This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File:                     kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier:          gaCmK2HgPXJMe/p3a6MEYPaKcEJcoarMav4qzUvBOyA=
Subject key identifier:   89:DD:C7:1B:60:BE:D6:C2:95:92:D5:02:29:E8:86:3B:BA:7F:46:51
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer:       /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial:       019C45475A85AB583D2456B4B65D907AC862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number:          1812
Signing time:             Tue 10 Feb 2026 02:00:29 +0000
Manifest this update:     Tue 10 Feb 2026 02:00:29 +0000
Manifest next update:     Wed 11 Feb 2026 02:00:29 +0000
Files and hashes:         1: 4nwTdSMvC3B2lG2I0a3z0eITR_U.roa (hash: 4Uf7fHPsn5qiTNzR/kEHf1yHK5kxq37/oLZT2/BjakQ=)
                          2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: pw1JI7ka0B2JrtlV8QtCzBa998kpb3/usnlEGvJYiEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:47:5a:85:ab:58:3d:24:56:b4:b6:5d:90:7a:c8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
        Validity
            Not Before: Feb 10 02:00:29 2026 GMT
            Not After : Feb 11 02:00:29 2026 GMT
        Subject: CN=89ddc71b60bed6c29592d50229e8863bba7f4651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:c4:c7:94:e1:d7:17:96:4c:fe:b3:ab:c3:
                    11:6b:e4:7b:7e:17:76:b4:a5:d3:4e:2e:7d:16:04:
                    45:12:25:37:78:09:1f:9a:98:1c:72:ee:e8:18:da:
                    fe:10:d2:4e:ac:e1:1d:a9:22:c9:39:49:d4:5f:eb:
                    8d:5e:45:34:4e:9b:34:95:f0:9e:8a:74:4b:05:e9:
                    45:31:80:05:96:cc:11:86:76:02:5e:62:64:57:18:
                    51:54:a7:49:56:97:56:fb:72:71:f0:eb:dc:1e:fb:
                    71:7f:1a:7b:6b:79:2d:1d:a3:37:de:2b:02:e2:11:
                    60:28:de:f3:19:ba:51:39:56:91:e2:6f:26:8b:7c:
                    11:90:48:ff:ac:7c:c0:f5:c3:2d:b7:41:f5:87:2f:
                    d8:32:fc:64:f7:8e:95:fd:f8:ab:f6:07:2e:2f:95:
                    a9:ab:67:8b:76:05:c5:11:06:46:eb:c6:3a:bb:6a:
                    69:a0:89:4e:04:73:97:64:c2:ba:24:2e:c6:e4:27:
                    2f:cb:b4:9b:29:0e:6e:ba:bb:7b:e7:4d:66:6f:24:
                    8d:41:9f:6e:70:57:40:20:59:c1:cc:db:c4:62:0e:
                    83:7e:86:25:c5:b6:d7:46:90:b4:63:cf:04:35:cf:
                    3a:c5:42:d5:0e:f1:80:24:3b:ff:c6:14:61:ee:57:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:C7:1B:60:BE:D6:C2:95:92:D5:02:29:E8:86:3B:BA:7F:46:51
            X509v3 Authority Key Identifier:
                keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:79:a6:97:e6:8d:61:f5:d5:f8:76:92:fb:5b:16:90:c3:07:
         27:07:f4:ea:91:81:1c:9f:5a:c8:73:1c:57:03:f9:4d:73:59:
         b0:30:0a:67:45:37:24:b0:d4:4c:8f:60:ce:8d:20:2d:2f:ff:
         39:00:ae:e2:5a:ab:ef:48:28:2d:cd:d1:93:a4:3e:ef:92:68:
         37:b4:59:1c:97:12:2e:06:18:95:0a:e8:27:c6:a6:c3:e3:bd:
         26:5b:2c:4b:e2:44:d4:98:d5:fa:cc:49:67:ab:84:39:0a:79:
         bc:05:a0:55:ad:d6:41:bc:f7:0a:09:37:d5:39:6f:ee:88:6f:
         23:34:72:ad:e2:a2:af:55:2a:f0:a8:77:39:45:df:f4:11:7b:
         7e:40:a9:df:4c:4f:39:b6:cc:89:3b:d5:18:20:26:eb:c3:54:
         46:bf:9d:1b:cc:b5:40:09:32:c1:0c:a4:3f:d6:56:39:d9:8b:
         77:80:93:42:20:c4:87:fb:45:fe:d1:6c:82:b6:32:64:40:85:
         fd:64:98:40:fd:ec:ec:eb:0b:ba:f4:43:c3:d7:bd:74:3a:5a:
         1d:86:3a:9b:f7:5f:98:57:7a:ca:3b:84:1d:e9:b3:98:44:f2:
         f8:04:cf:fa:69:6a:a8:23:de:35:42:d7:51:9f:a6:28:60:6e:
         1b:aa:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:04:03 2026 by rpki-client