This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File:                     K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier:          ukiueJDIcnOaiSxjl9+Ocgl2rGeeB9HLI4LTb/ac7x4=
Subject key identifier:   2F:A8:7E:1A:98:CA:57:D0:75:78:CE:B0:95:89:4D:C4:74:F9:10:0B
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer:       /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial:       019C43C6A4BD5F2DE7D0179D079948423125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number:          0577
Signing time:             Mon 09 Feb 2026 19:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:17 +0000
Files and hashes:         1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 5CEYVukZwsrUxIukJVpeYgJFjWFqPdgvRq/U3HsD0ag=)
                          2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:a4:bd:5f:2d:e7:d0:17:9d:07:99:48:42:31:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
        Validity
            Not Before: Feb  9 19:00:17 2026 GMT
            Not After : Feb 10 19:00:17 2026 GMT
        Subject: CN=2fa87e1a98ca57d07578ceb095894dc474f9100b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:31:03:97:1f:9e:0d:97:e4:fc:81:01:45:27:
                    6b:04:d5:d8:09:bb:96:2f:b2:e8:c3:33:7f:91:b3:
                    18:39:79:71:2e:9f:18:b5:eb:55:eb:8b:49:d0:65:
                    00:73:ca:76:ef:b5:f9:a4:dd:19:50:b1:c6:e6:74:
                    fa:1f:7d:7d:7e:08:92:54:ea:42:db:34:80:bd:e7:
                    23:0a:7c:ac:85:26:68:5e:c2:11:b6:d6:93:6a:70:
                    b7:98:b9:b7:08:87:d1:d3:28:fb:b2:a9:da:2e:c4:
                    36:1e:be:fd:cb:3e:fa:5e:0b:91:c5:9b:d4:d7:a6:
                    c4:75:b3:4c:59:9c:a9:ad:11:c5:48:02:bf:e7:25:
                    c1:cb:c7:65:f1:94:7f:b1:e7:43:ec:89:9c:97:88:
                    e1:a8:e9:c2:7b:e7:df:3e:07:87:9a:24:e6:84:a3:
                    87:52:22:ad:ef:73:22:7d:e9:1d:87:1d:a3:28:01:
                    b7:1d:a2:98:6b:0c:de:54:1f:2e:b6:0d:52:24:46:
                    d7:64:d5:0c:62:31:82:e2:fe:03:c9:79:69:02:83:
                    38:0f:92:1a:16:ed:68:10:64:3a:77:4a:52:66:ac:
                    e8:f1:03:32:c2:6c:70:ef:3e:3f:19:08:6c:41:01:
                    23:f8:d8:e4:28:65:35:e3:2a:33:76:9d:19:d5:3e:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:7E:1A:98:CA:57:D0:75:78:CE:B0:95:89:4D:C4:74:F9:10:0B
            X509v3 Authority Key Identifier:
                keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:5f:d3:c2:88:96:be:94:29:26:ac:92:f9:26:46:63:46:53:
         55:7a:90:79:20:a8:55:6d:39:63:a4:71:71:4f:ed:57:26:ce:
         15:d1:1b:b9:56:2a:ea:25:03:ae:be:99:ea:4b:e2:3a:69:13:
         77:a7:73:b4:56:92:f8:9c:36:9d:02:a5:59:13:c9:73:52:e7:
         52:8e:48:4a:96:df:51:15:99:6a:99:42:d4:6b:8d:dc:35:f2:
         72:14:a1:50:3e:16:37:d8:10:0d:26:f0:d9:28:26:5b:0c:92:
         3a:ff:03:c0:d4:15:b5:1c:d4:fc:0e:0f:ea:46:21:72:34:f4:
         ff:98:6b:bd:95:06:9d:86:fa:9f:9c:a9:47:92:88:a4:9b:4d:
         a5:8f:41:47:a1:bb:76:ce:b0:43:b0:a3:06:60:79:d9:6a:dd:
         a2:2a:52:e6:2c:ac:f0:4f:6c:22:46:51:41:49:6d:e6:79:da:
         ce:b8:6a:83:d3:1f:ec:76:c3:06:ee:10:dc:47:14:f6:15:b9:
         f8:ea:43:e0:0f:67:75:6a:f0:c3:74:c1:86:d4:68:a2:75:58:
         50:17:6f:36:3c:dd:5d:4d:0f:b6:34:b5:2a:3d:0c:25:01:26:
         16:62:ed:49:d3:d1:e4:09:fe:b3:95:9b:fa:e4:9e:71:8b:c3:
         b5:d5:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:06 2026 by rpki-client