This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File:                     kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier:          B5v+wDyezC85ZZ7MJuYuwPhc8WTu5G278CZeUpwhHtQ=
Subject key identifier:   0E:44:05:6A:07:53:A2:A0:38:6B:29:24:F7:B9:F1:94:EB:46:5F:23
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       019C438FFB5D0A3B05E3CA3F4E92F9E106B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number:          0EDD
Signing time:             Mon 09 Feb 2026 18:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:35 +0000
Files and hashes:         1: 5b9__Q8NOyZsGtNfArWmdCajUsQ.roa (hash: JRUc1JqtkkmBfJnMJX95f2kq0cGDruqAawQMnKbLcRM=)
                          2: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 4PQn4Ri653gEzRIg7xqNVuTikgIpVMMtFyqNuIWRCqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:fb:5d:0a:3b:05:e3:ca:3f:4e:92:f9:e1:06:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: Feb  9 18:00:35 2026 GMT
            Not After : Feb 10 18:00:35 2026 GMT
        Subject: CN=0e44056a0753a2a0386b2924f7b9f194eb465f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:40:8f:f4:85:77:32:9a:d5:93:76:24:23:
                    0c:7c:ef:19:6d:5c:17:6d:13:b0:03:3b:96:d7:93:
                    95:40:82:0d:ca:22:13:8a:ea:a9:82:c8:e5:c3:77:
                    24:cc:72:d6:0b:38:2d:9d:a6:30:51:cb:cc:96:77:
                    f3:8d:72:69:c1:71:50:e0:cd:f2:2f:20:76:34:2e:
                    bf:e3:1d:0d:b1:85:9c:98:94:f1:6e:53:4d:b1:7c:
                    72:22:7d:6b:1d:65:d9:60:0b:8e:67:df:85:6a:02:
                    d2:12:87:c2:3a:80:79:67:7e:c4:ca:f5:e1:81:5d:
                    8e:7f:98:b1:9e:d5:2d:ba:9a:06:9d:94:57:cd:aa:
                    6e:64:c6:09:79:fe:22:65:b2:4f:8a:2b:7c:ee:20:
                    86:8b:27:1e:77:f7:58:22:0a:29:f1:64:0f:06:ad:
                    b9:3c:e8:58:19:d6:6e:8c:bf:42:53:71:5f:79:13:
                    ea:b0:4d:0b:fd:0e:ca:35:f3:41:f6:db:9a:12:7d:
                    c7:ba:48:af:64:9c:b1:cb:03:77:85:e1:96:0e:2a:
                    3c:7c:39:f3:25:f8:8f:29:11:44:f8:f0:90:d0:18:
                    04:0c:5f:84:a2:24:15:22:e9:8d:67:be:ab:c1:82:
                    97:09:81:51:ce:8b:f1:0c:ab:3c:42:de:28:6c:0c:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:05:6A:07:53:A2:A0:38:6B:29:24:F7:B9:F1:94:EB:46:5F:23
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cf:a7:81:a0:9f:c7:14:57:3d:63:3b:e4:6f:fe:67:c9:98:
         2d:a4:ad:3c:0b:20:06:ff:17:cc:64:d7:ff:ab:e9:8e:25:9a:
         86:02:c6:8c:b2:f0:da:65:7e:77:bf:43:d2:b6:05:65:85:5c:
         8f:be:fa:de:7c:fe:0f:4f:7f:ba:9f:1b:b1:0b:fc:36:36:e3:
         65:0b:f9:fb:9a:0c:70:6c:e4:da:90:2c:00:c7:6f:1d:bf:49:
         59:2d:98:87:4a:ea:04:35:e8:5a:2a:92:fa:16:82:95:eb:6c:
         85:5b:6c:de:7e:d5:33:5b:f2:73:23:a8:70:9c:c4:43:40:4b:
         39:7a:a6:5f:75:6c:54:de:f5:c7:a3:19:8f:9a:e9:e8:b4:1a:
         df:ab:23:1d:33:40:58:52:21:00:90:c5:b8:2f:97:c3:45:e8:
         6c:a0:65:59:50:67:f8:36:cc:e2:8c:47:6d:f6:70:30:42:22:
         68:56:1d:75:da:4a:6c:b6:bb:b0:ad:8b:e2:e9:be:78:41:aa:
         bf:b6:09:fd:d5:28:6c:67:24:1d:1e:f1:7a:78:82:b8:21:65:
         98:0b:79:3e:66:89:cc:0d:d9:f0:20:89:eb:f0:98:42:03:ad:
         3c:23:41:1f:3a:de:21:d7:96:07:10:f8:f2:5c:69:04:e5:7f:
         9f:f0:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:47 2026 by rpki-client