This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          TMzmlLaOU/0a5rJVVQoL/cFkl/k7I+1x9u1NjiSYK1Q=
Subject key identifier:   16:D9:38:F1:DD:C0:29:77:E6:27:EF:0B:5E:02:D5:08:7A:BE:0C:AA
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       019C4659D28F43CFB0B0DB4ECFCD6F55C6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          04E6
Signing time:             Tue 10 Feb 2026 07:00:17 +0000
Manifest this update:     Tue 10 Feb 2026 07:00:17 +0000
Manifest next update:     Wed 11 Feb 2026 07:00:17 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: M8C/ck5PVu2zY2rA6JTAi0Hzd0uHhxlP4VzRQPDNi+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:59:d2:8f:43:cf:b0:b0:db:4e:cf:cd:6f:55:c6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Feb 10 07:00:17 2026 GMT
            Not After : Feb 11 07:00:17 2026 GMT
        Subject: CN=16d938f1ddc02977e627ef0b5e02d5087abe0caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:fa:b4:fe:c7:f7:60:0a:ea:60:6c:1b:0c:
                    7f:1b:6c:37:1f:c3:a8:12:e1:f0:fc:ee:b4:b1:8e:
                    a1:5b:35:c4:77:05:9c:1d:cc:a1:3f:6e:b4:ce:47:
                    57:88:61:ef:da:7c:13:50:ec:3e:a5:69:de:12:9b:
                    7f:37:ad:5f:a5:3d:b6:86:79:16:bc:16:9a:b9:0b:
                    99:a9:bb:9f:f1:ac:c0:31:d2:3b:62:76:b8:c6:cd:
                    30:16:61:95:af:c3:13:96:53:80:a6:d5:2f:a3:d1:
                    2c:40:f9:77:ae:b2:e0:18:e5:95:21:88:57:c3:f0:
                    88:93:43:34:75:4e:ce:f4:67:bb:3a:d4:8b:7f:65:
                    99:30:0c:b2:ca:04:7e:87:47:ad:6b:d3:4e:b6:f7:
                    f7:ae:d0:4c:1c:67:da:91:ff:6d:7e:dc:7d:9b:a8:
                    78:07:d6:28:f1:db:09:12:87:fe:3e:38:69:34:b0:
                    73:f6:27:af:28:88:ec:fe:87:45:61:8a:cc:da:e9:
                    d4:8e:e6:cc:d2:af:ac:b3:ef:74:d0:bf:a6:de:46:
                    3f:09:3e:d0:4c:90:ff:42:d2:87:92:21:bb:cb:cd:
                    80:cb:35:a1:7e:6f:66:15:ac:e9:92:89:84:1f:83:
                    b7:55:c4:35:f9:3e:65:59:69:b8:d1:64:c8:0a:4c:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:38:F1:DD:C0:29:77:E6:27:EF:0B:5E:02:D5:08:7A:BE:0C:AA
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:87:e0:f9:aa:31:46:0d:71:bd:35:be:86:9c:30:6d:d6:20:
         5b:b0:a0:d7:b9:c9:03:6e:ff:50:1f:6a:3e:1f:3d:28:9f:b0:
         fa:da:de:a3:6e:cd:8a:02:4e:3f:8d:b9:1a:0b:36:5a:57:f3:
         cc:15:00:9b:c7:41:f1:58:08:b8:c3:4d:2b:b8:a9:8c:0b:cd:
         ef:75:58:74:90:45:6a:d7:8a:59:13:ba:7f:ab:61:00:ec:93:
         f9:ad:c4:42:f2:2a:e8:45:88:b6:b1:9d:2a:35:67:03:c0:4f:
         dc:c0:51:5d:d6:75:12:7f:ae:69:bb:bd:88:a9:ca:4b:17:4c:
         89:7e:63:07:ae:4d:94:88:42:c4:29:c7:7a:d2:89:da:2b:bf:
         16:cc:00:f6:c9:1f:b2:5d:88:98:d0:0a:c0:f0:75:20:c6:40:
         93:15:d2:a1:18:23:5e:46:29:24:0c:58:f2:25:aa:b4:24:17:
         57:c5:b1:33:dc:ca:04:8b:d6:b4:35:f1:53:5b:40:c6:33:f2:
         26:81:50:87:e7:d8:c9:bc:83:15:1a:e4:2f:4a:a2:0b:24:e7:
         67:96:42:e1:58:c9:34:c1:6c:a4:d7:96:dd:b2:f9:f7:3a:c1:
         27:7c:e8:c8:3b:06:6d:5c:34:b2:5d:61:36:f8:a0:dd:cf:79:
         d7:f7:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:30:57 2026 by rpki-client