This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          SGKz23oxAdOizYTWegH0tAc9GlYQC10Y87GCeTMGJVo=
Subject key identifier:   EE:5F:CE:F1:C1:78:FF:A0:A4:71:3D:2D:4C:A9:21:04:FF:61:60:7D
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       019C1D27BF3BE56B4C472D51D9AD937978D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          1803
Signing time:             Mon 02 Feb 2026 07:01:09 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:09 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:09 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: yOKQxYBvpQ5JnxSE2BcRsTs4moY50wOvOyV7gs6g76E=)
                          2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
                          3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
                          4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
                          5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:bf:3b:e5:6b:4c:47:2d:51:d9:ad:93:79:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Feb  2 07:01:09 2026 GMT
            Not After : Feb  3 07:01:09 2026 GMT
        Subject: CN=ee5fcef1c178ffa0a4713d2d4ca92104ff61607d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:da:75:5c:a9:93:1b:ac:a7:a5:6f:6b:49:
                    47:02:be:b5:59:b9:f1:f2:aa:1a:74:21:2d:5a:c3:
                    39:95:6a:02:2d:6d:ab:c4:84:da:0c:72:6b:64:29:
                    ba:fd:c0:88:22:f0:b2:48:6c:cb:06:32:c8:8d:5b:
                    32:aa:3b:80:87:ff:52:00:bd:1c:11:de:c8:d6:4e:
                    24:14:30:87:76:c0:eb:94:a6:e5:cc:ea:71:1c:dc:
                    82:84:29:96:1c:e9:da:7f:4a:6b:bf:66:14:2d:b5:
                    c7:29:25:0e:e2:6e:5d:60:72:3d:f2:5d:2b:b1:42:
                    83:28:9d:0b:ed:ef:c6:93:01:ad:2d:74:17:86:fc:
                    ff:de:b1:c7:61:81:a6:57:b1:a4:d2:69:d6:8b:44:
                    f8:27:6a:be:5d:f4:dc:d0:9c:09:98:a8:7c:a9:b6:
                    46:a2:3b:8a:02:f8:e9:53:5f:ad:67:5a:b2:57:ea:
                    25:45:24:a4:44:01:63:4a:cc:ea:cb:61:73:68:9f:
                    d3:40:e5:85:b1:7a:8a:ea:21:e4:57:a9:ce:9c:d2:
                    74:db:ea:1a:ea:95:03:18:22:17:c1:9d:79:2b:cd:
                    51:0e:64:d3:e1:9b:33:26:ef:f8:2c:3e:b9:dc:7f:
                    39:28:fe:99:0c:40:c6:06:af:19:cf:34:e4:1d:e1:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:CE:F1:C1:78:FF:A0:A4:71:3D:2D:4C:A9:21:04:FF:61:60:7D
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:ca:1e:bf:c0:2d:7b:52:2c:ca:cf:60:6d:59:55:92:0c:
         22:da:28:62:00:a1:7e:da:8b:54:b3:9e:1a:26:79:89:74:20:
         74:3c:fb:f6:51:72:6a:50:46:00:44:53:ac:00:04:98:d5:59:
         94:63:23:d2:46:f8:b1:a2:77:4e:81:1e:c3:c7:ef:1a:3a:3c:
         1c:7b:19:3e:ce:bc:8a:54:33:c8:21:23:2e:dd:4f:04:60:56:
         83:37:41:65:1b:cb:7e:75:2e:d2:44:fc:98:a1:cd:eb:64:9a:
         9c:45:de:90:d5:44:0f:fd:a2:d7:45:27:8a:7d:d0:32:23:56:
         0e:dc:9b:5d:88:bf:1b:5e:bc:a6:dd:21:4b:00:fe:ad:67:a3:
         bc:7f:ef:45:0a:cf:d0:b0:29:b5:6b:7b:53:c2:34:39:56:81:
         b2:61:16:e2:de:16:81:7b:a8:aa:7b:ee:db:72:a4:74:7e:b0:
         15:b9:5a:63:47:8d:f6:1e:95:68:90:3c:33:bd:b6:a2:46:f1:
         3f:64:ba:2d:1f:74:24:b8:5a:ba:05:2b:75:a7:9c:e2:b4:59:
         53:69:13:e1:c5:09:56:95:90:1f:20:ad:cb:f6:a4:b6:0c:94:
         f8:5c:e6:69:4a:45:24:8e:38:38:7f:7c:0a:6f:a5:6d:c8:e8:
         41:17:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:42 2026 by rpki-client