This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
File:                     pk-mS7PC3keIMGMSxlLedJ7JNRc.mft (raw, json)
Hash identifier:          e7QKCVo2NSgClcOJEXPy/0yvbV+H3R9Cq1MxQD8iVHg=
Subject key identifier:   4C:E7:2A:AD:23:78:53:75:F3:3B:A2:F5:11:66:EE:16:21:C5:CE:49
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Certificate issuer:       /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial:       019C427DBEC29776F05D01F1C93C9FF69C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
Manifest number:          114F
Signing time:             Mon 09 Feb 2026 13:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:02 +0000
Files and hashes:         1: 4EuRKSkKUxM9egQ_E38-x94Ksco.roa (hash: UdHRPePKPZnpsN+r8FKLka1rl4iNea1vYZ/8ObiBtN8=)
                          2: pk-mS7PC3keIMGMSxlLedJ7JNRc.crl (hash: IG1Vjb2XC6D7JIi6qwMD6cV6g7mXi2NiCBdSGQJsUaQ=)
                          3: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (hash: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:be:c2:97:76:f0:5d:01:f1:c9:3c:9f:f6:9c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
        Validity
            Not Before: Feb  9 13:01:02 2026 GMT
            Not After : Feb 10 13:01:02 2026 GMT
        Subject: CN=4ce72aad23785375f33ba2f51166ee1621c5ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:f7:5b:87:a4:7d:f7:a3:4e:d2:59:bf:23:
                    4f:99:85:e2:10:29:c4:1f:06:d4:fd:0b:2c:d3:0b:
                    08:70:3c:0a:5a:04:70:7b:17:5b:7c:f4:9d:66:85:
                    9b:dc:d2:e7:84:6b:2c:8f:80:ab:99:c2:8a:d9:64:
                    36:4e:81:f0:ad:9b:96:d7:81:eb:ec:8f:20:3f:c9:
                    ae:0b:75:51:ea:92:89:56:32:d2:50:e3:df:1c:76:
                    d3:81:0d:32:19:4c:f4:75:24:ce:05:0f:2a:7e:96:
                    70:3c:21:df:88:b3:08:07:ea:04:81:25:87:a3:b3:
                    57:47:5f:46:63:d7:e4:d6:bd:f8:d4:fb:5e:cc:b7:
                    66:91:82:7d:b2:e1:e8:f0:d1:a2:44:bf:19:5b:66:
                    3b:b3:d7:08:e4:2e:dc:71:18:29:d3:22:4c:71:6a:
                    7e:60:75:3f:cf:5c:b6:78:dc:cf:7c:96:66:22:14:
                    8c:9d:91:df:03:74:55:65:d2:59:39:b2:b4:37:fc:
                    c7:fc:1a:82:c1:fc:1f:54:3e:16:18:12:aa:e7:90:
                    fb:8b:df:75:99:9c:e7:97:79:2f:f2:7f:cb:39:c8:
                    38:df:a6:f1:e1:af:59:e4:63:f0:49:9f:4f:82:ef:
                    ae:52:5b:e7:f2:14:43:29:da:f5:64:e5:1f:2f:ab:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E7:2A:AD:23:78:53:75:F3:3B:A2:F5:11:66:EE:16:21:C5:CE:49
            X509v3 Authority Key Identifier:
                keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:0e:6d:67:dc:15:d8:d5:05:37:f9:a6:b0:e9:97:bc:5a:c3:
         f4:95:1d:aa:1c:95:c8:82:da:1a:29:39:e0:fd:94:06:0a:08:
         b0:bd:4c:fb:46:68:95:f5:63:4f:b5:1d:b3:ce:f5:76:ef:98:
         11:ee:8c:fe:69:cb:f4:f0:52:ea:ad:fc:c0:3b:d6:fd:d1:60:
         3e:1c:f4:d6:35:ff:26:0c:0a:60:a7:1a:d3:46:0e:35:d1:5e:
         40:88:bc:b1:5e:dd:2d:e8:62:75:e1:c4:94:4f:33:94:36:e4:
         f0:7b:65:5c:f0:e0:d8:bc:3f:24:38:cf:1b:d2:f8:7c:1e:ba:
         61:81:56:71:88:cb:f9:1b:b9:85:93:1e:98:36:93:04:30:9c:
         29:bf:ff:7c:88:bd:22:88:d7:54:0f:48:6d:25:50:71:7e:4a:
         c0:f4:48:22:eb:32:da:f0:89:d1:00:2a:e6:c2:8d:96:71:8b:
         b6:4a:0a:7b:04:06:dc:e1:6f:19:c5:18:b5:ec:cb:c4:f6:8b:
         64:85:f5:c7:bc:ee:39:61:45:0e:5e:0e:b5:ca:0e:eb:1a:1c:
         ca:63:5b:c2:fe:f4:c0:7b:22:86:61:16:46:63:ab:52:8c:b0:
         94:fb:b8:ec:4c:a2:14:b6:28:38:58:0f:b6:25:04:ce:ea:50:
         d5:ff:cc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:37 2026 by rpki-client