This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          oXVVlRrrUta6aRV+iDiupJn/nEO3mErSYgaUJSUpC/E=
Subject key identifier:   E6:8F:90:BE:CB:B4:A3:1C:DB:A3:5C:C7:29:18:38:31:45:35:AD:82
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       019C4246C680CFBE3CE4906C1FFCE1F9992B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 12:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 12:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 12:01:00 +0000
Files and hashes:         1: JhmecN5URCtv1yBIbMEV6e9g8Co.roa (hash: pl/+LhQub+A0lSXtk6Diu/3nX3HjGeeg4r2Cz4f+9V4=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: brYPR42dtfRTfBmRtGcLsXua70kRBqF/ag6eRjuXaQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:c6:80:cf:be:3c:e4:90:6c:1f:fc:e1:f9:99:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Feb  9 12:01:00 2026 GMT
            Not After : Feb 10 12:01:00 2026 GMT
        Subject: CN=e68f90becbb4a31cdba35cc7291838314535ad82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:51:46:68:34:df:04:58:a6:05:57:d5:b8:
                    ed:a9:14:65:58:3c:33:03:8e:70:8e:0c:f6:2d:d2:
                    fc:49:bd:be:df:f7:09:b3:e3:69:4e:44:af:f1:60:
                    d1:5e:d1:3b:e2:2c:4e:47:5a:31:37:d2:c2:cb:d3:
                    84:7b:fe:3d:38:dd:f0:3f:50:cb:fc:55:08:cd:42:
                    a1:7e:6e:1f:e7:f0:3f:ee:33:35:51:f0:c1:e8:8a:
                    17:a7:7e:e8:9f:59:bd:66:bd:7f:f0:2f:d8:29:5d:
                    19:c2:f3:ec:6f:28:57:52:ab:da:05:70:1f:82:24:
                    a2:69:e0:e2:5e:b4:a2:a6:c6:e3:29:5f:3a:39:84:
                    0a:f8:a8:a6:e8:d7:e8:df:05:74:51:1d:ba:d2:97:
                    de:33:39:d5:f5:cc:fa:00:33:4d:87:37:79:eb:95:
                    d2:0f:53:0a:41:df:b1:6e:87:f3:7e:01:f9:1b:e3:
                    40:58:88:71:7a:5e:5c:2e:3f:77:80:7d:1d:4e:c9:
                    12:0e:42:13:35:2f:dd:bc:c2:d8:2f:a8:94:79:b2:
                    db:d0:75:61:2c:a4:5e:90:59:e3:a6:41:26:7e:5e:
                    54:e1:12:0e:32:50:f5:7f:d4:73:aa:5d:7d:0c:1d:
                    21:81:85:4a:a9:a7:d8:dd:5b:7a:9a:c5:e8:94:12:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:90:BE:CB:B4:A3:1C:DB:A3:5C:C7:29:18:38:31:45:35:AD:82
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:33:12:3d:a7:3d:24:28:05:71:86:72:93:8e:d4:9e:89:
         6b:c6:22:28:f1:5e:b4:7c:87:82:1b:4e:c5:15:1b:b6:03:ea:
         33:43:24:10:86:79:ed:84:9a:b5:bc:29:22:1c:ef:b7:c1:c7:
         34:75:8d:01:06:dc:e0:65:ae:67:c9:ae:e9:60:57:3c:17:f2:
         26:79:87:7a:ff:e5:2e:d7:ad:b6:c7:6e:10:cb:00:a6:90:c3:
         8f:7d:75:dd:7e:89:93:8e:54:08:0c:cd:7f:8e:bf:f8:93:74:
         55:f2:2d:cc:82:67:84:70:5a:d0:0e:75:fb:f5:a1:2f:61:51:
         d2:be:16:5f:c5:e4:57:68:0d:bf:45:84:c4:7a:c5:60:02:91:
         90:18:08:5b:7a:5b:06:6a:9c:68:a4:44:8b:4f:3a:2d:f4:6a:
         a7:fe:0a:0e:0b:28:27:ca:65:e3:01:4e:41:66:35:8e:b1:23:
         89:7a:80:bb:93:36:df:7c:7a:06:62:e7:b0:17:09:f7:41:0e:
         19:17:f8:ab:27:e2:aa:3b:d9:73:b1:79:f3:a9:2c:6e:fe:08:
         5e:0b:a1:fc:da:ae:a9:be:74:7a:21:cd:96:0c:cb:15:80:a8:
         ca:d9:26:e3:dc:2e:2b:5d:32:1b:35:be:c8:88:c0:62:1c:4b:
         29:5c:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:23 2026 by rpki-client