This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File:                     K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier:          3ObzkUiZ/B1d36twuizxP+jXrXSxoG2Tg/FaaPPSRRM=
Subject key identifier:   37:EB:20:D8:51:2E:10:E0:E1:07:55:64:3C:80:1C:3B:CE:59:01:2A
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer:       /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial:       019C4358FA9A9CED8DC2C5593FC21F214A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number:          180C
Signing time:             Mon 09 Feb 2026 17:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:30 +0000
Files and hashes:         1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: cQTSY2pdw3m/5BKxUOtiDnSGnzL21CcBnDMqJTONhZ4=)
                          2: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:fa:9a:9c:ed:8d:c2:c5:59:3f:c2:1f:21:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
        Validity
            Not Before: Feb  9 17:00:30 2026 GMT
            Not After : Feb 10 17:00:30 2026 GMT
        Subject: CN=37eb20d8512e10e0e10755643c801c3bce59012a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c5:17:ef:55:43:e1:80:d6:b6:50:b8:60:fe:
                    c7:f8:06:0c:d6:7e:f8:0f:ba:d1:06:cc:be:d1:19:
                    7b:bc:7f:cc:c5:1c:e3:bf:2a:85:91:6e:fd:ef:6a:
                    ef:3b:69:c2:39:af:78:e5:70:e6:8e:6a:26:d6:2a:
                    00:a2:de:3b:f8:aa:94:a4:87:f9:63:ab:27:b4:e6:
                    34:67:24:f1:15:c1:18:d0:6f:6c:64:70:1c:6e:62:
                    7b:a4:d6:a5:2a:fc:6e:55:db:b2:c0:27:3e:5b:69:
                    48:c1:dd:d2:21:37:49:04:16:5e:17:12:e3:d9:9d:
                    31:e2:d3:02:3e:7b:d8:a4:e7:2c:0f:79:7c:8d:44:
                    d2:e8:52:0c:af:9f:bd:18:d3:1e:5a:78:b0:d0:0e:
                    50:63:81:ce:8d:bc:cb:f8:5e:30:0a:36:52:28:f8:
                    49:86:ef:65:a5:51:60:82:aa:b7:e3:85:f6:8a:8e:
                    4f:83:5b:fc:f0:f5:8b:4a:c7:5a:1f:44:7e:27:55:
                    52:3b:8d:81:67:0f:73:90:4f:4c:ce:62:d5:40:0b:
                    43:91:33:f5:3c:82:6a:a2:1f:c8:bb:57:c7:40:7d:
                    ba:7f:47:73:d0:1f:00:d0:0f:05:4a:c7:bd:d5:3c:
                    65:6e:71:d6:d1:a3:8e:ae:8e:9f:5e:ce:7e:5a:62:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EB:20:D8:51:2E:10:E0:E1:07:55:64:3C:80:1C:3B:CE:59:01:2A
            X509v3 Authority Key Identifier:
                keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:85:77:e9:9e:65:e4:db:b3:32:ab:3d:81:4d:fd:df:7b:
         0a:4c:eb:9a:bc:5c:aa:85:48:80:68:1f:9e:3b:57:62:8a:bd:
         91:98:0c:19:48:34:ab:6f:c3:d6:ce:51:4a:0c:28:c4:ea:5c:
         28:cb:d9:51:02:a6:f8:c4:e6:4d:8f:47:1f:e9:c0:c2:4e:c5:
         e6:ff:f4:53:97:a6:2e:e4:9a:8c:43:f6:6a:44:97:23:d1:67:
         a3:28:88:ea:26:09:6e:8a:c0:fd:2d:cf:ed:d0:aa:e0:73:7a:
         6c:dc:6c:47:4a:26:12:27:95:3f:4d:cd:58:69:3b:6b:88:4d:
         20:bc:36:05:d8:5c:e5:ea:87:3b:62:f9:df:41:cd:c1:b9:cc:
         2a:c1:b1:6c:6f:70:42:29:76:bb:a6:11:10:ca:b0:05:b2:c0:
         cd:00:d1:bd:a4:53:1e:f7:8d:b7:99:8c:50:95:95:f4:54:e1:
         13:49:c5:c0:a8:f5:f9:6d:b0:41:e7:f8:34:19:49:cf:d7:23:
         39:a6:08:9a:8f:0f:c0:c7:1b:9f:9f:c3:30:10:37:29:72:84:
         5c:d4:c8:a9:45:83:1e:f8:cd:38:d5:fc:85:d3:50:93:9e:ab:
         47:ed:f3:9d:71:b2:93:56:91:88:1d:f8:7b:55:e8:ea:14:25:
         ba:21:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:56 2026 by rpki-client