This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File:                     klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier:          m/fApDMPH4c8QCVinozveXMtbd76p6dypLBY4+deJbI=
Subject key identifier:   5A:35:E5:2E:F8:6E:2E:2C:43:22:CD:0C:65:93:8F:FE:DB:99:62:1C
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer:       /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial:       019C42463D6D1398E5E4FD6B1D5F7E68D5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number:          17B0
Signing time:             Mon 09 Feb 2026 12:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:25 +0000
Files and hashes:         1: 6ivdGkU4JpcdJeEUFclfUNispsA.roa (hash: pfbQDLdc9UvvbTXv81c/HKOtEm0dsqUfCqMUxvYHjrw=)
                          2: jUX_vhLsNJhpUXEjgtoSuF2uodA.roa (hash: o1W7wQNf0dR0c9b2g7S/8vvQ6zDrm6Oqt0pOXFNL5ZM=)
                          3: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: IoXmYOUnmj5QvouNcljmY2mOyY/HnZStdHQsAbN6580=)
                          4: vIN44HyEP5wnRYxa1TMQU9fUKVk.roa (hash: UPxjEVREQVIYJdYxcduu/9fmVIgZHpDXz79ozRrZ6Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3d:6d:13:98:e5:e4:fd:6b:1d:5f:7e:68:d5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
        Validity
            Not Before: Feb  9 12:00:25 2026 GMT
            Not After : Feb 10 12:00:25 2026 GMT
        Subject: CN=5a35e52ef86e2e2c4322cd0c65938ffedb99621c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:bd:4b:85:d2:09:a1:18:c0:01:8c:07:f8:
                    29:72:66:c1:04:6b:18:3f:30:f9:c5:ee:92:28:f3:
                    5d:b8:c2:77:a7:f8:18:71:45:3d:61:df:b9:00:54:
                    c0:0c:bb:00:76:3f:7e:2e:e9:4f:1f:57:e0:a3:1b:
                    4e:a3:98:0d:a2:35:80:be:e7:f2:7f:2d:d3:45:5b:
                    17:01:ca:1a:ef:ce:ca:f1:ec:2d:41:6f:49:de:b2:
                    78:76:93:30:64:a6:cd:ba:6c:3d:c1:f8:fc:98:14:
                    36:e4:39:3b:23:e0:21:3a:f1:45:8a:7b:91:b3:b9:
                    16:1a:76:8a:26:3e:3d:eb:ed:54:bf:73:94:9d:47:
                    cf:1b:43:2f:04:ad:31:0d:c4:6d:54:b1:cd:47:23:
                    42:1e:fd:ce:d3:01:b2:c6:4f:bd:62:18:99:c0:10:
                    e8:a1:f1:b3:3a:b7:24:e4:03:cd:26:7e:1f:60:c0:
                    4d:ba:84:45:cf:8e:1b:fe:4b:eb:98:6e:f9:b5:e7:
                    b8:06:59:91:e5:5f:40:d2:28:a1:0e:a4:e3:eb:79:
                    ff:d9:6f:57:14:c1:03:4c:a3:df:9a:99:e4:56:7d:
                    a5:66:b8:b4:3c:1f:06:a2:ab:43:f2:75:52:d8:62:
                    df:5d:ba:6b:db:87:a7:4b:e0:59:d9:6c:dd:e1:0e:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:35:E5:2E:F8:6E:2E:2C:43:22:CD:0C:65:93:8F:FE:DB:99:62:1C
            X509v3 Authority Key Identifier:
                keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:a3:67:fa:8f:f2:20:e9:96:6a:e2:10:0f:f1:7f:32:b8:
         cc:82:c5:cd:ec:f8:fc:67:9d:39:ab:65:8c:d4:06:4e:f6:5c:
         70:31:18:32:0b:90:c3:17:25:f0:d2:18:23:79:f8:b1:95:b8:
         98:d0:90:cb:b0:0d:6f:89:79:9a:ba:33:7d:cb:43:a3:86:81:
         c5:b0:51:8a:5a:04:4e:5a:d0:38:9a:f7:5d:f2:2e:0b:b2:32:
         99:78:fe:4f:c4:0d:5e:8b:c4:57:5f:95:84:ad:b2:ee:ad:35:
         2f:12:17:d4:b2:e8:2b:91:02:4d:2f:c7:20:af:33:1e:b0:ad:
         c3:2a:27:11:f5:20:17:4f:36:b1:e6:6d:5f:6b:78:ca:2c:d2:
         df:0a:c4:f8:5a:e7:a9:74:1c:89:f0:fc:34:0d:dc:26:c3:46:
         95:ba:2d:28:a1:07:54:1b:37:e1:e4:80:98:19:ce:50:6c:69:
         66:fa:6e:05:86:55:05:f3:2c:7f:fd:9d:37:9b:fa:c3:7b:06:
         53:a2:5a:0b:2a:43:ac:fd:98:00:43:c4:5a:9c:fb:18:76:2e:
         ae:a6:38:44:ec:69:0f:c1:b2:a8:27:21:42:d0:ce:6f:b9:6e:
         fc:8f:87:9b:29:64:8c:50:37:0c:47:64:9b:04:4d:af:cc:1d:
         83:9d:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:38 2026 by rpki-client