This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          fgKXSceBvC/996MYCGHP6U5RKb1eYBbsUegF5ch7sIs=
Subject key identifier:   34:50:85:54:D0:97:45:4F:ED:90:0B:E1:0C:9B:50:8A:A0:A5:91:4E
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       019C45B5AA095F8A046323F3AA59297F7DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1813
Signing time:             Tue 10 Feb 2026 04:00:59 +0000
Manifest this update:     Tue 10 Feb 2026 04:00:59 +0000
Manifest next update:     Wed 11 Feb 2026 04:00:59 +0000
Files and hashes:         1: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (hash: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU=)
                          2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: 55rZciQv+SO51g4ZnYbHS2KHeAYKeNgtgKXr0wyqh9Y=)
                          3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:45:b5:aa:09:5f:8a:04:63:23:f3:aa:59:29:7f:7d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Feb 10 04:00:59 2026 GMT
            Not After : Feb 11 04:00:59 2026 GMT
        Subject: CN=34508554d097454fed900be10c9b508aa0a5914e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:8f:a3:c8:25:a0:d8:91:7d:34:55:82:0d:
                    0e:a1:72:ec:0b:90:23:3d:ed:f5:2d:b8:9c:49:b4:
                    d8:04:d5:b6:a5:83:52:b7:79:36:55:15:86:aa:da:
                    d4:7a:b5:0c:91:d1:18:31:f8:77:a9:e2:1d:71:8c:
                    d0:43:16:93:59:6b:59:0b:53:9b:ed:7b:26:9c:ad:
                    87:eb:51:67:70:4f:f2:80:07:6d:0b:ef:97:1c:ec:
                    2b:25:a2:c1:09:ab:0b:d6:38:2b:71:ff:f8:38:7f:
                    0f:d6:f6:f2:3c:e9:c6:58:1f:df:28:96:94:1d:c8:
                    ab:4a:73:70:ca:34:a4:73:f1:3c:d6:c6:39:4a:21:
                    d3:8e:e3:54:e7:ea:67:d0:92:f5:f6:df:6a:f8:2a:
                    3c:74:c1:86:6f:5d:43:f3:b6:e0:a2:bc:da:e9:94:
                    4f:1b:b4:a0:c6:c4:ba:1f:04:0d:87:57:69:8f:3e:
                    e4:27:9b:f5:2b:7f:dc:69:35:b7:6a:69:f6:6c:64:
                    7a:d7:0f:ff:35:55:b2:ee:9a:0f:e5:e2:f9:44:63:
                    87:58:35:d3:18:07:c6:9c:59:8a:e8:38:3b:c9:62:
                    66:e8:99:ea:72:10:70:19:d4:1e:55:75:2e:09:03:
                    bb:38:b8:69:9e:53:39:bc:b2:b8:89:a4:9c:59:6e:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:85:54:D0:97:45:4F:ED:90:0B:E1:0C:9B:50:8A:A0:A5:91:4E
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:22:51:b0:11:01:79:32:2e:74:72:74:52:f8:24:3d:07:
         bd:fd:4d:76:3c:c9:be:68:cd:04:65:0b:85:95:61:13:22:4e:
         ea:a4:d0:33:de:f6:72:8c:17:5a:bf:e7:4d:cb:d9:75:4a:27:
         c8:45:31:aa:f9:91:17:32:dc:b8:b8:ca:84:30:12:6f:24:c1:
         d9:16:5c:cf:c3:ba:80:e9:10:83:43:5b:84:2f:11:cc:93:de:
         ac:a9:88:6f:57:b6:3e:5f:c7:ec:15:05:9b:dd:72:d3:88:53:
         92:11:15:f2:13:68:e2:a2:4b:8c:73:be:46:48:60:4f:c0:3a:
         fd:e6:cb:17:7c:cb:82:c8:12:9b:a6:b8:d5:39:70:9f:a6:c6:
         a9:72:44:ac:71:b6:70:10:9b:7c:fd:09:72:ca:f2:42:fc:d2:
         08:dd:19:45:14:50:7a:f5:e7:4e:bc:ad:bf:a1:93:26:02:96:
         9c:13:d7:ad:1a:6b:7d:27:10:6e:b5:9b:03:7b:4d:23:48:bc:
         46:7e:c1:14:06:89:86:19:5d:98:8b:27:ac:5a:83:74:38:41:
         66:4b:8e:69:f9:c7:e3:64:eb:b0:1e:9b:90:40:1c:5f:c2:6f:
         f1:be:6c:13:a4:53:aa:5d:80:30:37:af:94:da:c7:c7:45:cb:
         59:70:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 09:07:07 2026 by rpki-client