This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File:                     kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier:          UWkul0KQZpFHsaJtGD2LRhSpEnoigXUCSyC2uW3cX8I=
Subject key identifier:   AE:92:7E:22:86:B7:B0:46:46:01:28:E4:51:AD:3F:F0:75:CA:37:33
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer:       /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial:       019C427D6584D014CDBB42F47069381AF381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 13:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:40 +0000
Files and hashes:         1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: pCUNdmZZaH/mwHGcagTUnHRbJ2w7oI/cHjyi+tqGiCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:65:84:d0:14:cd:bb:42:f4:70:69:38:1a:f3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
        Validity
            Not Before: Feb  9 13:00:40 2026 GMT
            Not After : Feb 10 13:00:40 2026 GMT
        Subject: CN=ae927e2286b7b046460128e451ad3ff075ca3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:81:9b:f6:11:ab:11:60:8f:1e:d6:9c:7b:
                    9c:6c:90:b5:91:2a:40:9e:e6:33:a7:a0:39:4c:73:
                    a8:15:39:79:36:5b:d4:20:37:02:3b:3e:ee:d3:fb:
                    46:6b:ba:a8:c7:f2:f0:88:62:23:23:05:ac:de:83:
                    fd:e6:b3:4d:a4:6e:9d:7f:74:69:c5:df:8d:8a:51:
                    cd:08:52:14:f1:6c:c8:44:83:fe:2e:5d:fe:bd:23:
                    e1:5a:e4:ad:38:58:46:31:f9:5c:c5:12:0d:82:4a:
                    c1:a9:ac:92:cc:17:92:c6:78:5a:1f:ef:70:49:79:
                    55:73:27:08:0a:23:33:a1:07:82:66:04:e6:25:d7:
                    fc:83:4e:63:a9:47:77:9a:47:fd:71:66:dd:b7:73:
                    3a:44:74:93:e4:9c:ea:7d:a9:a7:bc:a3:13:2f:f1:
                    41:54:71:b0:ff:f2:20:f8:dc:60:aa:c9:0b:4d:a5:
                    a9:bc:66:ab:a4:4b:13:69:78:d7:8e:cf:46:c1:92:
                    26:17:d5:35:51:15:0a:73:96:ea:b6:74:9b:db:35:
                    3a:47:c2:27:2d:9b:ed:3d:8e:86:77:91:22:bf:4a:
                    97:a1:53:35:cc:0e:0f:ab:b4:0a:3f:79:65:9d:dd:
                    fa:19:db:73:2e:bd:92:6e:9e:7d:e7:47:7f:5b:84:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:7E:22:86:B7:B0:46:46:01:28:E4:51:AD:3F:F0:75:CA:37:33
            X509v3 Authority Key Identifier:
                keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:72:64:00:df:d3:11:01:45:ff:8d:59:1d:08:a8:cc:7f:42:
         8c:7e:d0:f8:09:7b:48:f5:ec:c7:3c:71:cd:29:e6:38:d9:24:
         db:75:ca:73:63:bb:4d:b1:fd:38:78:56:72:1b:9c:e8:f3:a4:
         29:fe:0f:be:ac:de:3d:e5:06:8b:22:c7:cc:5a:43:6a:c7:54:
         f4:42:c0:7b:2e:5c:47:2b:0d:26:ea:69:4d:8d:83:d7:28:42:
         f9:39:c0:e8:45:df:d6:76:8a:14:92:c9:37:fe:99:dd:1e:f1:
         78:e2:6c:13:11:95:bb:91:70:03:9a:37:27:3d:78:17:19:6c:
         df:7e:79:b3:42:da:7e:07:94:8b:f5:02:51:67:23:fe:13:98:
         c5:eb:62:f7:3a:93:87:55:e0:bd:14:81:0d:6c:9d:eb:2c:45:
         8c:c1:f3:bd:53:4b:a3:c8:c3:3e:8d:cf:3a:3a:ac:7e:30:db:
         31:35:2d:aa:24:8d:06:a2:1d:15:27:35:4d:e2:c8:73:60:fd:
         16:b3:d5:48:49:b1:87:6d:92:bf:e5:f3:8b:80:0c:e9:cc:4a:
         f1:97:b8:c8:0b:dd:45:27:dd:2b:8e:8c:d2:db:96:19:36:12:
         70:d5:23:ef:62:ce:33:b0:0a:4c:cc:8d:4c:39:6e:75:23:64:
         b9:ff:c9:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfWWE0BTNu0L0cGk4GvOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmVhYTMyYzRlMGUxOTcxYWQwZDU4YjE3MmNlZDE3MjEw
NTY4NWMwHhcNMjYwMjA5MTMwMDQwWhcNMjYwMjEwMTMwMDQwWjAzMTEwLwYDVQQD
EyhhZTkyN2UyMjg2YjdiMDQ2NDYwMTI4ZTQ1MWFkM2ZmMDc1Y2EzNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxteBm/YRqxFgjx7WnHucbJC1kSpA
nuYzp6A5THOoFTl5NlvUIDcCOz7u0/tGa7qox/LwiGIjIwWs3oP95rNNpG6df3Rp
xd+NilHNCFIU8WzIRIP+Ll3+vSPhWuStOFhGMflcxRINgkrBqaySzBeSxnhaH+9w
SXlVcycICiMzoQeCZgTmJdf8g05jqUd3mkf9cWbdt3M6RHST5JzqfamnvKMTL/FB
VHGw//Ig+NxgqskLTaWpvGarpEsTaXjXjs9GwZImF9U1URUKc5bqtnSb2zU6R8In
LZvtPY6Gd5Eiv0qXoVM1zA4Pq7QKP3llnd36GdtzLr2Sbp5950d/W4SpTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6SfiKGt7BGRgEo5FGtP/B1yjczMB8GA1UdIwQY
MBaAFJL+qjLE4OGXGtDVixcs7RchBWhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEt
MDVlYTIyZGRkNzIzLzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEtMDVlYTIyZGRkNzIz
LzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHJkAN/T
EQFF/41ZHQiozH9CjH7Q+Al7SPXsxzxxzSnmONkk23XKc2O7TbH9OHhWchuc6POk
Kf4PvqzePeUGiyLHzFpDasdU9ELAey5cRysNJuppTY2D1yhC+TnA6EXf1naKFJLJ
N/6Z3R7xeOJsExGVu5FwA5o3Jz14Fxls3355s0LafgeUi/UCUWcj/hOYxeti9zqT
h1XgvRSBDWyd6yxFjMHzvVNLo8jDPo3POjqsfjDbMTUtqiSNBqIdFSc1TeLIc2D9
FrPVSEmxh22Sv+Xzi4AM6cxK8Ze4yAvdRSfdK46M0tuWGTYScNUj72LOM7AKTMyN
TDludSNkuf/Jfw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:25 2026 by rpki-client