This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          m0Dc2HfjAE+8TXtNaSiV4Oei9MSmnzJhF1PPptHNMTc=
Subject key identifier:   2D:61:30:97:8B:7B:08:3D:81:BA:55:95:3F:F2:25:97:72:2E:5C:4E
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       019C41D90025055B80F438927210A3CCB5C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          0529
Signing time:             Mon 09 Feb 2026 10:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 10:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 10:01:06 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: gxfvQtwnGOQeHFaTa+uq8OkV+AWRjHQny/esG6Yg6go=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d9:00:25:05:5b:80:f4:38:92:72:10:a3:cc:b5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Feb  9 10:01:06 2026 GMT
            Not After : Feb 10 10:01:06 2026 GMT
        Subject: CN=2d6130978b7b083d81ba55953ff22597722e5c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:9e:df:ed:96:ad:6b:ba:fd:be:fc:b1:f0:
                    ab:2e:a5:5f:99:95:be:a4:f3:b0:fe:91:30:48:d6:
                    d5:97:e0:86:34:09:05:19:bf:61:c5:17:a5:5e:bd:
                    03:09:85:e0:4f:ba:de:44:58:a0:18:9c:9b:cb:34:
                    9c:bc:fb:4b:23:ea:ee:30:cd:0d:56:fa:c2:5a:f8:
                    c2:e8:a9:6c:a4:1b:1c:a0:82:04:19:60:1f:ae:78:
                    15:00:b2:72:8a:3d:e2:3e:f5:4d:a6:5d:59:c1:10:
                    60:8a:f4:58:ba:36:6d:b5:42:92:93:12:24:5d:1c:
                    54:67:4f:f2:da:b2:08:25:19:37:0c:0f:9a:05:38:
                    03:d8:a5:99:41:21:55:fa:f7:31:bc:50:f4:82:2d:
                    5a:9d:ed:ab:d0:57:da:ba:2b:4c:ae:dc:ea:e0:19:
                    70:a7:89:f9:aa:0c:5f:31:49:c1:11:b2:d9:b5:1f:
                    c3:bf:03:f1:a1:7d:48:20:12:a7:97:ee:a9:b9:ef:
                    bf:29:29:75:e0:29:73:23:e5:e7:51:a8:89:50:7b:
                    5c:6b:27:c2:b3:56:71:fa:ce:4c:bf:d3:1a:54:86:
                    a3:62:c2:b1:04:72:aa:77:81:a1:b3:b5:de:d8:33:
                    38:1f:06:21:bf:39:ac:5c:3d:96:53:df:70:ad:c1:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:30:97:8B:7B:08:3D:81:BA:55:95:3F:F2:25:97:72:2E:5C:4E
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:45:d5:31:52:5a:b8:bc:6e:16:63:70:05:7d:97:df:9a:
         b2:55:78:68:b7:b5:4c:a6:b4:2a:8e:c2:c2:4a:c1:e5:e8:68:
         db:9c:eb:18:f5:26:69:49:f5:03:8b:24:c7:4a:a5:d0:30:72:
         8a:98:d4:22:a1:50:4e:37:79:32:7f:c7:b1:e0:db:93:df:38:
         b9:1b:1f:b3:8a:2d:6a:bc:02:1a:8e:9d:a0:0d:b5:c3:2c:b0:
         6d:df:d0:b2:57:11:9c:14:61:42:27:14:0f:10:fa:b8:b7:a4:
         96:58:34:1f:70:58:e0:32:45:56:c8:37:44:45:5b:da:82:aa:
         bc:97:4d:11:c4:53:bf:1d:af:22:b1:f3:e8:1f:e7:ee:8c:ad:
         d8:49:7e:fc:db:ac:ae:43:8d:40:51:4e:17:28:5d:96:cc:04:
         63:f7:25:9f:5c:1f:43:14:e7:d9:58:a3:78:26:0c:fe:46:04:
         2b:a9:2a:d6:ee:f4:fe:ea:22:44:5e:f7:c8:eb:e5:b2:f7:a6:
         33:a7:98:75:9a:43:53:e8:e6:e2:cd:41:33:4b:0f:06:5a:b3:
         06:95:60:0e:c4:85:1a:3e:74:55:16:4b:04:51:a4:49:7f:a4:
         1d:8f:3d:d1:1f:e0:34:05:3b:8b:3d:cc:a6:df:d8:e4:d2:8c:
         55:b1:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:54 2026 by rpki-client