This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          xJiMxdcfVFeZi5tqun+FsENbmc09+chHLLIU0EfDDjg=
Subject key identifier:   2D:8E:D5:3F:BC:0B:87:3B:F4:23:69:28:3D:62:D8:77:13:46:FB:8A
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       019C43C6BD587703C27AE9CFACE52D0188BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          180B
Signing time:             Mon 09 Feb 2026 19:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:23 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: I9hv+EFzNtESPy6IbsckwfXG4xxYXav89fL6qcFHNIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:bd:58:77:03:c2:7a:e9:cf:ac:e5:2d:01:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Feb  9 19:00:23 2026 GMT
            Not After : Feb 10 19:00:23 2026 GMT
        Subject: CN=2d8ed53fbc0b873bf42369283d62d8771346fb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:9d:7d:d1:a4:5d:86:db:ea:c7:72:1b:cd:
                    fb:88:43:85:9f:47:6a:1c:e3:92:a6:19:95:6e:af:
                    3e:92:1e:a3:93:8b:5d:7f:d7:29:51:80:38:ab:26:
                    50:80:48:99:6e:fb:a6:ac:6b:79:18:32:98:e7:b1:
                    bf:29:7e:17:27:73:68:ce:31:53:1f:76:e3:c5:b9:
                    d7:98:68:4e:14:a0:8e:31:92:07:8e:ad:4f:b3:3f:
                    49:f2:f4:6b:24:8f:64:b3:20:ea:44:ac:14:6d:55:
                    f6:b5:8a:01:5b:a3:bb:7d:d8:c4:e4:fe:46:fa:b1:
                    e6:0c:55:c6:da:80:7d:8d:29:6f:1a:75:76:29:9c:
                    34:64:84:3a:a0:ad:b5:4f:0a:4b:4d:fa:75:5a:a7:
                    cd:8a:c8:30:3d:e3:7c:e4:a1:6b:b9:61:4c:8f:34:
                    d9:4c:1e:2c:88:4e:b7:d6:7b:1c:c2:12:28:4a:81:
                    d7:76:e0:6c:16:44:63:9b:1a:be:61:04:be:9d:ac:
                    65:33:7f:cf:18:f7:fc:d9:99:02:1c:e2:d5:f9:df:
                    da:6e:47:f2:47:cc:c0:4f:b2:32:9a:ef:88:f2:b6:
                    ac:fa:de:55:ef:a9:9b:50:10:dd:be:3d:34:96:c0:
                    ca:ba:3f:75:ff:29:3d:ee:4c:e7:f5:27:03:b9:1a:
                    b1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8E:D5:3F:BC:0B:87:3B:F4:23:69:28:3D:62:D8:77:13:46:FB:8A
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:02:35:ca:4a:a9:d5:24:87:93:81:70:f3:48:c4:b2:3c:55:
         55:0a:df:9c:ef:ea:0e:71:cf:45:48:00:b6:0a:fe:2a:a9:60:
         61:7e:96:1c:b7:22:12:46:a0:f5:5f:c5:f9:2d:1e:33:e8:eb:
         ea:e4:00:dd:cd:c8:ac:36:69:db:ac:da:6d:2d:b4:ae:4d:3f:
         e3:1d:59:8d:41:43:01:be:b3:76:3f:37:4c:1b:c9:82:32:9a:
         03:89:55:99:bc:0a:a8:b6:57:94:ea:b6:ab:49:29:1d:36:50:
         d5:42:48:c0:29:47:85:37:10:ad:a6:71:d5:7f:6f:4e:eb:45:
         4d:81:5b:56:35:f9:52:c9:89:8b:93:7a:15:0c:5b:f7:69:a8:
         81:16:3e:50:9a:6d:00:06:53:3a:02:d1:42:d1:1d:d0:8e:fa:
         a8:7f:de:dc:2f:d8:65:67:67:6a:b3:e3:8a:be:2f:74:a8:f8:
         8a:c2:2e:78:5c:c5:06:fc:f7:e7:f3:d6:a6:34:8a:72:e6:b2:
         f7:13:4e:99:35:c0:14:1d:0b:74:8e:ed:7f:18:8f:99:d7:2d:
         77:dc:65:c5:3b:6e:b6:88:e3:ac:df:b1:89:5a:96:a6:88:3e:
         37:c6:96:90:6d:e7:ae:86:13:82:f2:e4:02:f8:8b:63:5f:d8:
         16:3a:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:40 2026 by rpki-client