This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          2HBZhdPcb5haWV4rgq2HpGsFopHeaww3cU7BG1i/N3o=
Subject key identifier:   ED:40:D8:DC:26:7C:23:83:F4:EC:B4:32:BD:F2:BE:CF:C3:8D:9C:4A
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       019C4322740DD8FA92C1B4D448C09FF85CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          0A10
Signing time:             Mon 09 Feb 2026 16:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:57 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: DMbH8+wymFSyGrvPMFRtq0FGVu2k2vsRDaCsuaWSi2k=)
                          2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:74:0d:d8:fa:92:c1:b4:d4:48:c0:9f:f8:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Feb  9 16:00:57 2026 GMT
            Not After : Feb 10 16:00:57 2026 GMT
        Subject: CN=ed40d8dc267c2383f4ecb432bdf2becfc38d9c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:50:3d:b9:0c:29:a8:1c:ac:e4:82:26:b7:
                    a8:88:bf:28:16:1f:72:ca:2a:6f:95:6c:00:55:f3:
                    f3:bc:2f:08:08:a2:90:99:54:ea:48:46:ec:a6:45:
                    4b:46:7c:e2:d8:e3:66:e2:01:d8:9b:f1:cd:14:03:
                    63:d3:6b:c8:e7:8a:02:97:65:3f:62:fd:03:48:7d:
                    eb:77:f6:d4:65:f7:bf:8d:03:76:8a:57:b8:bb:6a:
                    5a:ba:0d:09:3c:96:74:a5:f5:c1:13:27:3c:35:49:
                    c9:a5:f5:e4:ca:2c:ed:f4:73:57:ae:5c:4f:11:34:
                    30:65:11:f0:13:26:f6:95:23:bc:16:23:7e:e1:3e:
                    97:92:ae:db:8f:90:dc:72:26:f3:01:5a:a5:bd:b1:
                    b9:4a:46:59:b9:8c:51:63:24:5d:43:1a:d0:28:e9:
                    d8:da:be:7c:60:34:2f:01:cb:71:54:27:f3:e4:3e:
                    f2:24:86:c2:05:e9:85:e7:2c:49:58:03:5c:a5:9b:
                    75:58:af:f0:6a:d1:b5:4a:f4:54:ca:74:26:e9:4c:
                    0f:61:99:c1:2a:30:b6:99:6a:30:34:7b:88:d5:d3:
                    ff:6b:3d:04:2b:e3:e4:5d:d7:99:00:fa:c6:41:63:
                    78:a5:13:c6:b4:cd:05:67:80:b0:bd:bd:56:2d:b1:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:D8:DC:26:7C:23:83:F4:EC:B4:32:BD:F2:BE:CF:C3:8D:9C:4A
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:96:b2:41:3a:52:a6:94:eb:ed:9d:75:ab:cd:2e:f6:7a:
         2a:ef:fd:f2:2a:f9:05:82:3c:89:9f:27:0d:f6:38:dd:d2:12:
         fb:7a:73:c1:a8:24:81:ca:81:bd:8d:73:31:94:29:01:8a:ce:
         f4:ae:c9:12:6a:69:8f:96:e1:52:be:ba:a5:fa:d3:f7:23:ca:
         6c:81:83:3c:b1:55:78:4c:60:51:af:ea:85:94:bc:a2:dc:e6:
         fc:49:be:c7:2d:46:66:72:8b:80:c8:6d:71:58:90:15:03:b1:
         35:87:58:7a:0b:ac:91:8b:4d:2c:25:07:1d:f3:26:2e:6c:ac:
         99:d5:ee:68:dd:88:03:15:38:f6:0d:f3:6d:2b:69:fc:73:20:
         08:88:a1:de:3c:81:04:35:0d:5e:3a:5b:af:7e:a2:ad:d3:5b:
         c0:5e:58:c5:c7:d2:4c:e1:8f:82:07:88:c5:e4:2f:a3:c8:a4:
         4a:28:7c:53:00:8e:c6:f3:ec:7c:7c:dd:c8:35:6b:ae:76:1b:
         5f:d2:f0:3f:db:54:3c:87:04:7c:a7:37:f8:63:60:46:f4:fd:
         2a:b1:83:da:30:f3:18:2e:e1:50:6a:77:25:e2:ca:ce:a5:76:
         f3:c8:bf:24:14:12:7f:ba:53:41:c2:79:fe:1b:9d:28:c4:01:
         ef:17:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:08 2026 by rpki-client