This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File:                     kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier:          x03q33Upi6o19941OpWMyHIV25lQXXwuSmyxmqbB1sA=
Subject key identifier:   92:3E:94:98:0A:F6:11:A0:7E:2C:2E:E1:13:64:1E:E9:EA:4D:61:5E
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer:       /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial:       019C42EBC5E062114A232BB247BA20938728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 15:01:13 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:13 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:13 +0000
Files and hashes:         1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
                          2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
                          3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
                          4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: rWSf1umnY6BUIA/RStqlaC7NxZRcaa3iBqDqvk/KQ40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:c5:e0:62:11:4a:23:2b:b2:47:ba:20:93:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
        Validity
            Not Before: Feb  9 15:01:13 2026 GMT
            Not After : Feb 10 15:01:13 2026 GMT
        Subject: CN=923e94980af611a07e2c2ee113641ee9ea4d615e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:02:ac:74:24:5d:2e:72:16:65:60:5c:fe:
                    47:04:fa:81:f9:e2:74:7f:6c:0a:42:01:47:6e:c2:
                    92:17:76:74:c9:e3:7d:c2:19:29:0f:ac:df:d8:a7:
                    17:28:9c:c6:7a:77:9c:cd:64:19:31:b2:3e:dc:46:
                    5a:89:71:0d:2c:18:a4:4f:f2:4c:35:c4:dc:6a:3e:
                    a4:29:68:1c:2d:30:ed:9a:88:87:12:bd:43:45:16:
                    d2:8b:c1:85:95:01:eb:8c:4e:ff:44:d2:d8:03:a9:
                    df:8b:da:61:47:52:e3:fd:47:71:47:45:03:ff:f8:
                    72:8c:e0:b7:64:f7:b0:ac:11:f9:75:75:c4:44:23:
                    8a:c8:b6:52:6b:bd:7a:ff:a8:8a:6c:40:12:1c:04:
                    25:3e:e1:7e:43:82:82:9b:45:8c:65:fe:09:7b:73:
                    1c:49:78:56:ed:50:a6:9d:fa:cc:39:b9:27:3e:0b:
                    dc:98:18:a0:92:47:24:55:3c:c5:f0:46:e1:6a:d6:
                    3c:c6:fe:9f:a6:ac:ce:52:b6:31:54:3d:3c:6e:d6:
                    ea:5f:8c:f2:39:6e:5d:1c:7c:63:b8:98:7f:ff:c8:
                    e2:54:ec:74:70:da:8d:c8:b8:69:70:f8:36:db:cd:
                    a4:c0:60:96:98:a9:87:8b:22:cb:99:4f:38:3a:cb:
                    00:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:94:98:0A:F6:11:A0:7E:2C:2E:E1:13:64:1E:E9:EA:4D:61:5E
            X509v3 Authority Key Identifier:
                keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2d:9a:e4:6c:dd:1c:b3:6b:45:18:3e:04:cc:80:84:54:d5:
         a8:ee:0d:c2:8c:c7:20:42:27:ac:6d:7b:2b:55:1a:1b:99:1c:
         14:7d:eb:79:00:18:9e:75:70:0f:13:16:f8:08:30:9f:30:42:
         6c:17:42:bb:b6:79:cb:8f:37:8f:25:88:38:dc:15:de:99:3d:
         69:1a:ae:5c:a3:6d:56:ad:be:73:86:ed:57:f5:7f:b4:09:66:
         43:11:01:5f:50:80:8d:85:11:6c:17:5d:8c:8a:1a:9a:9b:9d:
         6c:31:dc:03:9d:ce:69:a8:6e:e6:46:d2:73:41:9f:e0:35:28:
         31:c1:aa:1b:37:b7:69:17:11:b0:84:6a:2b:3a:91:5f:80:6e:
         a0:bd:af:93:f2:31:10:99:1b:ab:58:d8:86:03:d4:06:28:f3:
         9d:6b:53:2a:50:ab:9e:e3:d4:f8:58:61:e6:59:a3:f9:2c:83:
         19:c6:ac:14:d7:0b:cb:66:a7:76:6e:2e:6d:c7:73:72:72:d8:
         7e:bb:a5:ab:d6:94:a7:cf:f6:84:11:d0:09:a3:4e:8a:ba:dd:
         c7:45:02:b6:b0:cb:d6:82:27:02:46:e2:1a:e5:cc:1d:45:d2:
         ae:35:5f:11:f4:d4:a4:33:bb:80:90:8b:42:81:c8:6d:05:e4:
         02:de:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:21 2026 by rpki-client