This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File:                     k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier:          zpzWBReWIirUF3NxOFwx/vOwf5Coy7lNakdraGmrjsQ=
Subject key identifier:   4F:05:79:A0:C3:9A:20:53:6C:E4:20:C4:92:96:FF:A6:AC:F4:2D:A2
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer:       /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial:       019C41A23F5AA90AEB278E97FC859B2776CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number:          0A49
Signing time:             Mon 09 Feb 2026 09:01:17 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:17 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:17 +0000
Files and hashes:         1: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: 3rEhNal494dE1xTnektQtYVyfsgr2cdNUcuIn3jtoOo=)
                          2: xnGY0GE7g_ENVu56e5gxelHybG8.roa (hash: yJUaHCIzmB9kSFy3GFPElESkvsA2U0DoARJQmC3vS48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:3f:5a:a9:0a:eb:27:8e:97:fc:85:9b:27:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
        Validity
            Not Before: Feb  9 09:01:17 2026 GMT
            Not After : Feb 10 09:01:17 2026 GMT
        Subject: CN=4f0579a0c39a20536ce420c49296ffa6acf42da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:5c:e9:21:e4:ca:14:b2:c6:45:26:13:4f:
                    2a:c5:66:92:d3:91:f4:d0:6a:35:0a:e6:8a:3d:13:
                    39:97:a0:23:91:cd:52:f9:c8:1a:35:33:e4:d6:7f:
                    08:91:86:18:ca:5e:f2:e7:ae:68:ad:33:bc:93:5b:
                    7d:57:b6:5d:2c:8c:d8:28:6e:45:c3:78:15:87:91:
                    bf:8d:1a:36:53:62:f3:64:9e:d7:fc:09:86:90:59:
                    dd:05:02:4d:47:60:e6:37:1e:67:4e:28:23:77:1a:
                    19:fe:ce:36:ca:6d:03:1e:a8:8f:1a:92:02:36:77:
                    b8:26:ab:5e:82:4e:8f:4f:28:74:cf:d1:bc:3b:e1:
                    1c:1c:02:3f:42:35:c4:b5:fe:60:d8:98:ad:dc:77:
                    a5:43:e1:55:93:b9:ca:6c:fb:9b:b5:59:df:56:d9:
                    ac:3a:1e:af:fc:9c:92:f6:65:76:45:3f:8b:13:c4:
                    a6:e7:04:2e:3f:e2:43:2b:6c:95:f7:0e:f2:b4:3f:
                    fb:55:d5:59:c6:f3:e8:69:48:d0:3b:59:55:7d:cc:
                    f4:04:7f:9a:d5:eb:a8:70:ce:86:b3:9e:fb:f5:36:
                    c5:f6:b8:c0:7c:9d:8e:dc:3f:2b:16:f4:91:5c:69:
                    45:dd:d4:8b:d0:64:3b:13:65:b6:6a:dd:7c:da:e0:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:05:79:A0:C3:9A:20:53:6C:E4:20:C4:92:96:FF:A6:AC:F4:2D:A2
            X509v3 Authority Key Identifier:
                keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:1e:37:03:32:bc:3c:ca:62:07:56:13:01:33:b1:12:cc:
         77:42:b0:0f:e2:1c:e6:e7:32:1f:9b:6f:83:f5:11:d8:8c:48:
         bb:51:cc:98:9a:7b:7d:58:97:c7:98:dd:d9:e2:7f:ef:50:5e:
         74:d8:aa:0d:c9:f0:7b:cb:34:b7:3d:13:2c:46:3b:10:3e:b3:
         9f:49:bd:72:29:f4:34:90:21:ad:e6:fd:b9:f2:e3:ef:d0:40:
         bc:a5:93:9e:1c:33:aa:b2:10:2c:9a:b2:aa:70:4a:92:93:2a:
         e0:23:66:2f:60:29:00:c6:5b:ab:3d:43:58:74:af:d0:bd:78:
         a1:64:06:af:2c:27:7a:77:fd:5a:3f:4f:74:8a:91:c6:f2:4f:
         15:33:45:23:89:42:4d:59:ca:a9:50:d6:d7:db:f8:ba:2d:79:
         b9:f7:cf:1c:4e:b1:dd:fa:72:55:54:2f:9a:38:0b:4e:12:e9:
         f7:54:8f:2f:3f:fa:e3:0d:1d:a2:98:9c:72:8b:b5:84:c4:ab:
         aa:45:75:7b:e4:26:58:7b:8e:b5:08:d1:b0:26:50:83:50:a5:
         f5:42:aa:45:4b:da:b5:ed:ab:38:ee:ca:e0:8a:55:51:46:af:
         14:54:68:1b:ca:29:0e:2f:ce:27:e2:59:46:ac:e0:13:b1:ef:
         fd:d7:f0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:30 2026 by rpki-client