This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File:                     kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier:          7ZJRsQ5UnO7RfG1x4J4f2tS8EtkYK921rFzEuRmK0JA=
Subject key identifier:   58:7C:23:75:CA:57:9A:A4:E1:A9:1C:53:8F:E9:30:19:65:FF:1C:73
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       019C4547C354490DEDF2479CD87852B27227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number:          0BAF
Signing time:             Tue 10 Feb 2026 02:00:56 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:56 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:56 +0000
Files and hashes:         1: 96d6ctMX_g4ONOX-V119IuFLbcQ.roa (hash: p56ITbnJXhBydcF7z+SEtTfhLoTMh1wjVprKGq7AA5g=)
                          2: IQ8FAOOJByrHSMChSBlZ88iHvt0.roa (hash: lJpaXIYxGHP0owQ3ZjIzWZPx1+jN3QXVVl27UeQeST0=)
                          3: kELVwZs5SaLQrab9sap9Xcmgflk.roa (hash: gOv2sEEdNVSjrYd0iMOFCkOEFxapFPoF2zX1OSgF1Vc=)
                          4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: Xj827Wt1PyWS8YJ4+PSto7XjjWTzSEeVjPlfGRUtc/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:c3:54:49:0d:ed:f2:47:9c:d8:78:52:b2:72:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Feb 10 02:00:56 2026 GMT
            Not After : Feb 11 02:00:56 2026 GMT
        Subject: CN=587c2375ca579aa4e1a91c538fe9301965ff1c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:ca:76:52:96:8d:da:6f:ed:b4:a7:9c:82:
                    fe:63:ee:36:a7:e2:3d:40:f6:00:d7:d1:a6:05:fc:
                    94:e4:cb:ea:b4:76:11:38:58:13:31:98:5b:57:86:
                    d1:9e:90:b6:f7:6c:19:24:73:c8:75:ad:00:2d:e9:
                    b2:ce:15:8c:3b:dc:06:c4:55:5b:4a:76:9e:f4:57:
                    48:1a:3d:cc:75:74:9e:9f:4a:94:57:60:03:a0:47:
                    89:02:22:59:d9:f3:8d:08:cb:34:96:95:14:3b:2c:
                    18:39:de:5b:6c:e8:62:16:60:0e:91:93:f0:47:02:
                    f0:5f:a8:be:2a:0d:ca:fa:84:6f:a3:3f:58:f6:c8:
                    20:41:1b:f5:70:19:82:eb:59:ab:41:d7:3d:66:e7:
                    d9:c0:d7:70:4f:c4:cc:f0:18:64:82:60:4a:38:07:
                    bd:e3:ba:20:3e:00:44:e2:74:68:f2:4f:bc:e4:56:
                    f7:1b:59:09:0f:aa:3e:b3:02:86:4c:a1:c5:26:41:
                    cf:b0:52:24:08:96:2f:ee:6b:9a:bd:65:47:6e:a2:
                    5a:d2:76:17:ff:32:a5:62:39:de:86:66:80:ef:48:
                    93:9f:9a:5b:81:87:6c:dc:93:b2:32:1e:0b:20:de:
                    4a:ff:58:29:29:fc:0b:99:d0:5a:3d:25:f4:af:73:
                    f8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7C:23:75:CA:57:9A:A4:E1:A9:1C:53:8F:E9:30:19:65:FF:1C:73
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:39:14:45:6a:2d:47:cb:8b:99:4c:83:84:a1:c5:c9:16:
         f0:19:72:15:e2:27:f4:90:5e:3a:42:a1:22:63:d7:1c:b2:29:
         07:a5:2e:6d:40:30:7e:4b:02:77:b5:a2:9a:1e:f6:73:48:69:
         e6:53:31:e5:9c:d0:9c:89:22:e0:e4:57:a7:72:fd:fc:8b:8c:
         8b:44:1c:f6:de:44:7e:e2:c5:ae:01:98:ab:7d:cf:55:f0:b2:
         6f:49:5a:80:a0:0b:3b:e3:b0:0c:cf:3c:e2:7f:70:93:4e:4a:
         e0:1f:16:e8:3e:3c:c6:b2:aa:9a:bb:ef:56:ee:93:00:16:a0:
         cb:16:f0:cb:cc:f0:47:a8:a9:44:90:ce:35:9b:27:ec:17:9b:
         72:4b:0c:0f:25:52:1a:df:10:a3:6e:2a:f5:8d:f4:1c:4e:ba:
         c8:cd:36:41:52:24:75:c0:e8:87:a0:5a:45:6b:93:99:0f:86:
         ec:62:53:66:14:68:2f:d4:fc:5b:66:30:e7:6d:d9:3c:d2:e8:
         9e:d1:bc:0b:fb:f1:0f:31:06:83:3e:f9:43:71:ff:5b:00:7b:
         2b:97:c7:06:27:66:81:31:ef:41:15:16:12:95:6c:ab:bf:9e:
         60:e8:48:8b:92:7b:1e:bb:ad:68:0c:e2:d1:58:47:59:b0:93:
         b7:12:ea:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:35 2026 by rpki-client