16:73:30:12:bb:01:b7:f4:1a:63:
         2e:0b:37:6e:17:7d:d7:1f:41:f3:99:5e:bf:72:69:7f:22:8f:
         93:01:ca:1e:91:5e:f9:75:6f:12:71:b9:91:cb:dc:6a:52:8c:
         bb:a1:35:c9:e9:35:5c:86:aa:0e:e5:dc:64:42:4b:dd:1e:58:
         18:d7:61:cb:d0:3c:bb:99:07:7b:06:ab:ce:34:94:46:2c:2a:
         40:f0:67:73:ac:ec:33:6b:09:88:cd:4d:3a:d1:c8:fe:65:85:
         91:2d:60:a8:1e:68:8f:e7:53:52:8a:08:98:72:89:90:b0:49:
         98:ac:f0:99:c1:02:01:3b:cb:25:3c:3d:52:63:41:f2:f0:08:
         90:8d:9e:c7:7d:da:c9:f6:3c:43:b1:ba:42:ca:a1:37:4a:31:
         70:20:15:cd:63:5c:b4:e9:f0:16:c2:34:1a:b5:d9:33:b0:24:
         cd:b5:86:59:69:5b:7c:30:f5:67:69:d9:00:7f:55:ab:a4:48:
         8e:48:c6:d8:9d:19:73:22:f3:5f:8a:20:e4:7d:20:bf:d0:fe:
         46:4c:f3:50:73:b5:11:b7:62:31:74:fa:bd:e0:32:f0:7a:bd:
         c0:61:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 06:25:29 2026 by rpki-client