This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          wZ1JyugDbmy4Qs6u2QDOLmnFuFZTxKr8y+gH+whKzW8=
Subject key identifier:   AE:A7:DA:86:12:87:72:19:0A:87:09:7C:BA:B0:F5:91:90:EA:09:89
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019C1C4C1D3060B78ED9548CDB84DDC2B35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          05AA
Signing time:             Mon 02 Feb 2026 03:01:15 +0000
Manifest this update:     Mon 02 Feb 2026 03:01:15 +0000
Manifest next update:     Tue 03 Feb 2026 03:01:15 +0000
Files and hashes:         1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
                          2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: 7jDNtWqNL5rYX/+ltAPmxGPPYyNO7xhiQiyiWXLe0GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4c:1d:30:60:b7:8e:d9:54:8c:db:84:dd:c2:b3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Feb  2 03:01:15 2026 GMT
            Not After : Feb  3 03:01:15 2026 GMT
        Subject: CN=aea7da86128772190a87097cbab0f59190ea0989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:d0:4a:4f:cc:eb:22:a6:ea:8c:8c:4b:a8:
                    18:8b:e4:3b:bf:57:99:7f:9a:40:2f:27:87:07:76:
                    e3:77:e2:8d:da:51:db:db:00:ee:0c:13:1b:62:45:
                    ee:d0:62:6f:40:d3:21:ce:a6:a3:6d:f6:78:87:43:
                    4d:47:d8:6f:dd:2f:69:0e:cd:64:5b:a7:28:75:ac:
                    44:bb:ef:44:e8:5e:a0:f2:53:c3:35:86:5d:a8:4b:
                    4d:da:04:b5:a1:8c:6d:bf:e7:f1:80:54:c7:9b:06:
                    d0:9a:ec:ca:04:0f:3c:3e:1b:32:ac:53:18:7c:3d:
                    cf:50:4e:a4:6f:cd:ef:18:d3:a9:22:d0:3a:8b:37:
                    6d:47:31:74:cd:cb:bf:37:ae:af:88:45:c3:a7:4a:
                    18:8a:0a:75:69:51:80:ce:9d:92:04:2d:32:32:d7:
                    0c:9f:7a:79:78:60:06:38:43:96:2c:dd:7b:97:5f:
                    bb:a0:c4:31:a6:81:57:98:20:9e:76:06:5b:26:06:
                    73:fb:39:4c:6d:9e:ce:97:71:08:7e:ef:1f:9b:2b:
                    d7:3c:15:d9:58:1b:2e:51:32:74:66:78:da:a5:8a:
                    bc:1c:6f:b1:b9:98:68:55:bc:09:b1:5d:27:53:dd:
                    1c:51:0d:56:0e:05:9c:fa:55:de:c7:fd:cc:fa:fa:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A7:DA:86:12:87:72:19:0A:87:09:7C:BA:B0:F5:91:90:EA:09:89
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a9:9e:24:06:77:55:06:c3:6f:5e:7d:e7:f9:9f:4d:ed:64:
         00:c5:c9:40:a7:7b:f2:05:1b:f2:ff:a8:da:12:ba:63:dd:b5:
         a2:6c:5b:46:b6:6f:43:1d:21:b2:30:80:5f:08:85:cc:35:d7:
         39:ac:21:3f:09:07:9c:ae:de:ba:a8:10:8f:c7:1b:63:e1:ae:
         bb:7e:24:7e:11:c3:0b:29:bd:2a:8e:fa:24:41:62:73:45:cb:
         ef:73:5f:72:1d:f9:ff:0e:63:d1:54:8f:69:48:68:b4:20:b1:
         77:76:14:48:72:9a:aa:85:d9:d0:ae:ce:86:97:73:19:ce:e8:
         b0:89:50:d1:bd:88:0e:21:2a:4d:8b:a4:79:b4:77:6c:8e:5f:
         8f:5b:16:9f:ab:04:1a:8a:5a:5d:82:7c:73:49:ac:1b:9e:d4:
         61:4b:0a:16:77:fd:62:f8:de:75:e5:f2:0a:b3:e1:10:8c:30:
         b6:f1:ca:67:37:90:89:53:fa:46:bd:01:11:84:d2:07:f8:3f:
         42:48:35:9c:c3:c8:f6:51:85:e5:0e:3c:16:55:cb:8c:6d:2f:
         74:82:e5:a7:de:6a:ba:8a:5c:23:ad:bb:cf:fb:52:51:e2:91:
         24:bd:cc:2f:8b:11:7c:91:83:eb:5a:61:61:06:3f:1b:fc:5d:
         40:bc:ae:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:31 2026 by rpki-client