This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          2WVXj88RhrGRWJtRJw+Yux57bjycAX8n+t3/BX0XAyQ=
Subject key identifier:   7F:52:0A:F9:11:C0:F4:C1:64:B9:82:AD:5D:6E:A8:F6:92:D7:D9:03
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       019C3FE9D76D0019BC5B7775C8458677E902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 01:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 01:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 01:00:15 +0000
Files and hashes:         1: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (hash: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU=)
                          2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: Vi9dT8+xWmyyuoG19cTVarv78hljUT8XDwNvS/DE7fA=)
                          3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 01:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3f:e9:d7:6d:00:19:bc:5b:77:75:c8:45:86:77:e9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Feb  9 01:00:15 2026 GMT
            Not After : Feb 10 01:00:15 2026 GMT
        Subject: CN=7f520af911c0f4c164b982ad5d6ea8f692d7d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:ce:ea:14:9b:81:84:b7:a9:dc:18:f0:4a:
                    14:c0:72:ac:a9:7b:38:ed:37:d7:70:1a:07:dd:73:
                    be:2d:08:49:93:c0:b7:eb:12:28:ac:fb:66:32:dd:
                    32:a8:41:68:5a:db:83:55:5a:c8:58:02:71:2a:6f:
                    fc:77:50:6b:3c:de:75:ba:5b:b2:26:93:58:2b:27:
                    20:6e:80:d7:af:50:8b:c1:57:43:5f:c7:00:d4:22:
                    67:1b:f8:d3:af:f3:14:58:36:ee:af:63:8f:27:77:
                    78:1a:83:c8:b3:fe:2b:90:3c:f8:7b:a5:40:15:f7:
                    c1:7c:8e:0a:a5:30:2f:ec:8f:6e:57:59:11:8f:9f:
                    7a:82:c6:6c:ca:b9:50:20:e1:0e:74:3e:55:d5:e8:
                    60:31:98:8c:22:b1:91:4b:58:3d:ea:9f:45:f3:30:
                    66:b6:ae:a0:0d:64:eb:72:2d:9f:5d:8e:02:31:a0:
                    1b:d1:99:0d:69:ad:75:fc:ee:55:7e:c3:8e:f6:a9:
                    49:73:0c:69:58:cb:1c:59:e6:22:34:88:f6:09:16:
                    dc:6b:0a:62:33:01:8e:ab:ed:55:da:88:4f:8b:95:
                    a1:10:00:a6:96:05:c2:47:06:4e:a5:43:39:e4:73:
                    5d:9e:30:38:fa:e7:f1:18:a4:a2:be:c7:e9:e3:73:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:52:0A:F9:11:C0:F4:C1:64:B9:82:AD:5D:6E:A8:F6:92:D7:D9:03
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:b6:d3:57:d7:9b:7a:c3:54:43:4c:fc:bf:9e:f3:1c:15:
         c0:6c:d0:dc:7d:4e:75:7f:b7:0a:40:a4:91:38:19:48:e1:ba:
         64:1c:46:6f:ef:76:2f:7b:b7:69:b9:bd:cc:71:b5:5c:12:ee:
         ee:b7:29:96:08:2a:e9:ab:10:6f:8a:9a:00:a6:84:4a:63:72:
         86:10:4e:35:3e:25:4e:c3:f6:06:4f:4a:ff:37:44:4a:91:c3:
         e8:fe:d1:8c:02:25:1d:8e:3a:90:ac:e8:43:06:6c:21:f3:e8:
         b7:f2:45:db:3f:69:9c:25:fd:ab:18:31:19:af:91:50:ff:3d:
         ec:f0:f8:c5:74:75:33:50:da:8a:48:bf:be:e4:d9:b1:29:93:
         f0:0d:96:92:5f:14:72:01:e1:92:5e:03:be:6c:ce:2c:50:2a:
         ef:31:00:3b:7c:2b:5f:d4:51:f7:8a:16:b0:7e:a7:de:eb:b1:
         75:5c:c6:9b:54:61:f6:92:cc:ba:e6:d7:3c:fc:00:a2:b0:cc:
         23:55:be:5f:2c:7d:63:8b:4b:c6:bf:ca:04:0d:c4:f5:67:d6:
         9a:61:63:e1:30:e4:e2:26:c9:60:2d:8a:90:04:69:8c:06:bf:
         54:e6:5e:ea:d8:70:28:26:f9:38:05:4b:35:38:f8:84:ea:f5:
         20:eb:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 08:58:13 2026 by rpki-client