This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          JDKYKLMaHjC45dxYrPdlfK6y7rPmyfVbutMva6DQxf4=
Subject key identifier:   BE:C0:6C:7B:A0:C1:77:60:18:D0:06:21:8D:7F:E1:2F:C6:87:60:BE
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       019C42EB33F3A6DF9B946736B84F48543B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          1736
Signing time:             Mon 09 Feb 2026 15:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:36 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: 1/BSLm0GC5FYIyiq8kl2nPyHN9P1hJhdSDS3d9kKl+s=)
                          2: zOvOdvEFDu9Mo4Hd8BTTn_Gseog.roa (hash: i7r8dEO0PV70SWBxos0ykVviEGzZou2X66tLzrHIOKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:33:f3:a6:df:9b:94:67:36:b8:4f:48:54:3b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Feb  9 15:00:36 2026 GMT
            Not After : Feb 10 15:00:36 2026 GMT
        Subject: CN=bec06c7ba0c1776018d006218d7fe12fc68760be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:01:01:91:0f:7c:91:0c:62:5d:09:bc:83:
                    95:1c:3e:06:23:29:d8:e1:8b:0b:24:8e:f1:2c:26:
                    5e:40:11:01:13:52:4c:e6:ec:f3:9b:d0:94:cb:8f:
                    95:0b:65:4f:1b:60:e4:9c:c3:f7:cf:cf:03:2f:32:
                    8b:e3:f1:14:4a:52:66:59:a8:5b:05:86:ef:d1:6c:
                    3b:94:0e:13:ab:11:f3:4c:31:63:7c:0b:34:4d:de:
                    e3:ef:c5:86:4a:db:59:86:69:d6:88:ba:1e:cc:57:
                    34:a4:9b:d1:d9:9d:d8:ce:11:e0:45:fa:38:6e:dc:
                    0f:58:7c:ec:b2:73:25:45:d1:8c:dc:06:be:ba:e8:
                    c5:e2:53:43:46:0a:5e:98:fc:51:94:c9:98:7b:ce:
                    88:e8:2a:60:d3:7d:b9:d2:d9:bc:5a:a8:72:ec:a3:
                    93:76:8e:fe:9d:56:b6:fe:60:2e:aa:ae:1a:1a:65:
                    39:aa:4a:2c:c4:35:71:ae:f8:a6:d5:b9:c0:0d:e1:
                    8c:53:5d:bf:23:b5:5a:d0:c1:26:03:f1:01:ce:10:
                    e1:b3:71:23:53:18:3e:fe:18:99:a9:3e:96:3b:74:
                    0d:30:01:30:21:29:c7:0b:af:5c:9e:5c:2e:0b:98:
                    34:7a:97:3e:9d:b6:42:c9:23:8c:7b:50:db:28:4a:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:6C:7B:A0:C1:77:60:18:D0:06:21:8D:7F:E1:2F:C6:87:60:BE
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:5e:79:43:a6:e2:5c:56:85:c7:57:42:4e:ac:75:e1:44:
         b6:3a:9a:8b:56:65:a8:39:ed:25:d1:8c:db:67:38:5a:5e:c8:
         b7:85:7d:00:5e:9e:b0:5d:8a:f1:cc:ed:3a:9e:38:61:01:5a:
         ad:70:8e:78:df:2a:52:d7:8a:c0:5e:9a:de:4e:7c:eb:41:26:
         07:88:b6:b2:f1:f1:6c:79:23:66:0d:8d:5e:f0:52:ad:ef:57:
         87:54:06:0d:33:2e:8e:8a:3b:3a:04:26:f2:3a:34:e1:5e:05:
         df:9b:5e:08:ae:bc:14:7b:d3:f4:da:2f:54:b9:75:ca:2e:81:
         08:ed:08:fd:56:81:dd:7c:24:ca:82:f4:c5:ff:b7:23:eb:0e:
         b6:4b:7a:08:56:83:d7:f0:0b:4c:ab:d0:55:3e:28:b3:d5:56:
         34:0c:4c:8f:6a:e0:37:d5:2a:f2:b9:dd:6a:52:39:3a:be:aa:
         14:51:cb:59:81:73:ad:8c:1f:ed:75:bf:c9:cf:f9:a7:c2:98:
         48:b4:45:59:67:24:cf:f0:e4:07:49:37:ff:ba:1e:37:61:54:
         d7:65:ff:a3:45:45:f6:9b:a2:04:30:bd:6e:e7:74:05:24:26:
         63:9d:c6:3f:b1:1e:38:fc:93:34:52:c1:39:4e:62:20:22:a2:
         a6:ef:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:46 2026 by rpki-client