This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
File:                     MKVWMuyQNMm5o_KQquzZoHwfJqs.mft (raw, json)
Hash identifier:          Cebu84w9CPTyKiDcofJycReL4+HYCJl4BgyjEXRdtjE=
Subject key identifier:   03:2D:06:90:F7:72:56:A8:93:70:B2:0D:40:1C:C2:2D:48:64:10:16
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Certificate issuer:       /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial:       019C4246275A5A2B68F1DC2743321445A142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
Manifest number:          0BE3
Signing time:             Mon 09 Feb 2026 12:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:19 +0000
Files and hashes:         1: MKVWMuyQNMm5o_KQquzZoHwfJqs.crl (hash: /kl7zj239R+rqL/NBYtJ8P4MLd9g75qbpqsfI0Bmq/s=)
                          2: b5hEA0skW7XIPdQy24vlGY78QsQ.roa (hash: wOWtUPMhhEOhukktL5n5JA5DpIw7T84vi3SfnV7rzhc=)
                          3: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (hash: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:27:5a:5a:2b:68:f1:dc:27:43:32:14:45:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
        Validity
            Not Before: Feb  9 12:00:19 2026 GMT
            Not After : Feb 10 12:00:19 2026 GMT
        Subject: CN=032d0690f77256a89370b20d401cc22d48641016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:54:fc:bc:e6:ee:84:4e:18:bd:6c:60:c6:
                    28:02:67:9e:68:8e:7d:9e:10:3a:21:b7:80:ee:cd:
                    3d:35:ae:68:c8:38:03:23:2a:b8:5f:b1:d5:26:97:
                    48:ca:f0:cd:80:17:6c:ba:62:be:c6:a7:5e:90:4e:
                    f4:fd:23:f4:b3:56:ad:74:40:5a:8d:51:f3:50:3f:
                    b7:8a:41:b8:00:2e:41:be:61:06:69:c1:76:52:a8:
                    60:a4:cd:d1:a7:00:33:4b:99:1f:40:36:0f:59:2d:
                    6f:34:d8:fd:1e:09:ce:b8:5d:fe:a7:7c:49:d4:3c:
                    82:9a:0f:66:7f:30:38:89:9e:35:64:ae:78:f7:6a:
                    00:20:99:36:88:f3:1f:8f:e3:62:e4:8c:a0:3f:13:
                    a4:a1:fa:0c:24:dd:71:8d:9e:4e:e4:c8:83:df:6e:
                    f0:58:b2:28:cd:b8:6c:5f:9f:a3:cf:0e:9b:5b:31:
                    6c:58:41:a5:95:00:e5:55:40:c8:ae:c3:4b:62:91:
                    39:dd:5e:b2:ce:65:fa:43:43:4a:1a:3f:ee:bb:c3:
                    ff:a4:2f:94:15:34:ba:8f:7e:ee:07:3a:2a:8f:83:
                    70:eb:e3:36:aa:21:60:51:a0:a5:7f:ec:4c:5e:72:
                    bc:8d:bf:7f:cf:05:a0:62:f3:65:a9:83:79:7b:26:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:06:90:F7:72:56:A8:93:70:B2:0D:40:1C:C2:2D:48:64:10:16
            X509v3 Authority Key Identifier:
                keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:d0:d3:67:27:69:74:03:53:28:fc:67:53:3b:7f:da:d5:
         ea:aa:00:ce:d9:fd:46:48:d5:a9:11:6e:3b:a8:a5:4c:9d:d0:
         b3:ac:18:df:80:6e:66:43:6b:c8:58:45:fe:45:38:de:a8:52:
         25:3e:58:fb:3a:2e:dc:eb:50:72:dc:e1:c3:ad:c6:ff:fc:64:
         16:4c:bf:d9:b7:79:cb:2c:a3:a3:d5:3d:be:0b:c7:58:57:48:
         a4:7a:46:73:4c:1c:e8:bf:ac:af:e9:b6:59:87:4d:f4:a4:79:
         06:ee:be:e5:4f:45:9e:d8:67:51:04:96:aa:c9:d0:91:b0:70:
         a5:5f:63:d7:ce:62:0f:c1:5f:f9:27:5e:da:cf:1d:ba:b2:10:
         1c:8c:63:73:9c:32:c7:d5:31:6e:dd:51:20:f9:59:89:b6:7f:
         42:bf:ac:06:37:13:f2:cf:59:37:c0:50:b9:b4:8e:c1:1b:68:
         83:ca:71:ab:3c:a8:02:b3:2c:5c:ef:fe:06:52:3f:18:1b:f0:
         7a:a6:ac:2a:d8:dc:71:96:a4:1b:2b:2d:f0:ad:b6:46:45:ad:
         af:df:04:89:19:62:7f:57:1e:8b:44:a0:4a:f7:5b:b2:e3:1c:
         83:7f:97:28:ff:ab:03:c4:9e:f0:47:d7:c0:ba:45:f6:2e:42:
         81:66:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:04 2026 by rpki-client