This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
File:                     Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json)
Hash identifier:          hd6ubZoRwqkJtrd92inFucBQmZPuGqnJxW1ul7xsSX8=
Subject key identifier:   29:02:BC:8B:51:58:BC:AA:BC:0D:9B:07:1C:EC:D6:9D:06:9B:3F:DE
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Certificate issuer:       /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial:       019C44350A35686566D60ADEE30C1600F5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
Manifest number:          1602
Signing time:             Mon 09 Feb 2026 21:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:52 +0000
Files and hashes:         1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=)
                          2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=)
                          3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: Hd0js04Q3gSghHeCeT821nd82fO2rJ6YV+BTkCKDcWU=)
                          4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=)
                          5: RKeJP9iEvuDf3LggtuJwNO7uQEk.roa (hash: +VIR5z/XQ5Qx7TTNzGJldp0pk9LFlEUwye6JlD69ltQ=)
                          6: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=)
                          7: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=)
                          8: WkDZDOXBWr9x5TExAfjLxWKxbkU.roa (hash: YkRBfAeJDTqNqtEqsLxdtIzJ8woFGgTRSv1hmR+uNQ4=)
                          9: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=)
                          10: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=)
                          11: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=)
                          12: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:0a:35:68:65:66:d6:0a:de:e3:0c:16:00:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
        Validity
            Not Before: Feb  9 21:00:52 2026 GMT
            Not After : Feb 10 21:00:52 2026 GMT
        Subject: CN=2902bc8b5158bcaabc0d9b071cecd69d069b3fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:8d:b6:c8:c5:f3:72:72:59:41:96:ed:df:
                    20:19:2c:36:28:aa:19:82:1b:b8:24:8a:c8:3d:01:
                    24:3f:c0:27:16:55:ed:99:e2:cc:3b:95:d6:15:aa:
                    1e:61:7d:fe:a5:c0:e0:9d:80:3f:97:4d:c6:23:a0:
                    a9:79:9b:6b:da:35:c4:05:72:5a:67:0d:28:20:a7:
                    50:c8:8b:df:5e:dc:1f:cb:85:7d:60:69:48:e0:e6:
                    c3:68:39:ff:fe:a3:5e:eb:27:45:75:21:0d:66:5a:
                    4b:3c:64:91:c1:e5:9b:e6:96:6d:1c:90:bc:83:bb:
                    1b:2c:f8:d4:e1:32:60:e7:8f:24:6c:2a:70:ed:f0:
                    ba:eb:4b:62:35:05:9d:3e:f9:d8:83:15:e8:be:12:
                    19:55:48:b5:db:a4:1c:e6:8e:5d:f6:82:60:b5:8c:
                    d6:9d:7d:ea:26:01:dd:88:82:4a:50:fd:99:7f:73:
                    79:23:e4:75:fc:09:9b:d7:b6:4f:ed:11:d2:59:7e:
                    c8:ec:0e:e3:c1:0e:03:a4:43:aa:02:38:c2:0e:14:
                    43:5a:21:3d:20:72:6c:76:a2:9f:a4:f9:06:de:0e:
                    f5:81:ca:5c:ca:07:27:88:1d:4d:f1:13:d8:1c:94:
                    74:be:5b:db:38:52:d1:f6:9d:06:25:68:a8:3f:ac:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:02:BC:8B:51:58:BC:AA:BC:0D:9B:07:1C:EC:D6:9D:06:9B:3F:DE
            X509v3 Authority Key Identifier:
                keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:94:54:ae:23:04:97:14:81:ab:07:59:b4:5d:4b:07:00:
         05:b7:20:53:ef:65:08:85:ba:0b:9e:7c:ed:b1:71:8d:d5:05:
         a6:69:bf:9f:be:aa:a3:70:e4:a2:96:7f:2a:38:a5:45:82:f9:
         11:ed:2d:ac:8b:9d:84:eb:a0:7c:3a:ff:79:d8:10:e4:42:e6:
         ce:58:c3:f9:5e:66:bb:08:e9:31:86:6f:33:5a:2f:32:c6:2d:
         a7:36:e8:06:c4:59:12:e6:ae:a3:55:bc:c5:07:8e:37:51:17:
         3c:02:b0:37:27:2e:51:66:b7:1f:da:5a:31:c4:14:04:5b:d5:
         83:46:5e:a6:cb:0d:e5:24:b7:04:c2:a5:dc:74:41:b7:64:9d:
         a6:7f:4c:de:8c:72:9c:2c:05:3c:38:fc:96:84:51:91:a8:d0:
         23:85:46:bc:dc:22:dd:0e:48:ac:cf:1b:96:63:4a:ec:3e:fa:
         61:90:b7:f7:18:b1:c2:02:8f:bf:c6:eb:de:70:a3:e1:b7:47:
         94:7d:ed:04:55:ab:71:97:fe:b9:d6:2f:fa:2a:8d:29:21:03:
         26:4e:9f:aa:28:f2:14:57:f7:e1:60:ac:d7:6c:b4:5c:01:19:
         0a:10:e3:41:2a:eb:b9:86:7f:89:ae:d5:6a:f1:de:2a:a9:67:
         98:58:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:51:59 2026 by rpki-client