This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File:                     xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier:          7XC7NvSNpNBCXYVih1OhiQMwxQKsnSB5AWlBQNgftc0=
Subject key identifier:   8E:3E:36:EE:02:DD:D8:ED:DB:95:09:74:C3:BA:9C:8B:AF:AE:AD:FC
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer:       /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial:       019C43596904BA4AFC4D226DA67BF89C604D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number:          0E10
Signing time:             Mon 09 Feb 2026 17:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:58 +0000
Files and hashes:         1: RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa (hash: qyOlC1NYVIRV04UnpCxjxHKBjKTFjIWJJFf105WAhVM=)
                          2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: CVnRTXYUJZNlykQOlXj7vt3D3ZQab6pIFiIZq/XSBe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:69:04:ba:4a:fc:4d:22:6d:a6:7b:f8:9c:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
        Validity
            Not Before: Feb  9 17:00:58 2026 GMT
            Not After : Feb 10 17:00:58 2026 GMT
        Subject: CN=8e3e36ee02ddd8eddb950974c3ba9c8bafaeadfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4a:3f:a2:95:2e:4f:58:7c:8f:6e:3f:b1:9b:
                    1d:be:3b:2b:dd:42:de:b3:0c:c6:71:6c:ed:03:b7:
                    e0:5f:8c:3c:d9:e9:b8:7b:29:ec:cd:e0:25:40:27:
                    a2:df:d3:fc:1f:5c:95:c1:3a:9e:c8:1b:b9:d6:76:
                    9e:95:ec:47:c3:09:13:c4:29:e2:50:88:b9:5c:1c:
                    85:bf:d0:d4:96:9f:69:81:00:1f:07:8f:5d:6d:c9:
                    1b:a1:0a:0c:96:19:6d:05:45:38:08:fd:28:1f:08:
                    63:27:9a:f7:12:88:13:2c:80:6b:01:db:9d:5c:c9:
                    87:c9:e3:9f:2a:34:2f:76:a2:fd:d9:e4:89:aa:87:
                    84:10:a0:cb:ae:37:6a:34:63:3c:43:5c:3b:94:c5:
                    6a:8b:65:88:b9:a4:f1:97:74:64:fd:4a:53:80:5a:
                    49:17:7c:34:e8:cb:40:16:80:a0:a3:e9:e8:d6:f2:
                    86:79:d0:31:d2:85:2d:1a:82:60:1b:b3:33:80:71:
                    89:37:09:45:0b:8f:ca:76:5f:2c:c9:59:33:89:2a:
                    52:2a:78:3a:46:a6:9a:40:8d:22:c5:c9:84:91:55:
                    88:cf:57:c9:6d:f9:7d:04:ad:a6:0d:7b:dd:9a:51:
                    3f:d3:58:e0:3f:7d:fd:63:7c:c1:d3:8f:f6:88:f6:
                    a6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:36:EE:02:DD:D8:ED:DB:95:09:74:C3:BA:9C:8B:AF:AE:AD:FC
            X509v3 Authority Key Identifier:
                keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:a4:8a:dd:ab:85:bc:88:12:2a:3c:b0:ca:f6:6d:03:4f:
         9d:17:bb:f9:e8:5f:b2:65:1f:65:3e:f0:01:60:c9:04:22:f1:
         67:dc:28:54:2d:52:e0:84:bf:80:3e:65:05:c9:1a:36:7e:c3:
         2a:8c:28:42:5b:f5:bd:5a:26:e1:54:34:f2:7f:b2:3f:34:0b:
         37:21:06:6d:03:2e:4e:c5:cb:8f:15:38:74:4f:c9:29:fd:e7:
         ff:04:82:94:49:4f:a3:6f:a0:ff:f7:f7:14:f9:c3:4a:1f:c9:
         a4:7b:21:29:79:ca:b2:05:26:6e:da:b5:28:81:c2:0b:2c:cd:
         f8:90:80:b1:55:9a:3e:04:52:d6:fd:b1:a1:94:09:5e:ed:11:
         68:23:72:26:e4:f8:2b:0a:ab:b7:06:32:bf:72:60:4b:19:9e:
         fe:7c:d7:0e:57:5d:dd:fa:d8:92:fe:34:f8:c8:77:3f:ee:5d:
         78:c1:ea:97:95:34:b9:7d:0f:d1:50:4c:a9:63:be:0f:36:04:
         5f:ce:5d:ec:3c:7b:dc:c2:8a:91:0a:f8:a2:c9:0d:63:23:87:
         1a:73:0d:7e:b4:70:03:d1:b8:48:cd:b7:e2:da:59:ae:f1:6d:
         cb:a7:d9:7f:9c:9b:bb:4b:3b:68:e7:9c:b4:b6:a5:6b:ee:82:
         bb:0e:c5:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWWkEukr8TSJtpnv4nGBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4
NDY3YzcwHhcNMjYwMjA5MTcwMDU4WhcNMjYwMjEwMTcwMDU4WjAzMTEwLwYDVQQD
Eyg4ZTNlMzZlZTAyZGRkOGVkZGI5NTA5NzRjM2JhOWM4YmFmYWVhZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20o/opUuT1h8j24/sZsdvjsr3ULe
swzGcWztA7fgX4w82em4eynszeAlQCei39P8H1yVwTqeyBu51naelexHwwkTxCni
UIi5XByFv9DUlp9pgQAfB49dbckboQoMlhltBUU4CP0oHwhjJ5r3EogTLIBrAdud
XMmHyeOfKjQvdqL92eSJqoeEEKDLrjdqNGM8Q1w7lMVqi2WIuaTxl3Rk/UpTgFpJ
F3w06MtAFoCgo+no1vKGedAx0oUtGoJgG7MzgHGJNwlFC4/Kdl8syVkziSpSKng6
RqaaQI0ixcmEkVWIz1fJbfl9BK2mDXvdmlE/01jgP339Y3zB04/2iPam3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4+Nu4C3djt25UJdMO6nIuvrq38MB8GA1UdIwQY
MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt
ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy
LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaqkit2r
hbyIEio8sMr2bQNPnRe7+ehfsmUfZT7wAWDJBCLxZ9woVC1S4IS/gD5lBckaNn7D
KowoQlv1vVom4VQ08n+yPzQLNyEGbQMuTsXLjxU4dE/JKf3n/wSClElPo2+g//f3
FPnDSh/JpHshKXnKsgUmbtq1KIHCCyzN+JCAsVWaPgRS1v2xoZQJXu0RaCNyJuT4
KwqrtwYyv3JgSxme/nzXDldd3frYkv40+Mh3P+5deMHql5U0uX0P0VBMqWO+DzYE
X85d7Dx73MKKkQr4oskNYyOHGnMNfrRwA9G4SM234tpZrvFty6fZf5ybu0s7aOec
tLala+6Cuw7FZA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:21 2026 by rpki-client