This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File:                     rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier:          S3M+OP24h+d+L8/9rm7jalNG1CWBxBleMRZAuHpxTZk=
Subject key identifier:   C9:9C:F4:A5:57:56:54:E2:12:D1:4F:5B:41:AF:34:EA:93:06:1E:AE
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer:       /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial:       019C427DE42CD95B7263BFEF53FDD5375C6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number:          1247
Signing time:             Mon 09 Feb 2026 13:01:12 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:12 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:12 +0000
Files and hashes:         1: qwC2Qa61-K92mibT4xQ6QPDFeGk.roa (hash: UFLL3aT7fmcKZdAjIGdfo8UCBZ0v+aHyEhVXBSuvgE0=)
                          2: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: 3YQlDaqH9NGFdupaTqEdQlZfdb+VN6xi75/XdsYgoVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:e4:2c:d9:5b:72:63:bf:ef:53:fd:d5:37:5c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
        Validity
            Not Before: Feb  9 13:01:12 2026 GMT
            Not After : Feb 10 13:01:12 2026 GMT
        Subject: CN=c99cf4a5575654e212d14f5b41af34ea93061eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:a9:43:18:00:82:d1:20:df:a6:b0:91:54:
                    50:fe:99:5d:f2:0a:b2:23:5f:f1:2c:3a:22:d4:6e:
                    69:8c:25:a1:32:23:00:b8:74:13:89:5c:ec:51:96:
                    3b:b2:79:23:dd:e7:70:cc:77:a9:b1:64:9a:bc:6d:
                    77:65:fd:36:c8:73:f1:b8:76:de:5f:34:be:37:78:
                    c1:a7:8f:99:bc:f6:28:ef:e7:e5:04:de:39:f5:7a:
                    b3:0f:27:81:a1:30:16:95:ea:4a:e2:f1:2b:2c:1e:
                    6d:d7:c2:6e:1a:90:2a:3d:39:1c:41:7f:3b:c5:02:
                    17:fa:15:7a:ac:96:31:ad:69:c7:6e:9e:5a:bd:ad:
                    80:b2:8f:d1:16:31:e0:1b:31:d1:b2:79:13:e4:76:
                    7a:a7:90:bc:90:16:32:61:2a:76:04:80:81:7b:c5:
                    d9:2c:b1:86:de:34:e8:02:aa:50:d2:d6:c1:dc:12:
                    5b:d6:f5:5f:5f:43:1f:a6:ec:39:8b:f2:2e:68:70:
                    64:2d:bc:17:53:0f:53:dc:64:74:c3:17:4c:66:35:
                    37:7b:62:e0:17:6d:a5:b6:d0:e3:b5:2d:9a:b5:8e:
                    40:33:dc:27:f1:b6:4d:82:1f:0c:fd:ce:33:c3:9e:
                    9d:3f:02:ce:c9:0c:f5:3d:4e:72:6d:da:56:67:88:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:F4:A5:57:56:54:E2:12:D1:4F:5B:41:AF:34:EA:93:06:1E:AE
            X509v3 Authority Key Identifier:
                keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:83:88:64:27:b9:2e:bb:d2:34:26:78:02:a1:b0:01:c0:4c:
         a6:9b:53:8d:2e:83:e6:9d:46:bf:b3:a6:1c:fc:3a:dd:99:d1:
         a1:13:24:ba:12:aa:99:8a:7d:11:a5:d7:fa:25:5f:d1:c7:06:
         db:4e:98:64:36:aa:ed:53:94:38:7d:97:10:6e:45:d5:9b:5c:
         ff:91:21:07:ac:4d:1f:31:91:32:44:4f:f7:73:15:d8:8a:d6:
         3e:72:9b:20:71:2c:7a:72:2e:38:3c:f2:5e:aa:87:68:a3:69:
         71:21:2c:52:b9:3a:72:2f:67:f2:b6:8a:f7:be:f5:82:b0:83:
         b7:62:ec:92:21:e2:89:8f:55:1e:47:cd:80:96:1c:43:96:04:
         62:b5:30:f5:8d:8c:7d:ce:6f:93:c1:a7:22:bc:c3:cc:22:5c:
         e4:71:26:0a:43:6b:f8:fe:1f:02:f8:46:2c:fe:c2:65:d1:b8:
         a6:99:75:79:be:1f:54:76:86:82:71:16:0b:bc:e1:db:ff:de:
         12:f2:fc:f3:ba:a5:98:3f:1e:bf:47:63:62:df:96:7f:25:e2:
         19:ae:44:22:b5:32:0d:5b:05:85:9a:dc:1b:d2:3b:7d:56:da:
         a9:18:79:16:ac:8c:ef:9a:2c:0c:fe:f8:ea:3a:01:98:b1:e7:
         1f:ba:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:56 2026 by rpki-client