This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
File:                     k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json)
Hash identifier:          kaWONzR7q3lX2Ma6T3iZI/7GMzn8lm+8LFvgrDzaRFo=
Subject key identifier:   A4:86:6A:CC:0C:E9:65:CE:8D:BB:24:11:58:8F:82:D7:CD:34:44:4A
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Certificate issuer:       /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial:       019C427D0DA96BB12EC8F6ABF461681BC4F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 13:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:17 +0000
Files and hashes:         1: 8EMMRLq1ba74wsT5jVIHYHbcc00.roa (hash: OWkinLuII34KhV3crRd1+k5jvfaxcPKAbZAj2n4o9vI=)
                          2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: CynCXx5wo9ARDQtbZG9Ld4n0Oy66ETv1CNTh6gJRV7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:0d:a9:6b:b1:2e:c8:f6:ab:f4:61:68:1b:c4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
        Validity
            Not Before: Feb  9 13:00:17 2026 GMT
            Not After : Feb 10 13:00:17 2026 GMT
        Subject: CN=a4866acc0ce965ce8dbb2411588f82d7cd34444a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:a3:ed:f9:f1:59:09:8f:da:1d:ad:a6:32:
                    64:9a:5c:df:3c:6d:6c:64:1e:05:1a:b4:a9:49:22:
                    c5:65:d5:6d:9f:b2:3d:d8:dc:f1:1d:4c:d5:11:b0:
                    33:2e:40:8d:52:23:1e:d2:17:6e:cf:a2:e9:be:f4:
                    1e:ce:9c:16:90:f4:ff:3d:1e:31:09:ba:fe:52:52:
                    33:bc:30:a5:68:5d:00:06:cd:c5:d8:2a:26:fa:b0:
                    0d:b6:b7:5d:ef:38:a4:bf:00:8d:2a:0a:b1:4f:81:
                    77:81:01:3d:d1:28:10:0c:53:25:0a:6c:c5:3e:6a:
                    58:4b:f0:a1:a3:74:af:aa:10:38:61:20:80:04:97:
                    f2:95:37:4a:43:2f:d4:f2:2d:b6:45:6e:b9:73:e1:
                    4a:ce:20:17:8d:17:83:1f:34:fd:a8:3c:72:98:9f:
                    a4:f5:dd:bc:5b:30:0d:4a:71:a2:01:d2:84:da:df:
                    ca:6f:17:5d:1b:2d:f3:58:08:9f:88:22:f1:bf:55:
                    da:a6:06:53:f3:87:f2:7e:3e:d6:e7:ae:e9:17:17:
                    b4:39:27:39:3f:d8:2a:49:8b:86:18:77:90:bb:f4:
                    d1:3d:8a:53:4e:79:b1:9e:50:43:ad:08:15:5c:eb:
                    9f:26:0e:ae:b3:a3:27:9c:58:e6:d7:b3:f1:8b:0f:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:6A:CC:0C:E9:65:CE:8D:BB:24:11:58:8F:82:D7:CD:34:44:4A
            X509v3 Authority Key Identifier:
                keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:06:10:0f:63:50:b9:e9:5b:8f:7a:0b:ad:3a:49:39:fb:
         88:ec:f8:3f:12:b9:ca:89:ce:db:8c:be:a9:a0:d6:43:f9:bc:
         de:de:43:67:61:c1:ee:69:45:a7:73:6b:9d:b3:5e:5c:97:0e:
         2f:92:f1:6f:bf:74:b5:f6:42:e7:1e:64:a2:0a:03:c6:01:5f:
         25:6e:4d:8e:45:cc:59:30:ec:2d:d3:15:6c:4c:23:a0:ed:37:
         15:ab:1c:90:39:95:16:dd:19:93:c9:38:08:97:d9:d3:97:35:
         a2:d7:a0:d0:ca:53:a6:e8:69:bb:0e:98:3e:5f:26:ae:79:7f:
         ae:34:91:c0:f0:4f:24:69:a5:d4:81:fd:6a:57:2e:1f:4d:1c:
         82:d0:35:bf:c2:11:ad:41:4d:c4:05:9b:bb:02:0c:fb:e7:c6:
         13:7c:d1:fc:f1:ac:1c:76:0c:07:09:7a:b4:73:53:ae:09:78:
         91:94:ad:01:d6:1c:fb:a3:ac:b1:7c:d3:64:f6:80:71:92:70:
         1c:67:19:fc:ed:2a:4e:a2:f3:fa:d5:79:38:da:6d:41:13:e9:
         f6:80:26:a5:72:d4:89:3c:81:c4:37:83:41:b2:ce:22:f1:8b:
         c1:c4:dd:30:6c:06:c5:91:d8:43:dd:1c:b1:a9:3a:ae:cf:b4:
         a4:fc:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:48 2026 by rpki-client