This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File:                     ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier:          SgpargkKjglfm8R7Qd/jOynzyQ1evjZ/nI1/tLXWJCg=
Subject key identifier:   FD:6D:74:45:27:F1:61:C3:FE:9B:4A:87:29:A1:FF:4A:A6:05:05:DE
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer:       /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial:       019C416ABAB7CB600A53F00027EDD1A34D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number:          04A6
Signing time:             Mon 09 Feb 2026 08:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:39 +0000
Files and hashes:         1: 6XhRNflwuCiYF9gQ2g_easWtUa4.roa (hash: yHoCFnKYnwnTFsYyGnaFZYpzrID8T0Yi654/H4Ihcpg=)
                          2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: dn3mAlUNYWdugaBseuCpjssLTVtfwQaS+WY7nwTzbio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:ba:b7:cb:60:0a:53:f0:00:27:ed:d1:a3:4d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
        Validity
            Not Before: Feb  9 08:00:39 2026 GMT
            Not After : Feb 10 08:00:39 2026 GMT
        Subject: CN=fd6d744527f161c3fe9b4a8729a1ff4aa60505de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4c:d2:b5:2a:d1:d6:67:55:04:b3:b1:90:a3:
                    b8:00:24:54:91:0d:5c:5a:c0:7c:65:31:06:ec:f4:
                    21:37:9b:86:2a:9e:a7:98:eb:df:cd:38:84:5b:c5:
                    3e:58:df:29:8f:8d:83:81:16:58:1c:71:86:18:cd:
                    b1:eb:19:d2:d8:12:a1:53:7a:ce:10:b6:2c:ad:0b:
                    52:61:bf:2c:3f:96:6e:24:b4:e5:44:7c:45:86:2f:
                    3b:32:55:7f:b9:82:27:dc:db:95:a7:5a:ef:f7:5f:
                    28:15:11:83:07:ae:43:df:da:81:0a:13:86:e3:4a:
                    ca:e0:f3:a1:2c:2e:8a:f2:2c:13:73:c3:ab:e4:94:
                    d6:7c:32:c0:3f:e1:80:36:60:d0:37:cb:d4:25:1a:
                    64:27:04:8f:b3:28:c1:51:2c:33:02:3d:0e:bb:ce:
                    3f:77:6c:fe:23:50:af:21:14:22:1f:2f:86:af:f1:
                    35:90:bd:6d:1a:48:fd:f9:b6:3c:e1:e5:c1:e2:e4:
                    c3:32:d1:f1:6b:d1:39:01:50:29:cd:7e:bc:3c:9a:
                    5f:66:7a:e9:26:37:d3:87:12:94:40:b7:a7:87:af:
                    85:f0:6b:12:d9:e1:72:f6:41:86:a5:70:c2:8d:50:
                    f7:64:1e:87:f5:2b:cd:ec:9d:16:c7:a2:8e:77:34:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:74:45:27:F1:61:C3:FE:9B:4A:87:29:A1:FF:4A:A6:05:05:DE
            X509v3 Authority Key Identifier:
                keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:40:80:d1:1d:f1:36:04:54:58:af:ba:40:45:a1:fa:a8:9d:
         3f:0d:c4:85:2b:e6:de:9b:4c:72:ea:12:91:ac:54:27:b7:35:
         09:3b:e0:9b:f2:68:2f:21:35:9a:16:81:68:b2:3e:6f:96:f6:
         a8:c9:6b:17:f0:01:a1:2f:08:17:db:dc:b7:ce:e7:bf:41:6b:
         5c:38:04:ce:5e:6c:cf:f2:e5:78:01:f8:ae:a4:a3:60:07:98:
         fa:be:75:6f:b7:de:dc:ed:55:21:51:cc:43:c1:d8:49:dc:9e:
         a9:99:a7:29:c1:32:85:c9:2c:1c:72:89:c5:d8:4b:f6:8a:72:
         f1:d9:a8:07:3a:50:e1:f1:7e:36:85:f5:a7:50:81:6d:c2:97:
         00:c5:53:d5:98:72:86:f7:35:0a:85:0c:23:af:7e:75:87:bb:
         22:51:99:c7:45:ba:67:62:04:9c:b2:07:49:26:ec:1b:71:8e:
         73:1a:a1:1f:5a:a9:22:7e:3a:63:ec:cb:cb:5f:06:f6:f6:c8:
         b4:bb:b5:08:6d:50:10:c7:3c:53:fc:03:0b:91:7e:4a:f9:76:
         d6:54:d6:92:e3:9b:8e:37:b8:78:65:4a:14:0a:49:7c:d5:0d:
         76:4d:98:32:4a:e8:f6:2a:9f:a4:f9:2a:b0:e2:a1:73:f6:1a:
         db:c9:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:28 2026 by rpki-client