This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File:                     SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier:          Gdp6TxwfY3+AhUi+EHuwurwT8nn+rr1PwCGKRCOL6UY=
Subject key identifier:   AC:23:B7:BC:86:BB:E0:4C:CA:C0:34:F3:88:18:FC:39:28:3F:D6:F2
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer:       /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial:       019C41D8960088B04F0F2018F8B42E32319A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number:          10C4
Signing time:             Mon 09 Feb 2026 10:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:38 +0000
Files and hashes:         1: IB9SPKJf1hxrd2KSGuACyZN7uFc.roa (hash: NYU4ucu/KEWsCULDRDB8CckdRivWVvULbQ16Mgwuhpk=)
                          2: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: Y2/obst/2mcYE6wk2KaXtQe7cQ72db6iwW/eH3dvRC0=)
                          3: kLsfwbiExk-WbYVvQTPj9NzS50c.roa (hash: aACPLDJWgIDelq1cz52tM9H01c1GSeDoQSNmQib+BvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:96:00:88:b0:4f:0f:20:18:f8:b4:2e:32:31:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a409555105040578cb296070074f45107252eeb
        Validity
            Not Before: Feb  9 10:00:38 2026 GMT
            Not After : Feb 10 10:00:38 2026 GMT
        Subject: CN=ac23b7bc86bbe04ccac034f38818fc39283fd6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:b2:08:93:1e:97:c1:3c:a8:ee:25:1f:e4:
                    ba:41:75:73:ad:b8:ec:b8:e3:f3:07:55:79:7e:9e:
                    7e:91:a8:54:97:0d:9c:81:19:6d:13:76:66:ad:86:
                    fc:02:87:64:3c:e3:06:50:26:49:f4:d9:4c:76:f1:
                    5e:18:16:72:36:ee:35:47:30:28:1c:3a:fc:13:02:
                    1a:95:82:f8:09:8f:dd:c6:f1:4b:ee:54:69:40:3d:
                    cc:d3:e7:00:89:81:6e:7e:dd:53:da:f3:39:9f:92:
                    49:d8:88:62:7b:24:3f:47:3a:ff:bb:fe:9f:09:e1:
                    29:27:66:74:b9:a1:24:dc:d2:3a:cf:ba:cb:90:74:
                    02:c1:3b:b8:3f:5b:33:36:c9:3a:7b:10:5d:e3:fc:
                    99:e6:c9:1f:23:4c:87:23:23:b1:df:fa:ea:ad:1d:
                    b5:d9:4e:c6:d3:be:94:9a:43:de:a8:80:9c:bc:58:
                    ea:c3:d7:02:bc:40:c2:98:a3:19:68:4d:58:ee:de:
                    6f:b2:fc:9d:40:54:15:cb:7e:a7:b1:e4:59:eb:49:
                    3a:71:a1:89:2e:90:79:f9:99:77:06:63:54:dc:8a:
                    ab:42:00:3d:53:55:6c:29:00:21:2d:a2:5e:2d:e9:
                    f7:7d:e6:23:68:c6:d9:ea:c3:58:71:64:ae:f2:aa:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:B7:BC:86:BB:E0:4C:CA:C0:34:F3:88:18:FC:39:28:3F:D6:F2
            X509v3 Authority Key Identifier:
                keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:70:15:a9:fa:43:f6:33:7b:c6:47:8d:a9:40:07:b1:95:03:
         22:b7:97:57:da:5b:cc:8b:c3:c1:95:77:05:b5:d5:e1:6b:39:
         9d:1c:a1:ea:8c:12:b3:67:5b:41:64:4a:0e:7b:ff:d3:c6:b6:
         ea:18:71:06:0f:fa:4f:f8:99:de:c3:1a:72:08:09:43:ff:df:
         d4:9e:fa:5b:d9:a8:11:48:ed:12:89:c3:80:4d:dc:2c:b0:68:
         00:54:ec:6e:a6:68:a1:fa:b0:6d:f8:fc:d5:97:8b:f9:2e:e8:
         2c:65:d7:dc:71:b3:33:ce:80:90:6c:94:7c:f0:be:d2:8e:d9:
         8f:bc:aa:fc:fc:4a:f3:f3:bd:25:9c:6d:ff:47:36:58:7c:51:
         7f:0c:b7:23:aa:cd:ae:05:72:a9:00:6c:aa:5c:14:b4:c0:70:
         3f:57:41:5a:c6:f2:d5:fb:84:c8:78:a7:1d:38:42:f7:aa:5a:
         04:6f:30:7f:14:ac:7b:fd:8f:58:71:4b:53:fd:c6:91:ed:13:
         82:a3:63:aa:9f:9e:ad:07:db:c4:6e:00:58:f3:7b:d8:6d:a7:
         1b:ec:89:e0:4b:97:0b:f0:96:64:7a:3e:d4:ba:c9:76:2c:f2:
         17:f2:35:34:c1:98:37:79:73:84:66:3d:c5:8c:f5:2e:25:b3:
         99:20:5e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:14 2026 by rpki-client