This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
File:                     Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json)
Hash identifier:          p9+XIEwXyICrpUA4IOfPJJjkTMEqLvUa5r9fiKHYmBs=
Subject key identifier:   90:B2:E1:52:EE:78:0B:E3:9A:05:F2:81:7E:9F:FC:9E:E1:8C:46:3D
Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07
Certificate issuer:       /CN=324ef76eb79074e69c73302ce4c2e0af47f45307
Certificate serial:       019C43C6A4C49FC6E4B2865131647B07E0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
Manifest number:          065A
Signing time:             Mon 09 Feb 2026 19:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:17 +0000
Files and hashes:         1: AdH5Pv_yZHR3VpVIKZ5T98qIBYQ.roa (hash: PaFAX4cYCUSQ989JdqFr+sKEgVGux2BKRdzjdwg/7DM=)
                          2: KwhaP0QeniVGjiTkn66bneMlJeY.roa (hash: iAwNlU5aGm8yC+EuRcL1q9j42YQqvBEOhpW7b2OSjjU=)
                          3: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: 94NnqKGYFgpmx8Or5676hGQCM2eXWwP2QTbqJOEaEos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a4:c4:9f:c6:e4:b2:86:51:31:64:7b:07:e0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307
        Validity
            Not Before: Feb  9 19:00:17 2026 GMT
            Not After : Feb 10 19:00:17 2026 GMT
        Subject: CN=90b2e152ee780be39a05f2817e9ffc9ee18c463d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:e5:3d:47:ea:97:2b:90:31:c3:6b:86:db:
                    cd:00:8e:d3:9c:8d:d9:23:0e:27:7a:40:93:5a:d0:
                    a4:ba:69:13:64:21:d5:7e:55:1c:51:9f:bc:d6:0e:
                    77:f6:f6:e6:1f:53:6d:16:fa:6a:fc:f7:a7:97:61:
                    ed:a3:a6:61:27:6b:4c:38:c3:23:3d:e3:28:b7:0d:
                    d6:e2:29:b7:d7:a7:2c:aa:7b:32:55:4f:7a:cd:a4:
                    35:56:85:69:6a:4d:9b:b9:82:de:73:81:91:32:4d:
                    41:5f:c6:55:b7:d4:31:c9:64:a1:07:c7:79:1c:ec:
                    ca:99:05:48:84:88:04:2a:15:78:6f:44:40:9c:75:
                    5f:fc:4e:51:a7:59:b8:12:1e:4f:33:b1:46:e5:a8:
                    34:43:08:7f:50:66:e4:e6:e4:18:b3:f2:86:92:a9:
                    5e:b1:41:31:04:27:1b:bf:a4:e5:d8:ee:20:c9:3a:
                    19:47:05:e8:cd:aa:1a:ac:00:6e:fd:b9:a4:ea:ab:
                    82:4e:29:3b:55:f5:78:78:ea:c4:8a:14:be:ff:e1:
                    5e:bb:3b:d8:b1:05:6d:26:fe:23:88:3b:1b:58:7d:
                    9c:a2:c6:74:23:0a:48:d1:63:93:f8:dc:94:d9:8f:
                    db:bb:0d:93:16:4d:8a:22:3c:e8:1d:5f:7a:28:56:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B2:E1:52:EE:78:0B:E3:9A:05:F2:81:7E:9F:FC:9E:E1:8C:46:3D
            X509v3 Authority Key Identifier:
                keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:96:bb:55:b6:fd:d0:63:35:13:a7:af:5f:4c:50:8b:34:37:
         dc:ee:4f:a7:73:be:79:93:94:a5:57:a1:d4:dc:d0:5a:50:93:
         70:52:d6:fe:dc:8f:f0:cc:bf:74:6a:a7:e0:7c:aa:f0:bf:01:
         28:7d:55:d0:e3:3c:d3:b2:a2:ab:e3:0c:32:56:6d:81:e7:00:
         9e:c9:ce:6f:d1:a0:68:0c:49:be:ce:b6:e0:a2:d9:d3:27:33:
         e5:38:08:93:26:e5:38:f8:2a:aa:f3:22:0e:77:d5:2b:b4:ad:
         c3:e4:cf:11:33:82:09:7d:24:ce:0d:e6:c7:2a:27:dc:3c:ff:
         61:89:67:19:af:94:ec:6e:77:f3:73:11:9c:4a:85:0f:08:9e:
         a1:a7:b8:01:cd:ed:b7:58:dd:e1:e1:86:31:f6:6f:c8:9b:04:
         0f:f6:d0:f5:96:50:c5:f4:04:06:ad:25:71:3e:99:cc:56:92:
         e9:fc:67:35:42:5e:a9:09:cc:5e:bd:a6:d9:e2:4a:a5:8d:65:
         cb:9a:49:17:c9:b4:29:9c:3d:39:c9:cf:aa:95:4a:b8:7a:a7:
         c6:a1:09:c9:d0:63:2e:9e:e4:92:06:62:1c:76:d4:c2:17:0f:
         87:84:6a:08:fe:72:68:3a:6d:e3:ae:4a:20:49:fe:90:f5:14:
         72:09:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:03:22 2026 by rpki-client