This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File:                     1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier:          gbE64aMtTA/SASABNrHHzMOugV4ed2dmjIoRcLw77tQ=
Subject key identifier:   D4:26:DF:24:4D:BC:81:E2:84:A9:06:AB:E7:EB:CA:90:73:EA:50:49
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer:       /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial:       019C4322ABD6B767FA1D7201DDB48BECC28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number:          1418
Signing time:             Mon 09 Feb 2026 16:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:11 +0000
Files and hashes:         1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: 6XQaveAuFE22MTFMgi7ToPuawKelYWXpYEXlY/jYSww=)
                          2: oFHCaQPKmNFnK-xjaGQZIHmGs-A.roa (hash: J7JRkb0A+kfNdSsR+CoYK/2IStJi66/isOQA2F1ezCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ab:d6:b7:67:fa:1d:72:01:dd:b4:8b:ec:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
        Validity
            Not Before: Feb  9 16:01:11 2026 GMT
            Not After : Feb 10 16:01:11 2026 GMT
        Subject: CN=d426df244dbc81e284a906abe7ebca9073ea5049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:bf:11:44:24:47:e4:3f:cf:da:8a:dd:8e:
                    07:03:93:73:33:8d:fc:bc:cd:e7:6c:1a:1c:a5:7d:
                    3a:cc:83:85:eb:6c:da:91:9b:8f:90:d7:fb:5b:1f:
                    63:73:19:58:4c:c2:15:63:67:1c:4b:79:2a:c9:6f:
                    09:fa:c8:eb:92:9a:b2:a1:7d:8f:77:59:64:06:35:
                    3d:a2:22:b1:1f:8b:48:ce:f7:34:5c:d8:d8:13:87:
                    5d:2d:11:6a:6b:49:b3:fd:8f:84:44:54:8a:06:7a:
                    42:f4:cb:32:c3:dd:01:bc:85:4a:70:c2:93:ff:c5:
                    75:0d:ae:7a:8a:56:64:3c:75:21:57:bf:20:12:5a:
                    8e:20:06:cc:91:e4:41:49:f2:6c:fc:f7:b2:b3:ec:
                    93:66:7c:31:89:f4:31:92:56:04:35:ec:89:e3:9c:
                    ed:2e:c6:a2:6c:06:8f:31:46:3e:2e:db:54:0c:b5:
                    4e:b4:2c:0f:54:96:62:e1:f2:e5:b2:7a:c2:28:fd:
                    26:79:86:13:78:45:1b:8e:0e:ac:54:e5:c9:9f:85:
                    cf:01:7b:87:98:1f:c9:04:4f:fd:10:e3:1f:cf:ba:
                    ce:a6:3e:33:54:85:e3:3d:a5:15:fb:07:96:11:57:
                    7d:13:aa:bb:87:a7:9d:ed:0c:30:08:79:59:ce:ee:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:DF:24:4D:BC:81:E2:84:A9:06:AB:E7:EB:CA:90:73:EA:50:49
            X509v3 Authority Key Identifier:
                keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:79:1a:8e:fa:b4:64:ec:0c:d7:d8:91:fe:24:c8:46:48:cd:
         ac:f0:b6:bc:32:b0:92:fe:bf:a4:98:fb:f6:61:66:11:b5:c9:
         3c:1c:08:8b:7d:c3:c7:89:ee:8b:33:20:25:d9:cd:77:f5:c6:
         be:a4:0a:d7:5a:f6:ab:6b:63:ab:11:1d:94:ba:0e:be:77:5f:
         65:46:36:1a:db:ce:60:06:f3:a7:0f:e7:62:38:75:48:74:77:
         9a:a0:24:c7:b9:3a:2e:e0:4d:d0:3d:03:47:69:ee:e0:1e:bf:
         b8:25:0b:06:d8:a7:34:d2:67:b4:df:4d:59:d2:ca:04:4c:a8:
         e6:62:d6:09:cd:ba:4d:35:34:1c:a8:62:aa:3a:50:77:b7:41:
         dd:a3:7f:62:48:4c:b1:97:1e:e5:d8:29:94:80:11:8e:32:87:
         86:35:fa:ea:a6:e6:57:63:28:10:4d:e5:0e:23:75:bc:88:83:
         13:b8:b1:9a:c2:c8:94:12:dd:ad:63:d9:a2:a1:e7:a4:18:29:
         6a:53:1b:41:1b:5e:3a:17:21:f7:43:76:9f:96:4f:b5:5f:d9:
         ee:73:20:93:e0:3d:44:27:45:e5:b5:4a:84:3f:b5:56:fc:7d:
         1d:e7:df:d1:10:24:14:2c:3b:89:cb:7d:43:05:ab:be:0a:bc:
         ae:bd:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:41 2026 by rpki-client