This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File:                     KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier:          CrgHzNtzG/HNOaPtlG3zcFXgnAAxx+vjCY7ZMq+ylUU=
Subject key identifier:   39:23:85:46:BA:FF:FA:3F:5B:CB:CC:62:99:CD:B0:7B:A8:62:E2:D4
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer:       /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial:       019C44D9D00B0A7CBA0217C5BB9FF4DC6F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number:          1811
Signing time:             Tue 10 Feb 2026 00:00:51 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:51 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:51 +0000
Files and hashes:         1: AJpV8hpcC9NXykoo9-dL6aH0A9g.roa (hash: k7moU7Gr/UvmzLxveWCv2AfmeEfD1dJ7zogQAYvX1ZU=)
                          2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: gCD1U54FwcY0rGbAaPjwZDdFRTA+oKGLvMvA6/NQEk8=)
                          3: weNArfvB6aIBhliGWgRmku9NM4k.roa (hash: 5cqXzpfVcXD0jTHKSY2NMKnFRtchriM7ulhLtiSinGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:d0:0b:0a:7c:ba:02:17:c5:bb:9f:f4:dc:6f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
        Validity
            Not Before: Feb 10 00:00:51 2026 GMT
            Not After : Feb 11 00:00:51 2026 GMT
        Subject: CN=39238546bafffa3f5bcbcc6299cdb07ba862e2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:25:a2:fe:be:6c:de:6d:5d:c7:7d:81:55:
                    ac:3a:c9:e6:ce:9d:0b:f1:00:32:fa:c3:63:02:f4:
                    3d:31:a6:c9:fd:cb:19:52:03:8c:ab:c6:78:f6:2b:
                    30:eb:c1:95:06:60:38:4b:fe:9a:5d:92:ef:35:62:
                    7d:e5:b3:39:6d:76:d1:a0:72:8a:42:62:e8:bb:2e:
                    f6:03:c2:29:ea:cf:da:8a:c3:ed:64:27:20:83:ab:
                    7b:b2:68:e4:ee:2c:ed:f8:15:e5:97:20:c3:e3:d8:
                    ca:6f:d9:af:ba:52:72:dd:9f:68:e8:ff:55:b9:25:
                    bb:cf:dd:e9:e1:76:7d:89:64:0d:e5:cd:75:53:6c:
                    51:29:98:78:4d:f4:dc:03:6a:80:f7:8f:a2:8d:8e:
                    17:ab:d8:43:c4:6d:30:8b:89:33:5a:e3:cf:76:c1:
                    79:9e:9b:cf:ad:7b:c0:c6:1b:84:d8:47:28:f1:0f:
                    0a:e3:61:a7:01:12:4a:1e:52:80:ea:f9:19:53:2d:
                    7a:4a:e1:20:69:07:ac:57:00:48:f6:d3:94:75:06:
                    40:7f:1f:11:f8:b2:ee:00:fe:13:a0:a5:b0:4c:7a:
                    1a:8a:19:99:65:7a:b2:38:e1:57:69:51:08:4c:2e:
                    e5:86:b5:56:62:19:71:6d:84:77:4c:9a:aa:09:bc:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:85:46:BA:FF:FA:3F:5B:CB:CC:62:99:CD:B0:7B:A8:62:E2:D4
            X509v3 Authority Key Identifier:
                keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:45:eb:2b:d9:6d:99:19:d6:c3:b2:ec:de:f1:dd:80:57:53:
         e9:a8:84:a4:fb:a7:c4:ea:39:18:91:c0:3d:c7:e7:fe:da:50:
         55:a3:3d:e3:87:86:5a:08:c8:cf:a9:39:3e:bf:1c:a1:0b:a5:
         46:69:00:1f:24:ab:72:60:98:d1:34:48:a9:0f:f3:cb:06:8d:
         98:20:45:0f:0f:0e:aa:48:e3:8c:a8:5e:97:ca:d0:22:90:7a:
         2b:b1:5e:f5:f2:87:08:c8:1e:a2:55:1b:aa:9d:40:9d:bf:70:
         ee:0d:e3:2b:f8:1c:90:42:b0:39:38:62:75:f4:b6:0b:8c:3b:
         c6:bf:b1:76:07:52:dd:52:cb:ce:99:89:b2:ed:e5:e4:47:25:
         05:8b:47:e8:3c:6d:42:3a:64:f6:a8:cc:86:3a:d0:96:71:04:
         52:28:3e:1c:6f:14:d0:41:d2:ee:bc:ce:2c:f2:c9:d9:9b:fe:
         92:8b:7a:5b:2b:14:08:3a:44:f1:f1:f0:52:52:f1:14:c7:68:
         e2:4b:b7:7e:bb:c0:e1:99:f7:a4:3a:e0:4b:a7:16:05:a4:6b:
         e6:0a:33:45:6e:0e:0b:5d:11:5c:4b:c8:c4:66:78:e4:aa:92:
         7b:49:c8:65:78:4c:98:a7:5e:2b:1e:ba:22:74:70:75:6f:57:
         34:04:18:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:56 2026 by rpki-client