This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
File:                     SKGBKVSA9hv1hC13EvSV7CSacs8.mft (raw, json)
Hash identifier:          1RTXJKnMAeJMrudQ72AWNWscc9zWTJbAnOqfb8O7lrI=
Subject key identifier:   82:97:87:52:63:6E:1A:BD:9E:92:91:65:4E:DD:10:15:50:5A:52:91
Authority key identifier: 48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF
Certificate issuer:       /CN=48a181295480f61bf5842d7712f495ec249a72cf
Certificate serial:       019C42467E319D47DE7B3E1D86097E6A4CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
Manifest number:          03A3
Signing time:             Mon 09 Feb 2026 12:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:41 +0000
Files and hashes:         1: SKGBKVSA9hv1hC13EvSV7CSacs8.crl (hash: QzBVsyYbL7KG+lp+0SETbXpSEaJi776v8oEbB9XnBok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:7e:31:9d:47:de:7b:3e:1d:86:09:7e:6a:4c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a181295480f61bf5842d7712f495ec249a72cf
        Validity
            Not Before: Feb  9 12:00:41 2026 GMT
            Not After : Feb 10 12:00:41 2026 GMT
        Subject: CN=82978752636e1abd9e9291654edd1015505a5291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:89:ed:10:80:93:e5:7a:a1:94:5a:3a:85:
                    62:60:bd:41:3b:cb:2f:12:4e:1a:16:92:9c:fe:37:
                    d5:97:24:95:4a:c9:bc:1e:b4:db:b5:bc:1d:9f:50:
                    c0:16:7e:87:c8:f9:1a:93:6e:52:54:3a:60:84:22:
                    62:e0:1f:5a:d4:c9:6f:6a:d0:59:ba:4c:0e:f5:85:
                    31:2d:e7:e7:bc:a2:d2:6c:d0:39:0b:16:72:8e:e4:
                    7c:1a:c8:b9:54:9d:c2:72:99:df:b9:37:d5:23:e6:
                    e8:bf:c1:b5:2b:b3:71:62:25:17:38:78:04:0a:84:
                    23:a7:0d:e4:7f:a2:20:ee:e7:5f:43:5e:d4:69:8a:
                    09:76:43:56:90:61:10:d0:2b:9d:48:a8:7e:22:14:
                    64:5a:85:71:2d:46:cd:65:97:70:1c:fc:79:46:2c:
                    68:d2:4a:c2:50:46:ff:49:60:83:fc:f7:bd:fa:24:
                    4e:0f:92:1b:0d:ad:db:fc:9d:bf:1c:c8:6a:2b:05:
                    0b:c7:d9:20:88:e8:4b:a5:7f:41:35:b7:1f:23:15:
                    e1:1a:12:a1:3e:e7:39:97:f4:5a:3a:f8:9e:6a:ba:
                    4e:d2:8a:3d:11:65:0b:e3:1f:09:cd:3a:0c:5c:6f:
                    d1:11:33:6f:87:bd:c0:87:bf:1a:6b:74:81:13:7b:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:87:52:63:6E:1A:BD:9E:92:91:65:4E:DD:10:15:50:5A:52:91
            X509v3 Authority Key Identifier:
                keyid:48:A1:81:29:54:80:F6:1B:F5:84:2D:77:12:F4:95:EC:24:9A:72:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKGBKVSA9hv1hC13EvSV7CSacs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c9c181-3582-4f2d-968a-941d2f1f2d16/1/SKGBKVSA9hv1hC13EvSV7CSacs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:99:f3:15:26:80:18:a8:7d:6f:86:65:df:f8:1d:ca:01:
         4d:36:19:6c:c4:2d:79:bb:1e:43:f2:92:7d:da:34:9c:96:bf:
         53:09:47:ac:8c:2a:2f:cf:30:cd:10:49:93:62:49:9a:84:90:
         a5:f7:12:02:03:c2:d5:ca:f2:1e:f3:d4:1a:ce:80:e7:19:8b:
         96:1f:98:b0:bf:2b:39:33:16:76:99:5a:1e:31:0e:04:3d:35:
         1c:01:d2:64:a4:f6:42:19:66:4a:7f:7e:9e:33:0d:62:d4:28:
         08:82:17:7e:78:b3:70:6d:46:74:20:15:2d:99:7f:b0:dc:0c:
         9a:5b:b2:02:95:fc:ab:07:18:bc:44:e6:e1:b7:13:20:fb:8d:
         d3:5a:25:d5:db:b1:f9:fe:28:6b:25:7d:21:7c:7c:0d:94:a1:
         73:ca:a5:7b:c9:ed:ae:da:b6:10:80:8c:14:f4:47:9c:d6:76:
         c5:74:94:e6:ca:82:b2:bd:c3:e7:97:3b:04:bd:c1:59:89:5d:
         4a:74:61:98:1e:ea:a6:9f:10:82:5f:4f:7c:c1:3c:b4:aa:c9:
         bf:22:a7:2c:5a:50:c9:3f:06:c6:07:17:50:d3:d3:10:2b:10:
         ab:ed:83:99:18:7b:23:9d:76:15:f5:ab:5b:cb:07:f1:5f:98:
         1f:02:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:42 2026 by rpki-client