This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File:                     kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier:          xk6qJl5kd0Yd79SS5SGHCyOQ2lLGEB9N8NaQVX6sxUI=
Subject key identifier:   31:89:EC:C1:B6:36:39:FD:EA:A4:5B:57:21:F3:81:3C:ED:14:98:25
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer:       /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial:       019C4434889BE159FC8C71B2A88DB354AA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 21:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:19 +0000
Files and hashes:         1: Rh1jP8TT0D5DQyewHt3WNVRetYg.roa (hash: +Z1++BSabnl+/JfrPmXmRibZf7uuXCCwxkF76/QL4Zw=)
                          2: gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa (hash: JnttzcUryU3xosibqHjelq7W7OqvhTZhKK40TmRyAXo=)
                          3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: 6wB8HW8zntMVLLUhY5QCANlQwTE6Jd6yDCrIpzm+vCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:88:9b:e1:59:fc:8c:71:b2:a8:8d:b3:54:aa:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
        Validity
            Not Before: Feb  9 21:00:19 2026 GMT
            Not After : Feb 10 21:00:19 2026 GMT
        Subject: CN=3189ecc1b63639fdeaa45b5721f3813ced149825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:04:b2:62:31:ba:1b:bc:3b:58:22:c3:d1:
                    f3:de:65:36:46:f4:fa:16:7d:a1:ce:03:21:a0:59:
                    cf:61:93:db:34:ed:ed:19:00:90:b9:2c:a4:44:1c:
                    58:1a:80:50:4b:19:1e:db:08:2e:3b:bf:b4:63:b9:
                    12:15:6a:73:e0:f1:c9:ba:71:0b:86:60:74:40:1e:
                    48:e8:a1:ea:77:5d:cf:b5:28:16:87:be:0d:51:a5:
                    80:eb:1c:e2:3d:56:aa:60:6b:56:5a:62:0a:80:ef:
                    f7:70:80:59:7e:9d:95:1d:cc:30:92:58:85:fd:26:
                    79:e9:7a:46:f7:f5:fa:17:e1:f4:aa:36:f3:c8:47:
                    a3:4e:58:c3:1f:47:3f:1a:b3:d4:b6:f3:32:78:3c:
                    e9:a4:f2:ac:f5:da:5a:7e:90:32:a2:4e:ba:30:18:
                    4c:cc:3e:22:90:2e:dc:4b:ed:25:b1:76:02:33:94:
                    15:b0:f2:a1:a7:54:d5:c7:bd:26:2a:93:1b:63:8b:
                    2a:d0:2e:01:9a:47:92:2b:14:40:bb:d7:7c:0a:b5:
                    83:2f:7c:46:b6:c9:1f:c8:13:0d:de:ae:e4:53:d7:
                    85:c6:50:cd:41:c9:26:d3:ce:9b:3a:d5:47:52:48:
                    16:a6:c7:67:62:30:87:42:1f:16:2e:fc:09:e7:30:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:EC:C1:B6:36:39:FD:EA:A4:5B:57:21:F3:81:3C:ED:14:98:25
            X509v3 Authority Key Identifier:
                keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fd:f3:b6:c6:08:a6:81:c2:03:a2:5f:84:51:26:41:7a:1e:
         da:be:ff:53:2e:98:66:e6:5a:ad:0e:3e:e0:63:33:06:ab:73:
         8b:1c:d7:dc:22:ca:96:84:92:f4:2d:39:8a:94:ef:ad:0f:7b:
         a8:eb:0c:c8:43:37:b6:3b:5b:df:69:bd:74:73:1e:dc:a4:36:
         13:37:92:d0:e0:b7:40:3b:81:2c:2e:dc:58:ce:c8:1d:3c:b7:
         ab:83:58:04:06:4b:4a:e4:47:5c:7e:dc:67:d1:7d:71:50:87:
         61:ad:dc:57:29:9b:ca:f0:32:4b:7b:f6:46:a7:fa:0a:c4:1c:
         a1:b0:21:82:ea:ec:b2:2d:a3:1a:24:02:3a:dc:37:4a:2c:4d:
         78:55:75:90:40:1e:36:21:81:05:1d:6f:fa:29:6a:45:b6:dd:
         c3:11:da:8a:02:31:93:ff:50:fd:c0:f0:9f:a9:94:ab:03:f6:
         ef:0f:33:9b:f4:ae:26:ba:4e:d7:3e:54:33:08:4e:3e:89:74:
         ae:66:62:99:a0:69:c8:d0:67:7c:50:9b:64:c6:0f:0c:50:c3:
         d6:f1:f6:ab:9e:cf:1b:d6:b9:ab:f3:cf:8a:82:9f:71:35:2b:
         8c:c0:dc:34:3c:33:42:d7:5c:78:fb:59:a3:81:a6:93:de:7a:
         7c:5d:cf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:55 2026 by rpki-client