This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File:                     kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier:          yCuonsmXYnHJ4z0GzPUF+fku3pvabPk3GWrxkx+3aKQ=
Subject key identifier:   2E:81:09:23:03:0B:7D:66:0D:F1:9A:53:6E:30:3B:4C:E1:30:A1:DA
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer:       /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial:       019C41A1BB80C1A750D4C61E03B43977A255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number:          147E
Signing time:             Mon 09 Feb 2026 09:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:44 +0000
Files and hashes:         1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
                          2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
                          3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: TofE2+FKEbuJtDzjZwDfLjJwt/iiXUMtZviph2RGZwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:bb:80:c1:a7:50:d4:c6:1e:03:b4:39:77:a2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
        Validity
            Not Before: Feb  9 09:00:44 2026 GMT
            Not After : Feb 10 09:00:44 2026 GMT
        Subject: CN=2e810923030b7d660df19a536e303b4ce130a1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:d2:9f:ed:48:d3:1f:44:ba:3b:bf:63:b2:
                    2d:6d:38:9a:17:72:4d:ad:b8:b3:aa:36:35:ca:49:
                    7e:ea:4c:0d:f5:dd:31:3c:77:84:e8:ce:34:e6:4d:
                    6b:8a:d7:02:4f:08:7d:16:84:5d:91:03:82:09:02:
                    63:90:e0:fa:62:df:a7:ac:fc:29:cd:c2:8a:6d:2e:
                    6d:d2:c0:52:95:5f:4f:32:cc:4f:af:d7:e7:64:82:
                    5c:79:b5:13:bc:9c:34:72:00:1d:ec:b0:97:46:72:
                    34:91:42:48:69:9c:a2:d9:a0:97:20:ed:ef:0f:a7:
                    5e:b1:a7:ba:de:6e:b2:79:7f:96:53:d8:47:07:cd:
                    e4:fe:8d:76:43:4a:d5:ba:a8:33:5b:eb:fe:22:be:
                    20:88:ad:9c:3a:6c:e4:e2:de:9b:67:04:e6:1e:68:
                    e3:fc:e2:3c:9a:99:83:f7:b8:17:b8:8a:17:b8:8a:
                    4b:52:1f:26:71:0e:65:f4:ee:39:42:55:88:31:81:
                    c0:f2:ef:bd:8e:ca:a8:8d:19:ce:7f:f1:c4:c5:59:
                    13:4c:c6:b3:9d:25:05:ff:c2:c6:53:2b:f1:1e:df:
                    b2:d1:c8:7d:35:44:41:3a:d8:35:a8:98:fb:0e:8e:
                    65:7c:b5:4b:12:fe:02:a5:ed:cd:bb:f2:cf:bc:25:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:09:23:03:0B:7D:66:0D:F1:9A:53:6E:30:3B:4C:E1:30:A1:DA
            X509v3 Authority Key Identifier:
                keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:15:60:6f:80:5c:8c:5d:18:af:06:6a:2b:aa:b1:d9:55:1f:
         f9:d1:d8:1a:ff:06:70:96:5c:b4:ee:26:b3:b8:52:0c:2c:20:
         c5:1c:65:7f:82:17:01:c7:55:a1:59:3d:40:3b:fb:4d:38:22:
         78:8b:94:2b:02:31:ed:de:11:e8:48:f3:12:d3:c7:59:af:bf:
         8b:75:ce:14:e1:db:9d:99:1d:7e:90:76:84:c7:a1:01:6d:cf:
         29:6d:06:1d:33:c4:e8:4c:1b:4d:f5:0e:e5:77:35:67:e4:d5:
         ca:7b:c3:60:12:68:fc:62:c1:90:d6:80:32:95:7d:97:c2:52:
         d0:42:06:9e:67:d5:0b:80:fc:de:30:c0:17:05:45:0c:4b:e5:
         23:08:73:bb:ee:38:c4:8a:19:19:1c:63:31:5a:57:12:56:ed:
         55:7f:9f:45:f3:b2:83:58:8d:10:30:05:be:06:b3:83:53:4e:
         15:94:e5:9d:11:6e:7d:06:7e:40:89:5c:81:26:02:07:27:b1:
         1a:a9:86:b2:2e:a9:4a:3c:18:c1:40:6b:73:77:37:b8:15:d0:
         9d:4b:61:97:be:ef:df:aa:2d:4c:62:62:3b:c7:6b:f0:4d:86:
         6e:cb:9d:77:56:bd:72:25:f3:e4:47:57:1e:d7:10:91:04:93:
         d8:dd:92:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBobuAwadQ1MYeA7Q5d6JVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4
MDcyYTAwHhcNMjYwMjA5MDkwMDQ0WhcNMjYwMjEwMDkwMDQ0WjAzMTEwLwYDVQQD
EygyZTgxMDkyMzAzMGI3ZDY2MGRmMTlhNTM2ZTMwM2I0Y2UxMzBhMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7TSn+1I0x9Euju/Y7ItbTiaF3JN
rbizqjY1ykl+6kwN9d0xPHeE6M405k1ritcCTwh9FoRdkQOCCQJjkOD6Yt+nrPwp
zcKKbS5t0sBSlV9PMsxPr9fnZIJcebUTvJw0cgAd7LCXRnI0kUJIaZyi2aCXIO3v
D6desae63m6yeX+WU9hHB83k/o12Q0rVuqgzW+v+Ir4giK2cOmzk4t6bZwTmHmjj
/OI8mpmD97gXuIoXuIpLUh8mcQ5l9O45QlWIMYHA8u+9jsqojRnOf/HExVkTTMaz
nSUF/8LGUyvxHt+y0ch9NURBOtg1qJj7Do5lfLVLEv4Cpe3Nu/LPvCXajQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6BCSMDC31mDfGaU24wO0zhMKHaMB8GA1UdIwQY
MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct
Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0
LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRVgb4Bc
jF0YrwZqK6qx2VUf+dHYGv8GcJZctO4ms7hSDCwgxRxlf4IXAcdVoVk9QDv7TTgi
eIuUKwIx7d4R6EjzEtPHWa+/i3XOFOHbnZkdfpB2hMehAW3PKW0GHTPE6EwbTfUO
5Xc1Z+TVynvDYBJo/GLBkNaAMpV9l8JS0EIGnmfVC4D83jDAFwVFDEvlIwhzu+44
xIoZGRxjMVpXElbtVX+fRfOyg1iNEDAFvgazg1NOFZTlnRFufQZ+QIlcgSYCByex
GqmGsi6pSjwYwUBrc3c3uBXQnUthl77v36otTGJiO8dr8E2Gbsudd1a9ciXz5EdX
HtcQkQST2N2SCQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:58 2026 by rpki-client