This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          gfg061FlHz+2TXHdN7FUZPA8JUwCq8wlkxCJCVdmVtE=
Subject key identifier:   EA:FB:E6:02:41:97:5B:26:29:A8:90:42:A3:93:98:82:7C:F3:10:52
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       019C42467AA9E8B9251222769C6A21313D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:41 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: TxNh9Q+q2opwT+/cD7udD+0qsOErv9xQTOvEtqnmohY=)
                          2: xpFzvNysauejwNurSrVoomGPi2g.roa (hash: ZWen67CGabL9A0ahpVR1yOAZANbCjCBbSuhLawAwcs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:7a:a9:e8:b9:25:12:22:76:9c:6a:21:31:3d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Feb  9 12:00:41 2026 GMT
            Not After : Feb 10 12:00:41 2026 GMT
        Subject: CN=eafbe60241975b2629a89042a39398827cf31052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:76:65:db:d9:32:96:d2:26:45:b6:fa:62:
                    ce:42:55:7a:ce:b8:cc:60:b4:50:2e:01:ea:93:01:
                    bc:46:04:8d:0a:fa:39:5e:73:db:09:8e:69:9d:e4:
                    62:2e:35:78:05:20:5e:3a:fc:a2:ac:7e:85:68:38:
                    8f:f5:6a:8f:a7:9f:52:58:ff:01:d3:7e:4e:bc:36:
                    91:46:6a:ef:63:c8:82:03:85:fb:fd:0a:06:6d:50:
                    f3:f9:1e:4c:95:29:bb:fa:c6:65:f4:6f:55:cd:86:
                    7f:3d:fb:a3:43:d7:d0:b1:62:f2:f0:9a:2a:87:f6:
                    cd:4a:81:95:3c:74:8f:f0:13:96:35:a8:f9:08:7e:
                    d7:60:9a:a5:30:d7:a9:54:ef:f4:04:74:14:e2:6a:
                    5c:aa:b2:18:7c:b4:9a:07:4a:14:f7:8d:16:2e:eb:
                    08:2b:b5:56:7c:5d:a1:52:c6:b9:89:85:9b:81:fc:
                    69:a4:d2:cf:6e:2f:80:ef:db:65:38:1c:af:fb:2d:
                    92:d5:cd:ef:50:b2:f6:8c:ae:bd:4d:05:2d:9f:78:
                    90:8e:cd:42:c0:8c:4b:0e:64:3a:b4:7a:6e:cb:ab:
                    6d:fc:d0:9f:a2:91:7b:c9:2b:43:b6:e4:61:7e:fa:
                    cd:20:8c:eb:5a:87:66:1f:76:19:a8:3e:fa:bc:c4:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:E6:02:41:97:5B:26:29:A8:90:42:A3:93:98:82:7C:F3:10:52
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:8f:89:a1:9e:c6:89:a4:c8:76:a8:47:a3:c8:9c:d3:c9:
         cb:68:bf:54:81:ed:0b:f2:7b:e4:ac:b2:d4:56:43:f2:fa:9d:
         56:78:33:c9:e1:25:52:fa:c7:32:7c:dd:09:00:38:60:3e:59:
         2a:f4:c4:09:5a:b6:4f:4a:33:f3:e3:92:d4:ca:0d:e5:c4:bd:
         ac:2b:d4:3a:0b:9d:19:cb:88:58:14:4f:0f:dc:0c:e1:c5:de:
         05:5c:a7:60:bb:70:f1:e4:95:cc:8b:18:d2:f5:f3:8c:60:35:
         f8:8d:db:3f:68:81:4d:40:61:cd:0b:aa:3c:50:58:92:29:d4:
         d8:8b:19:70:08:2a:8c:f5:87:d6:a9:c5:71:04:47:c7:1f:55:
         d5:7f:1d:7c:92:e5:a4:3d:37:88:aa:86:f4:d1:96:62:05:b6:
         05:ab:86:72:b9:c2:a5:2f:38:82:38:66:98:5e:46:14:52:60:
         5c:2c:18:27:d3:c6:7e:7d:c0:0f:e5:1c:15:7e:65:fb:eb:e3:
         37:f3:2f:01:df:24:56:fc:ae:3e:39:de:70:b5:e0:b2:cd:27:
         ee:8f:11:b5:8f:b8:ee:41:fa:20:b8:ab:e2:65:28:ee:6e:41:
         0b:44:4f:64:09:25:52:49:96:20:62:4b:32:3a:62:40:3f:c1:
         53:c1:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:11 2026 by rpki-client