This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File:                     skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier:          2dfA7yjnqIqdqTOXcc4ij3gbKxYg7GZl24E2VQQJ3DI=
Subject key identifier:   03:9D:8B:EE:D9:4C:A2:AB:40:14:E3:A6:2A:A8:F6:1D:C8:56:6D:F8
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer:       /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial:       019C43FE3FC6594A60C579CED12E0F0050D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number:          0CF5
Signing time:             Mon 09 Feb 2026 20:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:01 +0000
Files and hashes:         1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
                          2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: pq9iNky+ozDIUD9deHAhiTEuhQyyaHX5gEJABnc3KwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:3f:c6:59:4a:60:c5:79:ce:d1:2e:0f:00:50:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
        Validity
            Not Before: Feb  9 20:01:01 2026 GMT
            Not After : Feb 10 20:01:01 2026 GMT
        Subject: CN=039d8beed94ca2ab4014e3a62aa8f61dc8566df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:3a:de:2d:2c:37:d9:57:31:7b:99:ca:07:
                    22:72:2a:a4:bb:22:24:40:e0:9c:b8:75:64:86:86:
                    07:9c:c3:68:27:9d:05:73:5b:dc:4c:49:89:58:51:
                    87:88:ae:10:be:ab:b5:a5:b9:6b:11:5b:40:68:3c:
                    f8:30:13:1a:c3:92:b7:ae:a8:37:ee:63:fe:bf:67:
                    9b:4e:c9:57:91:58:59:25:00:44:c9:7e:93:5e:b7:
                    d6:77:95:67:0f:94:a6:39:7f:8e:5a:0c:d8:c4:27:
                    f6:e0:f4:40:74:ea:35:9e:49:7a:09:73:9a:23:c5:
                    06:2c:f2:bc:b4:ef:27:74:ca:c5:3f:43:66:37:46:
                    7b:d8:f1:fb:5a:dd:26:89:3e:95:a6:83:95:5c:62:
                    69:8f:29:10:76:34:4a:04:b0:60:24:30:6b:54:c5:
                    04:c4:08:f1:2b:da:66:21:da:23:13:6e:64:a2:ec:
                    6a:0d:45:27:d2:23:5d:23:9d:19:eb:13:73:65:df:
                    71:96:1a:ff:98:bf:54:7d:6d:84:e6:c7:12:67:6a:
                    f4:cf:b4:da:4d:42:c6:18:0b:52:14:86:5e:e0:10:
                    6e:5a:91:e5:4d:93:f4:46:70:62:a8:4c:68:14:5f:
                    27:04:bb:58:de:03:93:fd:c2:4e:99:9b:27:6e:f5:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:8B:EE:D9:4C:A2:AB:40:14:E3:A6:2A:A8:F6:1D:C8:56:6D:F8
            X509v3 Authority Key Identifier:
                keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:5e:5e:f9:20:09:e3:b9:4d:8f:4d:d5:83:7a:4b:af:6d:
         95:d6:1d:f8:23:dc:12:c8:4f:d6:08:fb:65:13:65:61:71:0c:
         ca:82:03:cf:60:17:92:58:6a:4a:01:5e:b2:8a:c7:da:23:f2:
         b0:d4:c5:b4:09:f0:3a:96:1b:ae:6b:ab:8c:e7:1f:49:b3:31:
         ce:d6:f5:10:20:29:90:ab:9e:54:87:fd:4b:96:e5:88:83:68:
         43:ce:4b:80:43:ac:fe:65:60:19:1e:80:27:78:fb:2f:bd:e9:
         4f:c6:f2:f7:e2:b7:b7:1d:2d:13:5e:8c:47:ff:26:d6:37:12:
         48:cf:11:bb:df:5f:6e:ae:20:04:5c:c4:54:6a:e1:8d:a2:1e:
         14:1e:74:25:54:e2:29:4e:86:ef:44:82:20:73:87:22:56:5a:
         41:ca:17:88:b2:0f:e7:d4:db:be:d2:1d:5c:c7:8c:49:f0:be:
         fa:9c:b7:26:3a:dd:c7:8e:9a:54:6e:57:1f:e2:97:7d:3b:0b:
         ae:a8:70:88:d4:bc:1a:5e:47:7a:c4:8b:45:23:25:7c:c0:62:
         d3:65:d3:18:d7:d2:75:1c:c7:9f:dd:5d:6f:73:2d:8b:1b:fc:
         91:3e:70:13:30:10:1d:99:97:33:9a:a3:fb:7e:48:1b:56:5d:
         e2:ad:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:17 2026 by rpki-client