This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File:                     kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier:          jWBFBO7HZg6VeyhvhVn9+RhnT889sUJ8lVDqeE+bVB0=
Subject key identifier:   9A:CB:0A:29:60:CE:49:8D:03:46:90:00:FC:38:0F:D8:89:CC:26:30
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer:       /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial:       019C43FE4F84EBF207285A5F1AD7EA6661DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number:          081E
Signing time:             Mon 09 Feb 2026 20:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:05 +0000
Files and hashes:         1: PymsuRY-XU_JjC-s7g8jov_R8Hc.roa (hash: eIduQ26VHE0PdG7zgjOYFtz0rV5pDOwOAUDByNGlGR4=)
                          2: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: Oexa3ERCnszUl1xFeifDuIFCDhGCpnafpzBwZRg69mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:4f:84:eb:f2:07:28:5a:5f:1a:d7:ea:66:61:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
        Validity
            Not Before: Feb  9 20:01:05 2026 GMT
            Not After : Feb 10 20:01:05 2026 GMT
        Subject: CN=9acb0a2960ce498d03469000fc380fd889cc2630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:53:f9:94:84:42:52:36:94:bf:cf:22:9c:
                    30:c8:c0:e2:f5:b5:dc:8f:57:16:31:bb:42:d7:f5:
                    2e:90:ad:c8:08:b1:c5:3e:fb:65:cc:e8:0d:01:46:
                    69:ce:ec:a7:f1:7f:92:fe:50:08:c2:ef:72:91:6d:
                    4a:30:25:6c:c9:5e:79:3d:31:73:b4:43:a8:53:d2:
                    c3:d2:cd:b7:ba:a6:05:53:52:44:7a:26:91:62:78:
                    c1:e7:21:a3:71:2f:7e:fd:15:33:c3:3d:99:3d:66:
                    14:6a:6a:3a:d1:9f:98:25:8a:cf:f4:4d:53:41:e0:
                    1c:88:93:3f:3d:29:85:80:7a:cc:60:25:71:39:f6:
                    e3:89:f1:20:c3:17:f7:62:90:a3:04:7c:7c:fc:66:
                    00:7e:15:8f:85:0a:23:c8:0e:f7:62:a0:53:9c:f5:
                    e9:4c:be:f8:8c:d4:ab:ae:59:26:73:ac:69:be:69:
                    d6:24:a9:f0:e4:0c:35:6e:8f:90:99:34:59:00:8f:
                    98:95:29:e6:70:02:0b:ee:a6:fc:62:95:eb:89:b7:
                    ec:0a:3d:1c:f1:25:15:9b:fc:67:ef:4a:94:cd:93:
                    5b:16:e8:f3:67:9f:a6:72:8f:7f:49:26:89:1a:d6:
                    8b:3f:5a:b4:55:75:99:b2:e4:d3:af:76:42:04:83:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:0A:29:60:CE:49:8D:03:46:90:00:FC:38:0F:D8:89:CC:26:30
            X509v3 Authority Key Identifier:
                keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:7d:84:4f:6b:f8:4b:f3:ce:6c:41:47:af:9b:3c:5f:b1:
         6a:e9:77:ab:c1:81:80:08:69:e2:5f:57:0d:a1:a2:e8:d4:85:
         e2:74:90:21:55:8a:e7:ea:8a:31:bb:39:31:55:26:f7:37:a0:
         e8:80:08:3a:2b:3d:d9:12:c6:cd:c4:4a:f6:ab:77:a0:08:9e:
         42:cd:d8:01:aa:0e:f3:2a:b9:2d:71:df:2d:49:77:4c:7e:59:
         84:1a:ec:92:da:0f:ff:9e:f7:a4:b5:b8:38:01:fe:87:f0:2f:
         fa:09:c6:23:c2:1d:95:e7:30:b6:26:f6:d9:aa:72:5f:61:a5:
         0d:bd:ff:68:c2:c9:e8:40:37:02:54:4f:f0:32:05:4a:d8:30:
         ff:b0:00:65:52:d4:55:51:a7:20:80:32:65:fe:8d:ff:32:6a:
         b9:ec:a2:44:9e:9f:63:25:6f:f5:25:3d:c5:1d:a8:15:0f:ca:
         84:ac:8e:60:7c:24:6f:91:a7:cf:ac:0e:4f:7d:fb:11:dd:be:
         7f:7a:25:43:38:a3:33:a9:44:a6:ca:02:15:a3:2a:34:45:44:
         7b:a7:72:43:c8:c1:94:d6:47:11:54:0f:08:c2:d5:17:dd:b8:
         2d:44:23:64:9f:31:b6:65:20:09:df:6d:f5:c0:f1:70:00:42:
         3c:8c:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:00 2026 by rpki-client