This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
File:                     kYKD14XMiO-FIIYqwWHye1YwvBQ.mft (raw, json)
Hash identifier:          XpWIMGmmxySNS9cp3PIIN4o5Qy/8hedih+k2y0LJXvk=
Subject key identifier:   E2:7A:BE:2E:63:34:E0:6E:82:06:58:F4:A1:18:75:C9:FF:0F:67:D5
Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
Certificate issuer:       /CN=918283d785cc88ef8520862ac161f27b5630bc14
Certificate serial:       019C4246A5EFB1B38B746F3E8BB441311FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 12:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:52 +0000
Files and hashes:         1: Mj7AFWu1EqZHOmVJMKOMm7PDVAc.roa (hash: GRpVbHiFHaOYOCNz4Rrq2ZkYp/ciepwMIDmQKZdm5EU=)
                          2: kYKD14XMiO-FIIYqwWHye1YwvBQ.crl (hash: QP7HCLqXziG8vFu1CdSEA1f5UfZot58MECMCfX0LmDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:a5:ef:b1:b3:8b:74:6f:3e:8b:b4:41:31:1f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14
        Validity
            Not Before: Feb  9 12:00:52 2026 GMT
            Not After : Feb 10 12:00:52 2026 GMT
        Subject: CN=e27abe2e6334e06e820658f4a11875c9ff0f67d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:a0:cc:67:32:89:cc:db:f5:4f:40:1a:2e:
                    d8:12:87:a7:cd:e6:08:e8:1f:56:4e:f0:6e:76:84:
                    9f:3c:1b:4f:21:ba:6d:41:70:d9:58:9f:ae:47:51:
                    63:ff:6c:e5:dc:19:be:7e:51:11:9b:fa:7e:ea:e1:
                    b9:27:20:07:b6:0a:7e:f1:9e:2b:20:1c:78:99:73:
                    44:43:51:16:b6:c5:a6:6e:1b:19:15:4f:9c:a1:f8:
                    a9:8e:d2:95:2a:99:c8:76:cb:28:53:0d:f8:8b:0e:
                    c1:41:48:cf:0c:93:6c:e4:e9:d1:2e:08:a0:85:2e:
                    22:55:13:95:48:60:ba:b9:ef:32:1c:a6:9c:e6:e9:
                    20:d0:be:a9:c8:a6:f6:eb:00:41:34:16:b9:d4:93:
                    80:fc:a7:e1:d8:d1:46:09:1b:e5:2f:58:3d:f6:a5:
                    70:de:c7:d8:32:49:9d:64:dd:73:63:48:89:d0:97:
                    92:6c:ec:fb:8d:33:75:30:28:7b:89:58:f8:0a:aa:
                    5a:dd:ef:c3:ba:e2:eb:91:dd:9f:21:24:da:fd:70:
                    c1:a3:a6:d9:58:d4:a0:d6:92:68:d7:cd:e2:3a:c3:
                    b4:f4:a3:98:33:af:e6:05:6e:6a:cf:0b:87:f9:96:
                    b4:bb:50:b0:67:6e:6a:94:5f:f9:78:5b:17:5d:77:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:BE:2E:63:34:E0:6E:82:06:58:F4:A1:18:75:C9:FF:0F:67:D5
            X509v3 Authority Key Identifier:
                keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:23:d0:d7:91:6b:ef:44:21:4b:de:66:e4:0f:6a:5f:17:
         65:ba:a8:f9:2b:aa:31:99:2d:4f:0c:18:ee:73:99:b3:48:cb:
         89:15:a1:4a:82:0c:c7:67:09:41:db:91:80:14:17:77:a7:23:
         48:15:0d:d8:0b:25:8d:f4:a3:4b:12:9f:e1:cb:44:f2:79:a8:
         ea:ed:53:b4:6d:e5:cd:e5:4f:26:f3:9d:56:7e:69:53:d9:70:
         3e:34:c8:5c:3a:fb:56:82:96:66:2c:77:80:e7:23:60:9f:ee:
         ef:a9:82:d8:f3:12:82:e3:0c:5b:7e:ce:f0:40:67:4c:99:3f:
         99:33:57:39:48:22:c2:4e:d5:4d:35:39:02:7f:a8:72:9e:96:
         b0:61:90:39:44:a0:cd:9a:b8:fa:67:10:7d:2f:9c:ba:69:e6:
         28:bf:db:4f:29:9d:54:5d:ce:d0:a4:ed:df:8a:3a:ca:5b:44:
         c3:b0:11:c3:35:c3:46:2c:9c:59:a9:e2:56:15:0f:65:c4:d5:
         4f:6b:01:44:cc:4a:a1:a1:cb:fd:ae:10:a8:34:2a:a4:22:24:
         eb:88:07:26:72:88:16:ca:81:85:d9:e4:20:7d:a9:22:ca:c2:
         bf:49:d7:2a:84:8f:96:1c:ef:32:f7:e7:9a:50:58:54:67:e3:
         de:8c:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:07 2026 by rpki-client