This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File:                     KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier:          2sso932Qs37EFBMgJaRJuAu7+S8H8UsFsgqCTrpOPnE=
Subject key identifier:   5E:EC:10:C5:DC:14:56:E6:8A:F8:72:AC:E6:B9:93:32:38:D2:BC:C6
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer:       /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial:       019C427DB0D51D2161957DA6FAE3C3104AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number:          0E15
Signing time:             Mon 09 Feb 2026 13:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:59 +0000
Files and hashes:         1: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (hash: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A=)
                          2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: bjqA6wkEWt4zxXv/myF1B/y49wJhLmgmf1cvKwwyHmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b0:d5:1d:21:61:95:7d:a6:fa:e3:c3:10:4a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
        Validity
            Not Before: Feb  9 13:00:59 2026 GMT
            Not After : Feb 10 13:00:59 2026 GMT
        Subject: CN=5eec10c5dc1456e68af872ace6b9933238d2bcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:9b:3b:6e:58:48:ae:2f:8e:02:fa:e1:ff:
                    d2:7a:f9:da:38:90:19:e1:7d:31:20:b6:55:07:aa:
                    79:34:0b:fa:f1:a7:43:56:83:5a:7d:d2:2f:fb:b3:
                    e4:64:45:37:ae:e0:39:02:5c:95:29:6f:50:10:f5:
                    6e:c3:90:5a:e0:46:28:50:3b:2d:6b:6c:58:5d:e9:
                    5c:21:fa:cc:dc:d8:73:66:5f:8c:1f:fc:17:e4:62:
                    4c:70:66:48:d8:79:7b:53:f7:df:60:a4:85:15:68:
                    9b:78:f7:cd:ef:62:23:41:ff:ee:11:98:bc:d1:26:
                    94:60:61:34:c7:59:bc:d1:9a:30:2e:ff:cc:88:85:
                    88:61:68:d7:6f:dc:18:3f:ee:e6:5c:53:b6:a5:ab:
                    8b:42:80:28:3b:8b:92:4c:4c:f6:b0:cf:80:cf:37:
                    06:03:d6:ae:55:39:94:d5:b1:38:ca:7a:a8:4b:a6:
                    4b:06:1f:de:31:a5:ec:c2:3d:59:a8:52:de:7b:91:
                    9d:01:d2:54:3f:c7:84:82:9d:c2:de:96:4f:c4:97:
                    2a:97:98:91:ba:f0:75:a8:5e:69:90:8c:88:88:73:
                    dd:a1:b5:16:ed:be:52:82:75:5a:49:d7:1b:10:2c:
                    80:4c:67:7d:c7:0d:18:62:ac:ec:65:fd:3f:a6:ec:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EC:10:C5:DC:14:56:E6:8A:F8:72:AC:E6:B9:93:32:38:D2:BC:C6
            X509v3 Authority Key Identifier:
                keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4e:00:fa:b1:6d:2a:d1:8a:66:0d:7b:0f:7c:59:51:9e:dd:
         7a:89:d0:e6:62:c5:79:a6:e7:5b:6b:e7:c7:b0:51:91:36:35:
         d3:55:cd:93:b4:71:95:f8:ac:7e:10:0a:85:81:d5:15:ee:a2:
         25:65:e1:22:cb:78:ba:37:14:3e:46:f9:bb:23:bb:b7:cc:96:
         e0:40:98:d6:2c:99:89:bf:da:6b:3f:00:4f:ea:97:b1:2d:fb:
         1e:c7:80:83:dc:ee:45:95:49:bd:1f:01:d7:17:87:ba:6c:e0:
         26:1c:5a:8b:e9:40:c5:cf:95:04:95:ed:20:7c:3a:90:8f:d6:
         ba:7f:2f:d3:b9:f0:7c:03:08:ee:8b:41:d2:5b:cd:29:92:58:
         99:d5:40:80:b8:2e:0c:78:d2:c7:d3:7d:e1:c6:f5:2e:9a:b3:
         df:b0:1e:ed:0a:3f:a4:74:5d:13:09:85:d5:13:4a:91:21:23:
         4f:0c:59:2a:b1:a3:f9:6a:06:8f:49:83:a8:75:fa:81:1b:3f:
         7a:cd:f4:f4:36:78:dd:54:2d:1d:52:42:c5:f2:4b:ca:fc:ad:
         7c:f9:87:10:3c:e6:cd:3c:90:13:77:cd:1e:4f:fb:9e:77:51:
         40:86:df:da:bc:29:ba:65:57:09:48:8c:30:86:fa:9c:a7:16:
         c5:36:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:41 2026 by rpki-client