This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File:                     rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier:          9XPEJ/NLxdY2j6MqsYpq3QDAbN2RrcFheZkgY70EbbA=
Subject key identifier:   52:A0:51:7C:34:67:A9:A8:A1:CC:EE:E7:3D:E6:FF:2D:F3:EC:50:E7
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer:       /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial:       019C43590C148AD7AE19829C06533B06F511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number:          1873
Signing time:             Mon 09 Feb 2026 17:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:35 +0000
Files and hashes:         1: 0MbPthP00y-BiYvrfmoPPDH6ShE.roa (hash: IRw4Yiq6W1chqGkvly7drfGE0he8NRBMaSdVXp7MZQM=)
                          2: 7YDj2osTpRnVn99l70Wog76q6vI.roa (hash: utHoelZ3lfKUNOVIwCjLj1b17Ser9T/dDb+erDhLors=)
                          3: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
                          4: K0LCintwvktT2xr3WU0PC5bkRX8.roa (hash: N3UQClUm1/+BJT1T8LUFkxs0KYW64GDD7sJYC/KMkyc=)
                          5: MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa (hash: xHNn6q9PYRqeQK2NR9l8QrkTBmZNq1GFHSPhCABTUdQ=)
                          6: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
                          7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: qjyJLCaC4itqlTy79Ljfw6h0uG0Fas+mCP8id+IeJ70=)
                          8: wgpETV0ctXLiN05hA1XO5_ljpco.roa (hash: 7QpaMI3uEfsgVOxk023whBWoxJwTMZppePWCn+pGin0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:0c:14:8a:d7:ae:19:82:9c:06:53:3b:06:f5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
        Validity
            Not Before: Feb  9 17:00:35 2026 GMT
            Not After : Feb 10 17:00:35 2026 GMT
        Subject: CN=52a0517c3467a9a8a1cceee73de6ff2df3ec50e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:0b:46:30:94:08:6e:f3:2e:ea:b3:86:c3:
                    2a:5a:cd:00:ea:96:6c:38:72:fc:43:36:e5:55:79:
                    e5:df:3b:1a:55:c9:5e:9e:6d:18:f7:6c:d6:f3:31:
                    e8:de:26:5a:c7:43:76:c2:de:78:ef:2f:b3:6f:e6:
                    fe:db:59:1b:c8:d3:d5:f4:13:15:30:09:dd:7f:03:
                    89:67:32:d0:e9:31:63:a6:c1:64:95:dc:3e:22:c5:
                    c9:b9:29:bb:a1:55:7d:93:00:94:c0:b1:05:b8:8b:
                    bb:fe:af:0d:16:ff:37:44:b5:54:9d:7f:a7:c3:0a:
                    f9:b7:db:d5:23:ae:35:6c:07:b8:ad:20:fc:d8:89:
                    5f:6f:26:ed:e5:d1:4c:d8:8f:10:99:c1:2e:e1:9a:
                    05:64:97:3a:f5:d9:c8:88:ba:ba:e1:b0:49:15:d6:
                    55:0c:63:a8:16:a9:60:b6:bc:3f:c8:5b:bb:91:08:
                    3c:22:3e:14:e5:87:d1:22:d7:67:3d:2f:68:f9:0c:
                    8b:5c:9e:44:e2:f3:a2:d2:0c:2e:0d:b5:f7:a3:9d:
                    49:f3:f0:7c:a3:33:7b:3a:ef:b0:40:a9:b9:77:f8:
                    a7:7d:91:e7:ea:c1:ec:d5:11:5e:16:04:20:20:e6:
                    29:b3:b9:1e:d2:4f:42:70:a6:58:e8:8c:ff:37:56:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:51:7C:34:67:A9:A8:A1:CC:EE:E7:3D:E6:FF:2D:F3:EC:50:E7
            X509v3 Authority Key Identifier:
                keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:94:a9:4b:f9:57:b5:3b:33:f6:b8:84:f4:e3:54:19:eb:
         61:00:d3:20:c2:da:02:0e:bb:7e:2a:fb:f9:11:a1:3b:87:12:
         45:10:19:b5:64:37:c0:a7:47:a2:65:f7:ac:02:58:72:9b:b7:
         08:f1:b0:98:46:bc:f8:46:66:78:21:4e:c0:ec:49:85:8b:ab:
         48:a0:64:f6:f6:28:ed:45:2a:b1:db:f2:f9:58:2c:c3:3e:6c:
         8b:59:b5:b8:ef:17:29:db:52:55:c8:0b:f6:a8:a5:91:f3:a6:
         f0:de:2d:90:15:2c:12:a3:ee:f1:04:a5:61:b6:e2:06:80:7d:
         56:0f:72:4b:e1:0b:4f:33:5c:b6:16:bf:73:12:34:48:ec:1c:
         ce:58:0a:bb:61:6b:d8:10:c5:f7:b6:a3:cd:59:e7:59:c5:97:
         12:45:21:56:90:e5:5e:65:52:bc:9a:19:96:87:7f:7c:be:0a:
         c5:e3:73:fd:bb:3c:b8:25:c1:ec:dd:ba:19:ad:2d:17:c8:5e:
         93:63:e1:e1:57:f8:46:8f:ce:d8:01:9b:c1:f2:63:ef:c6:aa:
         80:2c:f7:a7:2d:1f:28:b8:05:31:de:df:5a:04:20:4b:59:99:
         54:9f:dd:ed:ef:5b:32:8d:4d:9d:87:eb:2d:43:7b:ee:18:f0:
         30:dc:1b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWQwUiteuGYKcBlM7BvURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYwMjA5MTcwMDM1WhcNMjYwMjEwMTcwMDM1WjAzMTEwLwYDVQQD
Eyg1MmEwNTE3YzM0NjdhOWE4YTFjY2VlZTczZGU2ZmYyZGYzZWM1MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2sLRjCUCG7zLuqzhsMqWs0A6pZs
OHL8QzblVXnl3zsaVclenm0Y92zW8zHo3iZax0N2wt547y+zb+b+21kbyNPV9BMV
MAndfwOJZzLQ6TFjpsFkldw+IsXJuSm7oVV9kwCUwLEFuIu7/q8NFv83RLVUnX+n
wwr5t9vVI641bAe4rSD82Ilfbybt5dFM2I8QmcEu4ZoFZJc69dnIiLq64bBJFdZV
DGOoFqlgtrw/yFu7kQg8Ij4U5YfRItdnPS9o+QyLXJ5E4vOi0gwuDbX3o51J8/B8
ozN7Ou+wQKm5d/infZHn6sHs1RFeFgQgIOYps7ke0k9CcKZY6Iz/N1YdSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKgUXw0Z6mooczu5z3m/y3z7FDnMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5GUqUv5
V7U7M/a4hPTjVBnrYQDTIMLaAg67fir7+RGhO4cSRRAZtWQ3wKdHomX3rAJYcpu3
CPGwmEa8+EZmeCFOwOxJhYurSKBk9vYo7UUqsdvy+Vgswz5si1m1uO8XKdtSVcgL
9qilkfOm8N4tkBUsEqPu8QSlYbbiBoB9Vg9yS+ELTzNctha/cxI0SOwczlgKu2Fr
2BDF97ajzVnnWcWXEkUhVpDlXmVSvJoZlod/fL4KxeNz/bs8uCXB7N26Ga0tF8he
k2Ph4Vf4Ro/O2AGbwfJj78aqgCz3py0fKLgFMd7fWgQgS1mZVJ/d7e9bMo1NnYfr
LUN77hjwMNwb9g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client