This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
File:                     kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json)
Hash identifier:          qOQ42742yV8MJXzN4vJkw9in6JcuqU1YumjcDxu5r8s=
Subject key identifier:   5E:70:A1:0D:5D:17:F7:7C:AB:50:CA:71:41:50:36:23:12:5F:F2:AE
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Certificate issuer:       /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial:       019C420FC7981C1F35875FD1850597618305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:56 +0000
Files and hashes:         1: LjEw3uyxaPJLcHI2N1Hp6ot23UE.roa (hash: jiCfpWdQJgmhdXrUcXRoAo1coGe6/NfMrbeXLLnoEiM=)
                          2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: FkauVyDsOjskflKsyWB65va5d7Ne7oALqDlU0JTpN4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:c7:98:1c:1f:35:87:5f:d1:85:05:97:61:83:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
        Validity
            Not Before: Feb  9 11:00:56 2026 GMT
            Not After : Feb 10 11:00:56 2026 GMT
        Subject: CN=5e70a10d5d17f77cab50ca7141503623125ff2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:68:62:06:b9:b4:6a:55:95:9d:83:ae:b5:
                    ff:ac:35:04:d7:d2:c7:5e:70:89:2f:f2:18:94:0e:
                    6e:91:a7:dd:fc:18:19:f4:c1:a8:95:d3:05:f1:5d:
                    1a:e7:b6:6a:87:3e:9b:2d:b1:4e:e7:04:61:49:76:
                    fd:d9:58:08:ea:49:65:e9:d3:c5:c0:ac:07:3d:bd:
                    14:b8:04:a1:2b:3c:7b:f3:75:84:2b:76:aa:07:cf:
                    0e:73:de:94:33:50:4a:98:c9:58:3a:16:80:6e:79:
                    ae:df:f1:4d:32:ca:23:b5:2a:1b:ea:0b:04:4e:47:
                    8f:1b:9e:4f:b9:0f:b7:29:d8:6e:38:13:0e:20:70:
                    55:4c:d4:63:00:92:80:29:e7:d4:69:a5:1c:d7:a2:
                    a8:aa:cc:18:1b:3a:e7:28:48:8c:f1:67:40:ed:76:
                    a9:51:81:b6:b8:42:33:5f:9b:ed:f7:42:5a:c0:8b:
                    52:8c:b0:50:81:4c:84:06:d3:97:d5:c9:c7:77:ad:
                    f1:60:d1:2a:ec:10:76:4d:29:11:66:6c:79:91:86:
                    f3:6f:a0:2a:e4:2a:48:70:a9:d3:83:0f:51:01:dd:
                    e0:94:69:28:09:8a:f2:82:df:77:66:0d:a0:19:15:
                    e8:cf:cd:7f:05:aa:08:06:d7:73:5b:8f:16:cd:21:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:A1:0D:5D:17:F7:7C:AB:50:CA:71:41:50:36:23:12:5F:F2:AE
            X509v3 Authority Key Identifier:
                keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:9a:94:3c:58:44:ab:24:62:8b:d4:39:5f:0e:03:a1:3f:
         42:7f:64:23:dd:fd:14:09:b8:00:d3:17:f3:50:59:cc:5e:0e:
         ed:65:09:4d:e2:86:56:5b:19:f4:d1:0e:d6:c4:87:a7:16:5b:
         c9:2b:61:27:8a:4a:60:f5:de:e3:21:fa:4e:43:7c:51:1c:76:
         24:d2:d4:d9:26:be:49:d7:3f:e1:f3:77:cc:b2:33:66:1f:32:
         c4:4b:d0:db:67:42:9f:7e:1f:ad:36:10:13:1a:4b:95:e6:ab:
         6a:d4:b8:bd:01:26:4b:06:a9:8a:d3:7e:89:0e:f9:2f:b2:4d:
         d2:2b:a2:5b:04:e5:15:95:fe:c4:58:58:07:ca:f8:19:fb:13:
         7c:cd:30:76:a5:a1:d0:87:af:cc:11:ce:ff:fb:9a:b5:22:97:
         9d:24:d9:4c:5e:df:ce:33:c3:db:30:85:21:c7:06:93:7f:a4:
         7e:ae:4f:02:e0:94:c0:a5:68:e2:5c:b4:91:be:b3:24:12:62:
         f4:ba:cb:b6:53:5e:22:eb:02:74:84:f4:c2:5c:fa:fd:21:a4:
         1d:0c:07:ff:29:ea:c2:4e:c5:e7:e6:42:15:73:30:01:9f:91:
         2a:e6:2f:c4:4c:0c:67:29:43:38:b3:d8:0d:65:cc:a2:f2:a9:
         55:4c:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:42 2026 by rpki-client