This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
File:                     MK7HNts6BEOzui_FtKQkWG-0zhU.mft (raw, json)
Hash identifier:          MW56aXqAZO06BnDopej8MaTojQ1uAnN7Ip0U4MZZBEM=
Subject key identifier:   CA:5E:1A:30:BC:1C:EA:B7:BE:0C:49:E1:AD:F4:67:AC:E1:70:77:05
Authority key identifier: 30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15
Certificate issuer:       /CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
Certificate serial:       019C42EAEA70A5F60ABD5EF92C0A53E05D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
Manifest number:          012B
Signing time:             Mon 09 Feb 2026 15:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:17 +0000
Files and hashes:         1: 3tQLmVymoZqw7VQrq9obl-zIU9Y.roa (hash: UW5r9uI28BmP8sjp5a0mYV+U1btRYcKpVFrYo4A53mM=)
                          2: MK7HNts6BEOzui_FtKQkWG-0zhU.crl (hash: bGFFtq/gHpzJv8ALzFYEXGLcoZxfdm0xwuCIgn6ogec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:ea:70:a5:f6:0a:bd:5e:f9:2c:0a:53:e0:5d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aec736db3a0443b3ba2fc5b4a424586fb4ce15
        Validity
            Not Before: Feb  9 15:00:17 2026 GMT
            Not After : Feb 10 15:00:17 2026 GMT
        Subject: CN=ca5e1a30bc1ceab7be0c49e1adf467ace1707705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:3e:c1:8f:35:e7:59:49:15:33:1c:4e:eb:
                    1a:35:32:26:8f:ca:c4:c4:e7:77:f1:1a:62:b3:43:
                    fa:79:01:6c:13:fe:19:14:77:6e:f4:29:cd:84:c7:
                    88:c5:38:55:3f:93:34:8e:71:4b:1e:b7:9e:f0:85:
                    59:5e:9f:27:ea:75:e2:d1:5e:69:80:84:6f:a0:75:
                    67:9f:66:47:07:da:22:73:99:c4:32:84:57:e7:45:
                    4e:8c:50:2f:7a:13:bc:cf:0b:08:eb:61:fc:02:4f:
                    91:42:2c:09:60:b3:04:53:ea:d9:7b:dc:5d:f8:8f:
                    7a:d8:d9:21:c3:41:36:47:7f:0e:f5:c0:2f:c4:5a:
                    03:03:7a:b0:93:7d:a8:f9:8f:13:d2:92:68:66:ae:
                    84:be:75:2e:13:0f:9d:77:bc:66:10:df:f7:d8:cc:
                    94:a0:c3:04:92:19:6e:be:78:aa:f1:85:b3:38:6a:
                    07:17:78:cf:84:ee:c9:52:71:3e:b9:51:9d:95:c6:
                    a3:8f:39:d4:d5:9d:b9:16:8e:dd:24:32:24:c9:0f:
                    6d:c7:5c:08:5c:5d:db:3e:f6:79:e9:80:de:cc:73:
                    56:3c:97:08:00:2b:9d:ac:1f:8e:38:4c:7e:19:87:
                    f6:9a:20:30:e5:8d:49:89:12:73:ae:d1:86:e6:90:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5E:1A:30:BC:1C:EA:B7:BE:0C:49:E1:AD:F4:67:AC:E1:70:77:05
            X509v3 Authority Key Identifier:
                keyid:30:AE:C7:36:DB:3A:04:43:B3:BA:2F:C5:B4:A4:24:58:6F:B4:CE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7HNts6BEOzui_FtKQkWG-0zhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d37bbf-056d-48f0-90e7-b379ea03fbaa/1/MK7HNts6BEOzui_FtKQkWG-0zhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:9d:89:2e:54:08:4f:f8:b3:82:0e:b5:b9:ae:aa:6e:f7:
         c0:28:1a:ae:a9:f6:08:9b:af:53:3b:cd:6d:c8:5e:dd:2c:d6:
         46:66:0b:64:cb:b4:8a:1c:f6:fa:fe:3b:79:dc:c8:01:98:01:
         60:01:08:73:ec:cd:90:cf:8a:1c:e1:3c:ab:40:5a:66:cb:c8:
         69:26:7e:db:f0:af:69:0b:cc:96:1b:43:eb:39:18:b9:16:1c:
         b2:0d:c7:58:a1:99:03:1d:9c:3b:4f:e7:5a:51:4d:66:14:b8:
         c9:92:c2:65:c3:3a:4f:87:4d:3c:60:17:6a:9e:2c:77:9c:c8:
         12:41:6d:71:b3:17:24:10:87:55:52:57:d0:82:9c:55:24:4d:
         ee:10:2d:18:2c:1a:cc:73:40:88:33:3e:a8:0a:29:9c:1d:31:
         e4:00:ca:8e:1f:17:bb:bd:ee:47:56:0d:1b:7c:99:89:f7:ae:
         e6:40:3e:22:68:9a:91:31:1d:3a:a2:5b:8f:cb:44:ba:aa:ed:
         2e:32:33:b6:21:0e:75:e6:c2:2c:0a:b2:16:a6:b0:46:f8:31:
         32:5f:79:fb:66:5f:ee:22:de:49:88:db:d4:b8:3a:6b:de:73:
         f7:f8:18:dc:68:0c:96:05:5b:be:e3:bb:0c:96:be:14:59:27:
         d7:2e:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:55 2026 by rpki-client