This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File:                     kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier:          birpz940MZnx6InYqJR1Jc/cznLhqrSasSIs0JKl0/k=
Subject key identifier:   31:15:38:77:EE:38:DD:B6:8C:63:3B:71:64:66:2A:E5:53:FD:E5:16
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer:       /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial:       019C4358C6F65968302A9AD507E7F28BD787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number:          11E3
Signing time:             Mon 09 Feb 2026 17:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:17 +0000
Files and hashes:         1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
                          2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: Ecg1oRNLJhA7FfkRBhK08vu/piYT5SsDY850tl3Nwvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c6:f6:59:68:30:2a:9a:d5:07:e7:f2:8b:d7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
        Validity
            Not Before: Feb  9 17:00:17 2026 GMT
            Not After : Feb 10 17:00:17 2026 GMT
        Subject: CN=31153877ee38ddb68c633b7164662ae553fde516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:df:3c:57:64:15:e2:c2:bf:ee:82:e5:f1:41:
                    c6:8b:53:20:58:0e:71:4d:da:a4:da:ea:ad:25:ad:
                    df:7c:f2:f5:3d:5e:a6:62:d8:07:3a:cc:20:25:88:
                    34:f9:0d:94:44:d6:9a:dd:52:15:a9:e8:db:0e:e9:
                    82:e3:27:ea:5a:9f:af:db:2a:72:8a:b6:25:74:95:
                    46:a9:54:6e:56:0b:74:c3:54:03:c0:06:62:62:6f:
                    59:76:ac:d2:a4:f0:6b:64:31:a5:cf:7d:f0:9b:5a:
                    fe:ae:43:79:13:29:6c:00:4b:72:0a:e8:e6:a0:17:
                    3e:23:a6:a2:33:f7:dd:5d:8a:b6:11:3e:11:30:b3:
                    a0:dc:42:24:ec:de:c7:85:87:74:ce:52:05:65:cf:
                    93:da:51:8c:09:0f:74:e2:6d:f2:f5:35:b9:0b:a3:
                    0d:58:33:5a:9d:da:ae:7a:a4:9a:46:c8:c0:4e:68:
                    c9:f1:67:53:85:43:29:91:08:98:8c:f5:3f:4a:2e:
                    b3:ab:e5:34:a9:5f:e1:a1:e0:51:16:ca:fe:ad:22:
                    b1:97:0c:ac:e6:2e:c3:ca:39:7d:b9:8c:06:69:b1:
                    98:36:89:69:e2:54:1f:b5:9f:3f:c4:b8:96:15:99:
                    b6:01:59:98:12:0b:a0:22:6e:84:cb:cb:1c:35:c8:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:38:77:EE:38:DD:B6:8C:63:3B:71:64:66:2A:E5:53:FD:E5:16
            X509v3 Authority Key Identifier:
                keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:be:da:35:09:9b:97:c9:c1:25:4d:b0:91:22:76:5c:54:
         b1:ca:b3:a7:91:2c:d7:20:e6:f5:52:0e:f6:14:9f:df:7a:f6:
         a2:84:97:bd:fb:de:03:92:00:da:20:e9:58:14:64:70:f8:1f:
         b8:2a:f1:2e:e8:4f:d8:85:c1:bf:a4:ac:7b:0e:46:bc:d5:97:
         49:a7:9c:2e:bf:a1:2c:f9:9f:55:e3:93:83:23:2e:78:fa:c5:
         6a:bf:a4:7b:89:e5:aa:ab:ae:b8:e2:20:85:b4:df:92:6d:fb:
         2c:8e:05:dc:8a:76:ed:3c:23:44:cf:24:45:2f:89:de:ed:13:
         79:a3:9f:c2:87:d6:f7:f7:85:30:f2:48:b5:82:44:b1:0e:88:
         5d:85:a9:95:08:e1:c8:3d:d3:e8:89:2c:68:61:f6:2b:15:dd:
         6a:c0:0e:2a:f1:75:ef:7b:1f:73:bf:62:27:2c:12:3d:76:74:
         b7:04:ce:ba:8a:65:71:d3:8e:6a:b7:1f:c4:a5:ec:70:6d:c5:
         69:cf:12:53:0e:44:03:8a:8b:5e:7d:b1:fa:d9:b9:6c:95:43:
         7b:d3:82:b7:d8:14:b0:cd:e3:5b:f3:be:8e:8a:fb:4c:f3:9a:
         ad:b0:36:91:88:3b:80:8a:61:5d:42:05:70:67:d3:f1:a0:b2:
         79:6e:81:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:20 2026 by rpki-client