This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File:                     k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier:          EZkVm9eRhVd4ENko/y2IrkXOPOQPOCIXIKRjmobc5pM=
Subject key identifier:   1D:E2:C1:E7:3F:91:EC:47:A8:6F:EE:8A:2D:62:B4:56:54:1C:5D:6F
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer:       /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial:       019C42B3FDFDB4D8B55047519B0F8C74B845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number:          0EF5
Signing time:             Mon 09 Feb 2026 14:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:17 +0000
Files and hashes:         1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
                          2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
                          3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: umd/XwuKX7ByQu56VCeBpX+uxpEHsGAa9kSTv7Dv8uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:fd:fd:b4:d8:b5:50:47:51:9b:0f:8c:74:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
        Validity
            Not Before: Feb  9 14:00:17 2026 GMT
            Not After : Feb 10 14:00:17 2026 GMT
        Subject: CN=1de2c1e73f91ec47a86fee8a2d62b456541c5d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1c:74:e6:9a:c2:61:23:39:d2:33:47:73:52:
                    61:17:98:97:9e:d0:03:9d:36:aa:7e:90:0b:9c:6e:
                    d7:6e:dc:01:1c:8d:21:a9:76:f6:58:07:d8:19:fa:
                    5e:63:db:04:5b:1f:25:46:3f:bc:96:23:ba:6d:cd:
                    11:2d:0b:e5:8e:c2:3b:48:bb:1a:ad:e3:22:2f:84:
                    b5:96:6b:70:7a:72:9f:d5:4c:84:c5:1b:ec:12:6b:
                    58:e1:89:3a:fd:ac:18:2a:a8:34:ff:0e:ff:bf:5c:
                    32:94:c2:b5:7a:68:79:74:67:c3:d0:ac:a0:26:b0:
                    ef:e6:53:b3:93:4c:86:09:0f:20:8f:ec:df:2c:ba:
                    3d:93:44:11:8b:c1:38:7e:fa:3a:39:2c:02:ca:16:
                    fc:2b:2f:91:14:05:e3:39:06:79:b2:36:00:c2:ff:
                    02:c9:16:6c:e5:f0:88:ff:f5:02:7e:61:6e:00:60:
                    69:6e:8d:ab:0e:ef:74:39:8b:37:4e:d3:e8:18:2d:
                    df:f9:41:b6:72:df:46:8a:3a:c0:df:9f:58:3b:75:
                    fd:11:98:c7:6e:09:eb:e3:25:eb:5f:ff:17:47:5a:
                    4c:40:0b:5c:61:7c:51:37:12:02:2a:b9:3c:cb:8f:
                    b4:6d:ea:22:57:6b:27:7d:c7:7b:1b:bd:a4:e9:53:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:C1:E7:3F:91:EC:47:A8:6F:EE:8A:2D:62:B4:56:54:1C:5D:6F
            X509v3 Authority Key Identifier:
                keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:1f:a0:a2:9c:fb:6a:d2:8a:5a:cc:a3:59:de:e2:5f:42:
         a5:67:18:ad:bc:56:58:02:9b:98:7c:b6:a4:d0:5f:a6:c2:a9:
         06:13:d0:ac:42:62:e7:b1:91:3d:fb:a4:cc:a0:6c:ec:6c:44:
         89:ac:6b:54:dc:6a:5e:a1:72:c7:48:40:f4:db:84:41:ab:68:
         c4:15:84:e3:1e:7e:8e:0f:6a:9d:0c:e2:21:eb:e3:9e:dc:c6:
         59:0b:2f:db:5b:a4:95:ba:c9:a5:41:ae:26:90:8c:83:4c:34:
         87:34:6f:9d:75:d9:7d:2b:3f:50:b6:0c:d4:a5:b0:70:a8:55:
         2b:08:f5:da:1e:13:b5:b2:92:9d:ee:f2:50:1d:fc:02:c8:ca:
         8c:02:b6:a8:5e:34:93:ee:56:b3:7d:d7:3a:5e:ea:35:b2:87:
         56:21:c6:91:ad:ac:b6:34:6b:b0:70:8a:f9:b7:91:a7:bb:c6:
         b7:0f:10:42:52:46:34:5a:c7:d8:b7:9f:91:da:f9:f1:20:5e:
         04:cb:75:28:b7:f5:1c:fd:96:74:f1:1f:b2:a3:27:38:b8:25:
         27:16:c9:73:8f:d7:e6:37:45:06:00:e0:3a:d7:82:36:a2:f9:
         84:ad:3e:07:78:d8:8c:80:21:52:55:1e:b2:2d:76:26:b8:55:
         4f:d0:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:04 2026 by rpki-client