This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          rhgsmFRC6w8dI/aUav34n8dOsEw7vq6uyysFspWfK/I=
Subject key identifier:   25:8A:CA:F0:F0:E2:D5:88:88:63:6D:89:88:AF:19:75:2F:D8:AC:59
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       019BF42BB5D356ADF1B2CE787DE03D34A797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0E01
Signing time:             Sun 25 Jan 2026 08:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:03 +0000
Files and hashes:         1: 0_S3LGHLWDp1h8fEUl2LKrXeEIw.roa (hash: EPbNdShM4Uw0lIhiy3D/2WyOBzLdRNaJX6sNcM+CIi4=)
                          2: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (hash: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM=)
                          3: oe9_BUEcNMQXUPeMx0Pcsnv2N20.roa (hash: 4+asMob/DRGngq6GAVzO2x+uYasSdWuu4BCpYVlKFoo=)
                          4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: 63xV6QKu9K4lfoJUxIlUEpshez0Gyl9QFcEL/k2nglY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:b5:d3:56:ad:f1:b2:ce:78:7d:e0:3d:34:a7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Jan 25 08:01:03 2026 GMT
            Not After : Jan 26 08:01:03 2026 GMT
        Subject: CN=258acaf0f0e2d58888636d8988af19752fd8ac59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:2c:8f:1a:bd:50:0a:bc:4f:55:15:f9:47:
                    31:f1:da:fa:7f:c6:4c:aa:b8:d9:c8:2a:29:ae:c0:
                    8a:b4:e7:79:7e:5e:9f:30:3b:e3:11:d8:dc:91:8f:
                    54:a3:e5:46:35:b9:3b:42:d1:05:66:7f:e5:63:9d:
                    fc:e9:dc:75:c0:81:34:65:ac:98:f1:04:42:e4:82:
                    8e:d0:5e:d8:50:d5:f6:c3:c4:0f:01:1d:3e:76:7d:
                    92:ef:df:b3:a6:f8:ef:2e:db:8e:20:d8:92:b4:39:
                    a8:ed:8c:56:db:4a:cc:4f:67:f2:29:c1:8d:60:6a:
                    df:9e:bb:3d:4c:4a:2d:0c:cf:61:b8:43:c5:45:b2:
                    ae:62:d1:16:73:7e:14:a8:7a:6f:d0:0d:86:7a:87:
                    55:65:17:db:4c:ef:78:1f:e1:95:ed:b1:49:dd:27:
                    19:b0:7f:40:32:9c:83:29:4d:3e:2d:c2:be:5a:aa:
                    81:fc:12:90:f0:35:6f:88:5b:99:ee:c2:81:a9:dd:
                    da:eb:ec:5a:fb:0c:f3:ca:cb:dd:8e:7d:37:81:b4:
                    3d:28:96:54:0c:e9:75:39:0d:bc:ea:90:fc:0b:72:
                    5a:e7:96:d2:59:5f:bd:8a:05:2f:1b:0e:fb:93:be:
                    c7:fb:e7:6d:23:85:a6:a7:2d:63:ce:3b:9a:c3:11:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8A:CA:F0:F0:E2:D5:88:88:63:6D:89:88:AF:19:75:2F:D8:AC:59
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:81:de:09:f5:9b:eb:c0:ef:d1:28:53:63:7a:59:61:0f:
         86:9d:bd:b8:53:78:89:92:6a:31:09:68:c8:99:a7:c8:27:0d:
         06:bc:58:a2:ee:ac:24:96:43:5a:09:3b:af:13:11:81:ee:3f:
         a5:e6:de:7c:56:98:3f:da:36:a4:76:2e:f9:6c:da:0b:20:94:
         05:d2:38:27:0e:c1:c3:6f:ea:57:59:45:8e:a7:72:d2:2a:4b:
         1b:40:b3:da:58:a2:a2:19:6f:6c:1e:92:84:1a:af:2b:0e:42:
         52:1e:31:6e:fa:6a:d2:21:5e:02:89:49:3e:78:68:17:2b:08:
         3d:df:8d:8e:27:65:aa:1e:e0:3e:f5:b5:c4:28:ce:85:09:55:
         c4:e0:a8:4f:c0:83:aa:50:58:aa:4a:9d:32:48:5d:16:b5:4f:
         15:f0:95:82:f0:f6:51:63:2f:c7:0f:3a:89:9e:c5:63:fc:ea:
         16:d5:80:98:45:87:f1:12:bd:bc:5b:45:95:73:61:49:55:a3:
         02:4c:19:6d:cd:06:ef:bf:f7:2f:7a:b2:f8:f3:33:87:9e:63:
         36:79:99:9c:9a:9c:d7:d9:cd:45:e0:8b:58:30:d2:6f:76:05:
         c6:5d:30:91:2a:9f:6e:4a:5b:07:e5:43:ee:f2:72:1d:b2:2c:
         b6:6e:58:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:18 2026 by rpki-client