This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File:                     kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier:          5cXLTcm1OHUI7q4eaysJ+nG2Ca7Ed3IgOYbVX3rKJwI=
Subject key identifier:   AF:80:8B:E6:47:A2:0F:80:38:16:78:45:C1:08:B3:E6:77:A1:91:28
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer:       /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial:       019C44A24EDF3A93B33C53CFE0A0D68108E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number:          1062
Signing time:             Mon 09 Feb 2026 23:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:13 +0000
Files and hashes:         1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
                          2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
                          3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: YipGw5fvF2Rc6yUSJROEpLD7CFUYF3Z/zIskeriiQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:4e:df:3a:93:b3:3c:53:cf:e0:a0:d6:81:08:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
        Validity
            Not Before: Feb  9 23:00:13 2026 GMT
            Not After : Feb 10 23:00:13 2026 GMT
        Subject: CN=af808be647a20f8038167845c108b3e677a19128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:17:1e:37:b9:06:d6:5d:ac:ce:62:df:22:
                    71:84:6c:79:6e:eb:6d:e1:40:37:20:f8:d4:42:7c:
                    10:e8:f6:6a:22:ca:bf:98:5c:92:09:6b:a8:94:ab:
                    8c:80:c9:34:21:ea:68:7b:f0:0e:60:71:b4:6e:c4:
                    f3:88:7e:8c:1e:7e:a2:a5:e1:0e:3d:31:d1:3c:29:
                    84:42:91:6a:41:04:26:ad:1d:1f:13:c5:44:6a:02:
                    9f:67:8a:31:e4:21:7e:f4:99:7b:d9:79:37:97:52:
                    2a:18:eb:50:c6:bb:15:22:73:a4:d1:d7:71:5d:79:
                    2b:8e:88:78:16:77:8b:d5:80:79:db:a2:db:cd:97:
                    96:86:02:01:2f:df:7d:51:e1:b4:e2:f4:03:f3:09:
                    52:cb:89:e4:9c:22:c4:d5:37:72:c7:02:75:89:5a:
                    39:eb:4f:6b:b6:2f:37:f0:29:88:c2:ef:a3:96:58:
                    9e:bd:b0:b5:7e:ba:87:29:11:e6:26:26:d1:5e:bd:
                    56:e8:e8:10:d5:21:5c:8c:27:9a:57:32:e6:df:27:
                    43:68:02:37:d0:bb:88:00:6b:6b:76:16:e9:7b:b1:
                    05:09:87:a1:34:8f:70:2b:b7:68:90:0a:48:3d:94:
                    33:54:c2:8c:44:dd:d9:43:c0:3c:96:bc:6d:9c:7d:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:80:8B:E6:47:A2:0F:80:38:16:78:45:C1:08:B3:E6:77:A1:91:28
            X509v3 Authority Key Identifier:
                keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:6b:6b:27:38:b3:55:4f:ea:65:a2:26:11:53:6e:b9:42:
         5e:73:4a:00:bc:1c:8c:54:0e:8e:90:af:16:5e:e8:dc:7c:8f:
         eb:4c:f8:52:f7:9e:57:5c:29:68:42:01:b8:08:f4:fb:8f:a2:
         19:a8:9f:b4:d4:00:cf:d2:3c:cd:d5:ab:51:78:48:ee:fd:60:
         75:55:c3:08:dc:e6:19:1a:d3:df:0b:d0:5a:96:41:5b:f0:5b:
         4e:36:fb:72:87:d7:80:ee:ab:fd:7e:d1:94:41:84:04:22:38:
         04:53:2d:83:63:73:eb:ff:13:e7:7c:98:7e:1a:76:17:34:19:
         7c:8a:b1:44:02:0f:f3:97:e4:f7:2f:2b:28:99:a4:ad:2b:ea:
         71:5b:20:d2:6e:59:89:f4:14:b6:85:e1:eb:b4:20:19:d2:45:
         20:8e:fd:8a:0e:d1:8a:4f:95:26:98:a3:10:c0:43:12:81:34:
         6a:f7:17:74:7b:8b:cd:5c:f4:7f:3f:b5:31:44:88:cd:ae:e8:
         65:2f:c5:8c:8d:bc:51:33:68:78:11:ff:ea:d4:38:28:34:a9:
         76:35:19:6f:9b:7f:fc:20:5f:2f:97:c4:1c:f5:b5:ec:50:90:
         09:87:d7:98:cb:11:5b:0e:cc:d6:30:fe:9d:d8:82:78:32:19:
         93:18:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:20 2026 by rpki-client