This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File:                     kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier:          VAHIYe/5VbbXIlfMgDoqU6/d0t2YHV6VunIsoLz5W6A=
Subject key identifier:   F2:2F:72:B4:2D:F1:71:7F:52:33:DD:B1:BA:0C:8D:4D:BA:F5:43:6B
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer:       /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial:       019C42EB733543E0C73EA3112B35248D9DB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number:          0868
Signing time:             Mon 09 Feb 2026 15:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:52 +0000
Files and hashes:         1: Sa_vDBEAm82qmKkKwf2aI8quPD8.roa (hash: qBNhicMBIUuHH+gEIMRgRVoASaPTsbzdmeqUpjYn+jQ=)
                          2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: Nz+x7dQfhYItErzVaJ1xPNV5KSk4vQu0DYAYNIBaupw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:73:35:43:e0:c7:3e:a3:11:2b:35:24:8d:9d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
        Validity
            Not Before: Feb  9 15:00:52 2026 GMT
            Not After : Feb 10 15:00:52 2026 GMT
        Subject: CN=f22f72b42df1717f5233ddb1ba0c8d4dbaf5436b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:0a:08:b2:a7:41:a5:73:d8:ac:7c:d5:1e:
                    0c:9e:4e:eb:7f:ec:5b:b8:04:2c:49:b9:37:6c:79:
                    3a:d6:b7:e9:7b:e6:b3:ea:6f:e4:ca:4d:10:07:1b:
                    b1:a9:6f:f4:94:78:d8:30:53:fa:b1:c6:7d:60:8a:
                    ed:a2:b9:46:c9:fc:45:f3:e1:b9:26:25:8c:0f:52:
                    39:ae:55:67:42:cc:46:cd:07:54:39:51:82:67:77:
                    40:b2:08:b0:c0:81:0d:52:bc:76:1d:dd:3f:78:45:
                    96:f7:c3:5b:b4:32:91:24:53:96:02:97:da:61:9b:
                    08:da:a3:56:15:bb:fd:2a:38:8d:74:cd:68:be:2a:
                    cd:0a:0f:f9:b6:d3:ab:8c:16:d0:b0:eb:5e:bb:2a:
                    8d:80:07:34:11:97:83:4e:92:6d:d4:61:31:89:27:
                    03:66:dc:fa:70:74:ef:60:f7:20:1b:5a:c9:63:2f:
                    03:d5:92:ba:1b:05:6f:13:60:b4:60:5e:d3:ce:5a:
                    7b:8c:aa:fb:ea:16:ed:68:c0:9f:ba:60:f5:2a:67:
                    e6:0d:41:4d:af:57:4a:57:8b:a4:fa:96:97:b6:73:
                    e1:95:5e:29:4c:06:27:f4:92:f8:e2:ee:18:7f:53:
                    a3:96:28:d5:ed:17:f2:d3:b7:5b:af:86:ea:cf:eb:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:72:B4:2D:F1:71:7F:52:33:DD:B1:BA:0C:8D:4D:BA:F5:43:6B
            X509v3 Authority Key Identifier:
                keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:14:69:e4:81:a1:5b:a1:15:cc:d3:76:1c:01:dd:12:a4:3e:
         06:34:15:89:69:9d:cd:66:4e:94:a9:12:80:3f:32:b8:6f:fc:
         89:b7:c6:d9:aa:d7:33:b1:06:44:8b:c7:97:5a:37:47:54:fc:
         be:6c:e1:c6:8a:94:ad:8c:2f:91:41:de:1c:83:62:f1:c8:01:
         2f:a0:cc:1c:52:d6:e7:e5:86:a4:83:59:b1:1c:c6:3c:a5:e3:
         ec:5d:59:a6:e2:6b:43:58:e2:7c:fb:0d:1a:e5:8d:b4:d3:ae:
         5c:ad:f2:9b:02:61:8d:cb:2d:4b:51:01:5b:6d:8e:b6:d0:25:
         93:85:26:0b:76:53:e5:85:b3:f9:9c:94:99:3b:e3:22:e1:b0:
         5f:86:8e:ad:86:a3:3a:fd:00:59:0d:b4:85:26:0d:d8:d0:4b:
         99:aa:5f:93:5b:df:3e:48:63:05:90:f1:fc:da:64:88:85:74:
         cd:24:a6:3d:2f:f6:c0:1f:f7:6c:f6:71:1f:d0:43:6f:b1:a6:
         36:8f:f0:53:f0:76:17:f4:c8:ff:2c:80:0f:3c:fc:cf:2e:c8:
         0f:e9:22:b1:3d:10:6c:3a:74:cb:8c:ab:0b:be:ab:b8:46:35:
         88:c8:01:19:c5:d2:ec:85:7c:26:e3:69:e1:49:3f:65:7f:65:
         28:c2:99:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:26 2026 by rpki-client