This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File:                     KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier:          q20SzphXl5SXmT5moChh3S+RxhvnzLRTKilyJDsbHS8=
Subject key identifier:   29:21:04:3E:FC:B7:3A:68:F5:56:0C:7C:39:4F:6D:B8:89:98:54:8E
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer:       /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial:       019C41D848089755A63D160DA0F9A4815C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 10:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:19 +0000
Files and hashes:         1: D5K8QPUyMYfagYASYwL4lujklys.roa (hash: hyr6M3p6aHhLRaW47SkFIlt8kwLspMP/qCLs3ZNqvMQ=)
                          2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: Oo+OxxwUIguM48AGZPjwZF9nWw5ESNmVoPByPDjC0Dk=)
                          3: c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (hash: Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:48:08:97:55:a6:3d:16:0d:a0:f9:a4:81:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
        Validity
            Not Before: Feb  9 10:00:19 2026 GMT
            Not After : Feb 10 10:00:19 2026 GMT
        Subject: CN=2921043efcb73a68f5560c7c394f6db88998548e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:f7:a7:ec:a4:7d:54:20:ec:fd:a9:cb:4e:
                    c2:cc:5b:ae:15:32:05:50:fe:0d:3c:1d:0c:d0:99:
                    1c:eb:2c:d7:0b:d3:1f:cf:f9:d8:18:c3:c8:94:24:
                    19:04:9a:30:ef:3b:09:14:c6:a0:a7:12:a8:aa:a0:
                    82:81:03:c7:a3:21:c8:68:7f:23:04:0d:78:e2:19:
                    e2:5d:cf:95:9e:39:a7:65:c8:73:26:c3:0b:5d:8f:
                    89:98:be:ea:bf:f7:52:e1:c6:ad:d8:ad:6e:e8:5c:
                    cf:6d:ad:bb:21:53:89:a9:a8:54:bf:13:94:d9:8f:
                    af:34:e0:e0:a3:60:db:d9:71:0b:e3:39:62:9f:32:
                    79:8b:82:92:29:c9:5f:99:a8:ee:8e:45:58:d1:00:
                    2c:1b:f8:d6:14:01:cd:0b:c1:44:0e:8b:71:16:7a:
                    e9:9f:28:7e:4c:6f:b4:04:1c:a0:74:9a:6d:3f:f7:
                    35:06:a8:ef:1c:b8:c6:e5:ae:60:c1:e8:81:62:8d:
                    39:56:57:5d:6d:fd:d3:77:77:3f:78:48:63:bd:a3:
                    8f:07:2e:fc:2d:2f:b5:a9:bb:b7:70:fb:0d:8d:c5:
                    45:71:71:a7:ae:38:64:4d:81:be:0b:4f:b7:a1:92:
                    e9:e4:53:c0:0f:13:d8:07:f6:bc:e0:03:a9:df:0b:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:04:3E:FC:B7:3A:68:F5:56:0C:7C:39:4F:6D:B8:89:98:54:8E
            X509v3 Authority Key Identifier:
                keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:c4:62:91:ca:e3:b3:09:1a:56:ec:a6:c2:fc:66:54:88:
         45:d2:f7:c1:95:36:d5:2f:b9:cf:4a:8a:e7:16:eb:93:4b:e6:
         eb:6c:f7:d6:c4:e3:95:8f:d5:4f:54:2a:09:a2:7a:ea:ed:55:
         24:a6:56:53:2c:92:9e:56:da:61:64:e0:b4:6f:f7:0b:5e:c2:
         a4:ce:6e:f5:b7:f2:15:33:6c:66:4b:9d:f7:04:5c:78:e3:97:
         6f:ef:b3:e7:b0:69:3d:cc:6a:b5:23:7b:d0:40:a1:d6:e3:e1:
         ad:91:e0:75:db:79:ab:d5:bb:2a:2a:d0:ba:1a:36:72:f0:aa:
         67:f9:1e:66:80:2e:da:5f:1b:0d:dd:b2:b9:50:6e:c8:7a:af:
         02:ee:27:86:2c:ec:e0:37:42:2f:47:b4:4e:0f:ed:41:f3:dd:
         16:66:07:da:82:a9:ea:e6:68:25:7a:8d:8e:13:09:eb:96:8d:
         39:b2:82:13:04:64:41:fc:57:fe:ac:95:46:43:6b:13:37:4e:
         78:14:aa:31:e6:a3:60:36:87:9d:db:58:3a:07:d5:14:39:b8:
         4d:26:0b:df:47:17:15:da:72:93:4a:77:cf:08:2c:54:17:56:
         3b:6a:77:e2:1e:4c:33:ed:8d:f8:73:21:cb:9f:9a:fc:98:b3:
         ee:72:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:40 2026 by rpki-client