This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
File:                     mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft (raw, json)
Hash identifier:          IzrPGuiE88sveaEkQht73+lcLfGi5i2tTATPaMQb+uQ=
Subject key identifier:   A9:FE:BC:48:38:C3:33:D7:FD:8D:61:39:17:1A:07:5B:10:C6:07:37
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Certificate issuer:       /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial:       019C1BA73037854A96B2ABC0F209C4B332C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
Manifest number:          41
Signing time:             Mon 02 Feb 2026 00:01:07 +0000
Manifest this update:     Mon 02 Feb 2026 00:01:07 +0000
Manifest next update:     Tue 03 Feb 2026 00:01:07 +0000
Files and hashes:         1: iS_RjiJ5hKPzS36a9K6GI2jCpSc.roa (hash: oKmLMmS60dhNLyeJppUGpS47iPqdNIjtFfF23b9zJgg=)
                          2: jE2_WqgXFNkY54CTie-65-UWSNQ.asa (hash: heW1TwT0yq1dP5dkHg76VMwsxCNVgvGMwKxBm3dH1w8=)
                          3: mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl (hash: TU8RvjdlfzoXiuqlewnzu+fvTKczZfCG49b7U2MMrAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a7:30:37:85:4a:96:b2:ab:c0:f2:09:c4:b3:32:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
        Validity
            Not Before: Feb  2 00:01:07 2026 GMT
            Not After : Feb  3 00:01:07 2026 GMT
        Subject: CN=a9febc4838c333d7fd8d6139171a075b10c60737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:6c:25:26:fd:ce:78:6b:92:07:e8:ba:6e:
                    43:3a:65:4f:53:77:c0:2c:6f:8b:7f:47:1a:74:87:
                    96:65:cc:b9:63:ae:b9:2e:9c:87:d1:23:9e:77:93:
                    aa:1a:ce:fd:19:ee:63:75:52:7e:38:d3:31:91:76:
                    2c:3b:33:d2:7f:53:fc:b5:61:24:93:f4:f7:80:36:
                    52:c2:5c:9f:14:cf:f7:46:6f:f6:31:4c:a2:87:c3:
                    96:07:27:a7:96:c8:d6:f5:e4:d2:c4:e9:15:99:78:
                    7e:c5:f3:f5:d1:0e:dd:53:0d:3d:3d:1e:4b:34:1d:
                    eb:75:b8:10:37:89:8d:fd:fb:d6:4c:48:4d:96:ad:
                    26:62:0b:a1:ad:70:80:04:65:8e:7f:1c:bb:72:52:
                    14:02:db:aa:d4:16:48:ce:f4:c2:91:0c:02:6c:cb:
                    23:7d:b6:ca:44:17:c9:8d:4f:12:29:82:fe:a4:1d:
                    b9:f0:1f:62:e2:e8:12:4a:bc:df:de:92:bb:a2:49:
                    86:0d:7d:bd:b5:60:3e:94:51:e8:92:e9:7a:aa:68:
                    8b:36:ca:66:40:2c:c4:d3:e2:87:49:02:9e:be:0d:
                    e5:06:61:a0:03:ec:51:61:1a:e7:5c:b6:b3:eb:e1:
                    a1:b0:08:f2:f4:80:f6:61:82:c5:f7:3a:45:9f:d5:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:BC:48:38:C3:33:D7:FD:8D:61:39:17:1A:07:5B:10:C6:07:37
            X509v3 Authority Key Identifier:
                keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:bf:09:77:a6:4a:86:2e:37:11:62:ee:ac:7f:48:de:f2:
         40:8c:fc:c0:01:0e:cd:e7:c5:a3:95:92:01:33:bc:6d:9e:67:
         a7:1f:42:c1:19:3c:81:78:bd:48:fa:e8:e6:ec:a0:d0:df:e3:
         0e:2e:aa:28:76:e2:b9:67:4e:ce:1d:aa:31:11:da:db:3d:4a:
         85:a3:c7:bd:53:fc:e7:cd:b9:46:63:1c:5d:6b:d7:7d:71:ed:
         2d:d9:d3:db:d6:23:a5:61:64:68:a7:53:51:15:98:9f:b5:ad:
         fd:dd:af:2e:c1:a7:ee:8f:17:9e:ae:a8:6c:b4:cb:2b:5a:1c:
         ed:63:06:01:ec:b5:0a:4f:1c:53:49:cb:30:c9:20:f2:5f:f8:
         b7:6c:b8:b4:69:83:67:c3:36:06:cf:b1:3b:13:7e:3d:57:da:
         c8:e6:14:57:88:fe:1e:73:07:8d:cf:aa:5e:df:44:f5:84:f6:
         63:6e:32:c7:a9:3b:cc:90:cb:43:b7:a5:6c:45:a0:85:08:85:
         37:5d:43:92:57:27:54:92:16:4b:c3:a4:37:dc:8d:ec:d8:05:
         ad:d6:ac:9c:6c:08:88:5d:eb:50:61:6e:01:49:aa:6e:4a:b0:
         c3:55:39:d7:91:98:71:bb:e7:0c:ee:06:76:e1:9d:60:70:b5:
         c9:80:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:54:27 2026 by rpki-client