This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File:                     Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier:          Hf92+nfw1y+FYDjdkfbLwZ8fPaPM0ftKNa0Xm2fKhVM=
Subject key identifier:   9D:83:57:24:17:13:5F:5D:72:87:6B:BF:8F:6A:07:28:E9:A9:43:4A
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer:       /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial:       019C438FD0AEB69DA64601392C209DF1A550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 18:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:24 +0000
Files and hashes:         1: SyWTiReTZTnBDg5JyysBSj2Ylo4.roa (hash: fZ2UZHiHpOuYHZzSoYWZDivGjx4cM7k5nd9px5ySpG0=)
                          2: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: PVZ9J3bkHRxNZLwkpIMYxm/oQZX2ftZnAMsFSwNuYmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:d0:ae:b6:9d:a6:46:01:39:2c:20:9d:f1:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
        Validity
            Not Before: Feb  9 18:00:24 2026 GMT
            Not After : Feb 10 18:00:24 2026 GMT
        Subject: CN=9d83572417135f5d72876bbf8f6a0728e9a9434a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:25:28:2c:4e:9c:28:55:72:b4:66:d0:79:
                    41:a4:f7:24:32:79:c8:14:39:58:62:09:d5:49:92:
                    9d:e2:4e:9d:59:10:a7:b3:7d:1a:92:b8:8b:3e:84:
                    6f:a2:e1:80:33:2a:c5:ce:50:03:2c:c4:85:22:39:
                    90:42:31:0b:a2:99:d5:5d:fb:c0:e6:db:d3:3f:22:
                    fa:c0:47:53:ea:bb:50:8e:9f:2a:84:b5:c4:7f:d7:
                    49:af:8b:bb:c1:d2:05:d3:a3:65:47:69:e8:b1:10:
                    19:31:4e:8c:f8:44:b0:42:bd:8f:47:7b:1d:cf:b3:
                    10:39:ce:0c:4f:88:37:c4:9e:68:49:f5:8d:99:8c:
                    31:63:9f:14:b3:fe:26:b6:c2:2b:bb:bc:fa:54:f0:
                    e9:9b:d4:e9:b1:3a:b3:f4:4e:41:d4:70:8b:d3:3a:
                    91:60:05:e3:20:40:fd:1d:91:b3:4a:38:2a:b7:11:
                    3c:75:e3:66:bf:ab:a8:24:9d:ca:82:f6:7d:9e:d8:
                    b4:ee:1c:10:e6:4d:42:e4:08:7d:06:78:10:95:d0:
                    c6:8f:df:c6:b1:0f:cb:6c:d5:4f:df:db:2c:89:c7:
                    e2:ce:35:7f:5b:7d:1f:1d:dd:ba:a5:f9:af:56:79:
                    f2:1a:37:c4:b4:b5:0c:61:41:20:ce:23:fd:bb:0c:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:83:57:24:17:13:5F:5D:72:87:6B:BF:8F:6A:07:28:E9:A9:43:4A
            X509v3 Authority Key Identifier:
                keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:4f:58:31:be:d3:44:41:38:0d:b6:f8:83:cd:ec:85:6e:
         2f:ab:99:08:ee:c4:b2:b6:2c:b0:e4:ff:3a:70:42:7f:fe:ac:
         15:e8:c6:53:24:0d:40:7c:a5:8b:1b:b1:25:9e:e4:27:e0:f3:
         f8:b9:66:3b:33:55:2d:67:4f:8d:b2:7c:5e:ef:f1:3e:9a:ff:
         6c:8e:01:99:90:44:4a:4d:8e:8b:a9:d4:c8:4e:4e:0a:e0:61:
         aa:df:24:ba:8b:77:a8:ad:4b:43:9e:33:40:4c:51:f5:61:96:
         a0:f4:27:00:fd:42:3a:a6:7f:a0:10:f8:49:52:43:0c:30:81:
         d1:22:5b:37:5f:20:94:c9:21:01:51:85:95:d8:ed:d5:a4:6e:
         fd:e0:a2:83:28:d9:cf:66:a5:8d:6c:54:ae:a5:81:6d:cd:34:
         a3:16:e0:ea:a0:06:f7:e7:6b:a2:02:6f:db:5e:19:b5:84:17:
         44:96:b8:a1:0d:66:3d:a8:0b:bd:e4:fa:84:d3:f3:e0:fd:0e:
         16:6c:a2:12:a1:4f:dc:d4:b0:23:3b:e3:15:97:5b:b8:6a:e6:
         59:22:e0:ea:f2:9e:fc:f9:e8:4b:16:1d:22:3c:3d:57:7b:04:
         e9:79:59:3b:e6:c0:15:ec:78:b6:7d:2e:5b:25:81:d8:36:6a:
         0a:5c:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:57 2026 by rpki-client