This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File:                     KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier:          0/wgQL/YgRNRfNLOBi60Bp9DgN57bcuILpwQdJCaELQ=
Subject key identifier:   AF:3B:2D:70:59:6D:B3:D4:18:A3:4D:75:BF:2F:9A:10:63:BC:CE:F7
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer:       /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial:       019C43C6B385141F211B86EDD70799151951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 19:00:21 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:21 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:21 +0000
Files and hashes:         1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: Urx14SnReUaju55DNw48KnSmnfB7dMfiBNiSOgOp8NY=)
                          2: XnmFvaH8taj9-UQymlF1F-zbxKk.roa (hash: iMSxnmP+UiVDMZfufDMB7BaA1JQlHS+89CnU1xCpzVk=)
                          3: cUEUQmxnQKASDEmjBqqPI8qU0NE.roa (hash: hTXL3jAiDQJw6uD/ei84eZq2mv/QVCCWrUoL9YV6zhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:b3:85:14:1f:21:1b:86:ed:d7:07:99:15:19:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
        Validity
            Not Before: Feb  9 19:00:21 2026 GMT
            Not After : Feb 10 19:00:21 2026 GMT
        Subject: CN=af3b2d70596db3d418a34d75bf2f9a1063bccef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:ad:50:a5:74:b7:0e:c7:77:54:70:92:f3:
                    fa:1e:33:27:7d:ce:4b:62:8a:f1:3d:ab:16:54:a4:
                    88:9e:26:cb:8e:69:3d:cf:1f:8c:07:eb:bb:00:c0:
                    31:5b:e5:87:43:e1:a1:22:7d:b2:38:c2:9a:f3:94:
                    94:54:c6:d3:c3:7c:c8:9d:06:06:23:92:57:12:29:
                    4a:22:02:64:90:30:5f:40:01:9e:da:f8:37:46:42:
                    8b:fc:2f:7b:d8:88:e1:3a:8a:78:52:c2:1f:da:d6:
                    3e:bf:87:8f:5c:e4:82:ef:5e:0d:98:3c:15:77:2c:
                    8a:56:19:75:1d:60:a2:19:1a:0b:d1:57:7a:3e:23:
                    8d:2a:d9:6c:99:eb:bf:b7:31:13:fa:68:04:0e:aa:
                    22:4a:e8:39:fe:94:af:0b:1a:cd:47:b4:f6:ef:08:
                    fd:93:01:95:a7:16:12:8b:af:25:96:fd:73:27:12:
                    be:d8:75:cc:bf:31:c2:8f:33:2d:44:21:26:87:48:
                    37:5c:db:f7:b8:e7:ba:d7:ec:42:17:4a:2e:c5:7f:
                    8f:1b:b5:ad:91:a5:99:17:a4:b0:79:55:31:fd:be:
                    bd:11:a8:e4:a9:28:5c:79:b9:24:fe:3b:de:34:c3:
                    f5:48:5b:4c:b9:ec:b5:2f:f3:6d:45:8b:9d:03:72:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3B:2D:70:59:6D:B3:D4:18:A3:4D:75:BF:2F:9A:10:63:BC:CE:F7
            X509v3 Authority Key Identifier:
                keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ff:ef:ef:1f:ad:ce:8f:f0:c0:fa:28:9f:1f:66:11:c8:c3:
         4b:83:55:d7:8b:e2:d0:ed:83:4d:84:d1:59:b1:1b:2e:5d:35:
         e8:3b:ea:29:ee:58:0d:39:29:10:03:3b:95:17:57:74:2c:63:
         43:ec:21:28:aa:b6:af:cb:9c:2a:e8:33:6c:69:70:4c:d6:b5:
         d2:79:4d:97:d2:9a:e7:f9:6a:4c:fe:f5:78:70:a8:2f:a0:48:
         d0:91:ca:32:73:74:94:31:7e:f6:1c:33:03:de:c9:e3:eb:32:
         ea:22:24:90:c1:2f:ec:d8:97:ec:78:95:66:dd:8d:0b:8d:b2:
         1c:8d:d3:57:40:6c:b3:7b:ae:bf:77:83:e0:f3:5f:6b:c1:58:
         ed:51:e3:23:3a:ba:c1:0c:8e:39:df:7c:74:b5:ac:1e:a5:70:
         aa:57:f2:7e:f7:ff:cb:53:59:bd:64:86:43:04:38:26:b5:67:
         0c:91:57:96:cd:d8:05:be:71:2b:03:64:d1:bc:ac:4a:44:82:
         90:6e:b9:32:1e:05:09:37:4e:00:ad:b2:65:8c:db:82:ab:58:
         f7:b6:05:8a:6f:59:95:aa:8f:12:59:a0:28:10:8d:b0:16:25:
         26:07:03:eb:c1:dd:1b:78:39:a9:84:df:17:27:c0:80:ba:ee:
         f4:53:ca:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxrOFFB8hG4bt1weZFRlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm
ZWUyZWMwHhcNMjYwMjA5MTkwMDIxWhcNMjYwMjEwMTkwMDIxWjAzMTEwLwYDVQQD
EyhhZjNiMmQ3MDU5NmRiM2Q0MThhMzRkNzViZjJmOWExMDYzYmNjZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsietUKV0tw7Hd1RwkvP6HjMnfc5L
YorxPasWVKSInibLjmk9zx+MB+u7AMAxW+WHQ+GhIn2yOMKa85SUVMbTw3zInQYG
I5JXEilKIgJkkDBfQAGe2vg3RkKL/C972IjhOop4UsIf2tY+v4ePXOSC714NmDwV
dyyKVhl1HWCiGRoL0Vd6PiONKtlsmeu/tzET+mgEDqoiSug5/pSvCxrNR7T27wj9
kwGVpxYSi68llv1zJxK+2HXMvzHCjzMtRCEmh0g3XNv3uOe61+xCF0ouxX+PG7Wt
kaWZF6SweVUx/b69EajkqShcebkk/jveNMP1SFtMuey1L/NtRYudA3IwwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK87LXBZbbPUGKNNdb8vmhBjvM73MB8GA1UdIwQY
MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt
MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3
LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZP/v7x+t
zo/wwPoonx9mEcjDS4NV14vi0O2DTYTRWbEbLl016DvqKe5YDTkpEAM7lRdXdCxj
Q+whKKq2r8ucKugzbGlwTNa10nlNl9Ka5/lqTP71eHCoL6BI0JHKMnN0lDF+9hwz
A97J4+sy6iIkkMEv7NiX7HiVZt2NC42yHI3TV0Bss3uuv3eD4PNfa8FY7VHjIzq6
wQyOOd98dLWsHqVwqlfyfvf/y1NZvWSGQwQ4JrVnDJFXls3YBb5xKwNk0bysSkSC
kG65Mh4FCTdOAK2yZYzbgqtY97YFim9ZlaqPElmgKBCNsBYlJgcD68HdG3g5qYTf
FyfAgLru9FPKhQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:09 2026 by rpki-client