This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File:                     KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier:          S1KHSkUCqiwQvitS46k5jUL+ldsCsQSClW+NhTRutP8=
Subject key identifier:   91:EE:C7:60:C3:A1:5E:3C:22:EE:77:1B:C2:1E:DA:43:9E:2F:DA:CE
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer:       /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial:       019C416ACABCDB31E2F2261E4E2E8FA45CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number:          0E67
Signing time:             Mon 09 Feb 2026 08:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:43 +0000
Files and hashes:         1: Ej1NGALUAyZGkeedSA07ESoqQtI.roa (hash: bVGUYeTkungmGZQJc78ekhzyESu4jsfHGMMaJDPhxpU=)
                          2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: doPzucJ0saueZSmMUPkbVRVBBceeAIw/uFJJiFyIgO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:ca:bc:db:31:e2:f2:26:1e:4e:2e:8f:a4:5c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
        Validity
            Not Before: Feb  9 08:00:43 2026 GMT
            Not After : Feb 10 08:00:43 2026 GMT
        Subject: CN=91eec760c3a15e3c22ee771bc21eda439e2fdace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:46:42:ac:de:e4:28:7d:50:dc:5f:ce:c1:
                    45:d5:e1:9d:f8:8f:f8:c2:93:f4:5e:59:28:a6:99:
                    2a:51:50:6f:fa:f0:21:a7:f4:4f:c5:83:17:2b:af:
                    0f:de:21:28:f2:71:ee:e8:39:c3:ce:15:a9:1d:95:
                    37:f8:93:07:05:ee:46:9c:cf:86:68:89:b6:d7:9c:
                    9f:2c:92:8f:74:48:fd:80:43:20:80:3f:59:65:c2:
                    83:ab:19:58:67:52:20:fa:9a:c3:a3:bb:64:b2:f1:
                    2f:63:af:16:a6:8d:a5:ca:d4:65:1e:2e:a3:ed:63:
                    fc:f2:dc:de:66:04:36:62:34:3d:28:62:1a:0a:36:
                    2e:41:ae:af:3d:e8:25:50:b5:b2:f1:9b:7b:22:4f:
                    52:d7:77:9c:8e:42:a7:46:a0:ee:a1:72:80:c8:3e:
                    7a:61:f6:e4:0f:43:00:4e:5c:bc:24:1f:06:72:68:
                    a0:5a:f6:52:26:51:11:61:3c:9b:70:dc:fd:0d:d3:
                    ea:4e:7f:d2:6d:fa:da:80:dd:2f:23:d8:52:9e:e6:
                    d1:04:5a:cc:d3:c2:3b:87:bb:ed:6a:d4:2e:0d:72:
                    fe:a4:e8:12:0c:be:8b:65:78:e0:4a:51:5a:b5:ff:
                    05:80:26:99:f8:83:f9:a5:5a:62:9f:8b:7b:16:04:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EE:C7:60:C3:A1:5E:3C:22:EE:77:1B:C2:1E:DA:43:9E:2F:DA:CE
            X509v3 Authority Key Identifier:
                keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:de:df:b4:00:95:f1:9c:7b:b7:b7:7d:e2:b9:da:d3:34:4b:
         63:e7:b2:86:75:6b:93:c9:4b:78:7d:f4:7c:af:63:8f:24:0a:
         11:6b:e1:c5:d4:3f:38:75:e7:91:8b:31:52:05:44:32:5f:ec:
         0e:53:8c:ec:49:cd:de:1f:32:bc:ba:9e:01:34:53:63:48:a4:
         ef:1f:f1:3f:b6:b3:a1:46:ad:4b:01:b3:fd:54:3d:c7:af:0b:
         0b:37:6d:8d:29:78:98:8b:7d:20:07:e1:62:f5:05:63:c9:1b:
         5c:99:34:33:21:e7:83:39:bd:94:f5:9c:bb:78:c5:03:e4:10:
         d4:02:63:da:d1:7b:39:3e:7d:bb:c5:fe:4e:2c:ec:d5:f8:df:
         98:8b:5f:0b:5c:f4:32:ee:9f:81:42:af:ac:5a:da:c5:8a:45:
         f4:c1:58:06:11:78:5e:c7:51:24:71:16:93:be:97:4d:49:69:
         76:28:e4:cd:d2:80:70:81:86:f3:85:8f:0c:72:53:35:74:05:
         d0:ca:0a:ef:91:ef:4e:89:c7:95:96:d1:17:70:77:d9:d2:2d:
         41:ec:47:23:d3:1b:84:4f:d1:6c:c7:74:26:b5:72:31:9e:ed:
         9f:70:5f:8e:44:32:de:33:0c:58:e0:b4:9b:56:23:ba:ad:4d:
         c3:d5:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:16 2026 by rpki-client