This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File:                     KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier:          f9uB6+AGk+Y7t/DrBpOqvszbgPlwPwW8BhPNphAaO+k=
Subject key identifier:   57:22:E4:7D:B8:FE:9E:00:B8:F8:6C:5D:AF:F8:72:71:3B:3A:57:B4
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer:       /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial:       019C43FE52ED455AC292F5C086C074C2FD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number:          17A2
Signing time:             Mon 09 Feb 2026 20:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 20:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 20:01:06 +0000
Files and hashes:         1: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: /QtfVGfeylKFi6Sg9SszsE89M/dGb71K1etf6gbd804=)
                          2: RINTWQU8O-dtVLISeiowSUIg1i4.roa (hash: mr0pYPWJuxdErynFbzmieVFUznI70KYCtpeAb0gQwOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:52:ed:45:5a:c2:92:f5:c0:86:c0:74:c2:fd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
        Validity
            Not Before: Feb  9 20:01:06 2026 GMT
            Not After : Feb 10 20:01:06 2026 GMT
        Subject: CN=5722e47db8fe9e00b8f86c5daff872713b3a57b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:e3:f6:7d:e2:f2:a5:fd:b1:51:52:15:9c:
                    4c:3c:1e:e8:ff:03:0f:9e:5b:42:d4:99:8d:2c:f3:
                    17:a4:e4:fa:2f:99:8e:19:54:97:5b:30:f3:a6:fb:
                    5a:e3:26:0b:17:b2:8a:1d:fa:2e:99:ee:f2:4e:bd:
                    a0:31:1c:b9:b1:5f:3a:8d:3d:d6:c6:90:68:6e:e9:
                    1d:0d:d6:3d:4e:5d:2b:81:cf:f5:db:d0:6e:58:80:
                    6d:69:ec:2a:f9:d3:49:fe:3b:b2:2d:16:44:a1:21:
                    20:4b:78:5f:66:9c:a8:6e:64:e2:46:88:c6:28:7b:
                    50:44:e6:df:5a:00:44:78:20:bb:52:89:02:2b:13:
                    cd:dd:d3:de:c8:72:ea:b7:c7:bc:db:20:95:d6:c0:
                    52:47:f0:34:6f:4d:e2:f1:9c:2c:45:be:ba:bf:ce:
                    67:f9:39:97:59:c1:13:4b:79:78:a2:58:fd:10:04:
                    da:f4:03:49:c0:b8:20:2f:f4:cf:ce:51:55:c2:9a:
                    dd:3e:11:f5:e1:9f:47:c8:8d:d0:f2:d0:79:cb:68:
                    ea:11:b2:41:d3:3e:34:cc:d1:96:44:35:6b:0c:a2:
                    2c:e6:61:8d:2a:66:cc:1f:99:86:63:da:06:84:5e:
                    b8:9d:37:69:ee:ec:bc:43:a1:1c:67:b1:67:48:a3:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:E4:7D:B8:FE:9E:00:B8:F8:6C:5D:AF:F8:72:71:3B:3A:57:B4
            X509v3 Authority Key Identifier:
                keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ec:72:01:1b:84:84:bb:1a:a8:d4:2e:86:b1:0a:46:6f:99:
         f3:09:8c:70:8b:d9:d0:40:58:e3:f4:d0:a3:68:42:b8:93:06:
         5d:0d:05:ec:f9:32:a5:08:90:8b:ad:16:37:fc:58:ef:4d:a0:
         65:12:00:12:b0:7b:23:51:82:4a:b9:db:6e:c6:8d:62:86:82:
         d1:61:8b:47:cc:30:21:d4:98:63:77:05:bb:1c:f7:9c:81:4b:
         3d:ef:11:c3:b5:61:6b:58:ee:0d:85:5e:ff:37:0f:12:90:3d:
         ac:cc:ac:0d:ca:73:73:a6:3e:62:07:54:24:90:ce:fc:24:40:
         1d:1f:a6:c9:52:78:a8:42:ee:2c:68:02:1e:a9:54:c9:01:33:
         cc:f4:b9:4f:0c:97:da:c4:23:30:6e:d9:eb:61:12:77:92:0f:
         1a:99:45:30:c7:31:e3:b9:ea:43:ba:77:77:c1:af:f9:34:c2:
         cc:18:0d:71:d1:c6:b9:82:16:df:7e:36:6f:6d:bf:84:46:68:
         8d:11:1e:c8:79:3b:44:b3:a6:e0:60:5a:c1:b3:5e:c5:53:e1:
         d2:1d:f7:ef:b0:d6:1d:36:7c:33:3d:9f:2f:ed:70:96:84:71:
         18:8b:b7:33:e8:ad:82:5d:67:d0:71:77:fa:f7:be:0e:33:f9:
         df:71:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:54 2026 by rpki-client