This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          v/Ut5YuS074X7a7IP6sqrwixpJsJdjvIo88OHHgH2gA=
Subject key identifier:   5A:86:C9:81:4A:2D:9B:C0:FB:2E:F0:21:6E:FF:C3:FA:A5:33:82:74
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       019C41D8FDDC69B35A20C27BB98874244156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          0E1A
Signing time:             Mon 09 Feb 2026 10:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:05 +0000
Files and hashes:         1: 28OK2J3AhlsvkP5KX5FGL4PLk4k.roa (hash: sLJmlSxlUCogmrsIa1DupMYliLkoDK/6nUhbL0KQoh8=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: CTwHJCcHBoXl+YapK7sJUAM/46yFJngRMitG8dkqYiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:fd:dc:69:b3:5a:20:c2:7b:b9:88:74:24:41:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Feb  9 10:01:05 2026 GMT
            Not After : Feb 10 10:01:05 2026 GMT
        Subject: CN=5a86c9814a2d9bc0fb2ef0216effc3faa5338274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:5f:6f:9c:27:50:82:df:5e:b6:3b:ec:29:
                    cb:6e:a6:32:78:25:ef:4e:f4:dc:56:f2:ee:a6:e4:
                    aa:27:03:4b:03:42:7c:44:61:4f:00:c4:cc:24:49:
                    91:24:69:da:8a:15:c1:29:eb:c9:30:2d:9b:34:06:
                    39:34:8d:e2:c8:50:71:9a:e6:14:47:c6:8c:1d:8c:
                    d6:33:4e:ae:23:4a:80:02:31:b9:24:a6:62:f0:dd:
                    f0:1c:0d:9e:dd:83:55:de:1b:6c:4d:98:da:2f:1b:
                    a8:da:a3:7c:c0:81:ec:b8:1a:8f:ea:8a:ac:73:63:
                    00:c9:43:9c:6f:1f:8d:15:5f:0d:0e:8c:70:2d:74:
                    41:5d:0d:82:df:80:dc:43:7a:74:c7:e0:dd:43:50:
                    9d:c8:79:a6:3c:a0:1e:ae:69:89:6c:09:1d:5e:45:
                    fc:ef:d8:9d:ed:d1:44:af:d4:6d:1d:74:9b:49:80:
                    9b:0d:da:aa:a9:c2:70:ae:4e:31:ca:9e:1d:a7:b0:
                    21:43:87:fe:7f:5b:99:a7:36:a3:fd:47:81:e2:69:
                    cc:f9:22:14:cc:6d:e7:ac:b5:a1:bb:11:42:76:29:
                    93:66:ed:1f:75:2e:45:18:22:da:da:2e:44:ff:11:
                    49:0a:ea:3a:20:c7:c9:0f:80:4b:cf:d5:dd:30:1c:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:86:C9:81:4A:2D:9B:C0:FB:2E:F0:21:6E:FF:C3:FA:A5:33:82:74
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:3b:3c:e3:d1:cb:b0:9c:98:0a:a1:73:f6:8e:de:ca:a3:
         94:9d:6b:47:95:41:ed:46:26:16:92:46:98:3c:18:7d:d8:96:
         d4:d2:34:6d:de:f9:1f:6b:75:77:03:e0:70:0f:5f:36:14:0c:
         a8:b6:0e:a6:9c:3a:36:2b:8b:0b:0c:9a:f4:b4:7c:04:75:7b:
         5b:5f:03:37:60:cc:69:7a:8b:68:ea:1e:68:28:f0:3f:7e:79:
         c6:fc:be:70:b7:21:59:31:cb:aa:27:73:e8:58:db:9a:38:56:
         32:e1:c8:8b:64:6c:38:7a:03:cb:b9:96:36:27:c3:7a:5d:63:
         43:0d:6e:eb:f5:f3:ca:19:87:f7:f8:91:db:49:55:78:2e:8c:
         61:f1:5e:51:61:3c:c4:cf:79:be:e8:f0:26:b4:14:f0:4c:9e:
         7e:9b:fd:a8:7e:33:6d:f1:7c:d3:0d:90:15:12:53:d3:fc:aa:
         80:5d:4b:7d:7b:ad:8a:3e:17:2a:be:73:9b:d5:95:a9:6d:7b:
         84:ef:9c:85:da:09:09:62:59:1c:24:2d:90:ec:0a:fe:f7:02:
         7c:ba:79:85:c6:3d:9c:b8:80:07:c9:5a:64:a5:41:a3:42:d7:
         75:13:b4:3e:36:7a:08:5d:db:ef:8d:89:03:b0:6f:c4:11:4c:
         67:e0:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:19 2026 by rpki-client