This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File:                     K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier:          fnfU7blqh1qsSZ2ppuQ/ULJ8tlGB/XhkPDJnjOfOsDc=
Subject key identifier:   45:EF:20:0A:81:93:47:2A:E3:36:7E:60:79:83:AA:C3:53:C7:BD:C2
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer:       /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial:       019C1BA6F89FF2EB0B110DB7B0D31D00A33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number:          24
Signing time:             Mon 02 Feb 2026 00:00:53 +0000
Manifest this update:     Mon 02 Feb 2026 00:00:53 +0000
Manifest next update:     Tue 03 Feb 2026 00:00:53 +0000
Files and hashes:         1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
                          2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: Qe708efME+2m+Rtj6dpSUtzNMTtVKN101WLznKi5YP4=)
                          3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a6:f8:9f:f2:eb:0b:11:0d:b7:b0:d3:1d:00:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b588e466009520562061bef65b7f48298289865
        Validity
            Not Before: Feb  2 00:00:53 2026 GMT
            Not After : Feb  3 00:00:53 2026 GMT
        Subject: CN=45ef200a8193472ae3367e607983aac353c7bdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:0a:2c:40:f8:d6:a1:c7:4f:ab:3f:37:bd:
                    52:c7:bd:7c:72:70:59:8f:9f:32:1a:f7:1e:e6:8c:
                    e2:b6:48:b1:c4:f8:d8:0e:6a:8d:13:ab:15:4b:1e:
                    25:25:c0:be:09:e1:24:72:ad:0e:57:9b:47:5c:a1:
                    f7:30:94:4e:c3:0b:0c:3a:24:a8:13:46:8b:c8:8a:
                    8f:d7:37:d7:95:b7:9b:83:c1:5d:73:3c:0c:c4:39:
                    2f:a7:bd:e8:2e:75:ba:68:e1:99:14:9b:4e:05:c9:
                    b1:1b:e6:b9:a0:66:b6:03:27:11:68:5c:42:6c:13:
                    5b:a8:14:a9:81:da:0b:83:1d:cf:37:41:e9:2e:af:
                    4b:63:76:fd:63:c7:f3:f5:50:cb:1d:5e:b2:d8:08:
                    35:fb:87:f5:e1:85:b6:64:d2:0c:e3:76:73:3f:9c:
                    d5:c3:c2:e4:bc:1b:a3:35:6d:ec:92:29:c7:c5:79:
                    92:ab:ad:86:4a:88:38:1c:12:96:a2:90:ce:73:99:
                    0f:06:f0:a2:97:c3:e1:1c:f0:77:fd:de:01:fc:0a:
                    9e:bc:fb:31:a4:35:09:e2:9b:11:19:d2:c4:5b:9e:
                    30:1a:c8:6f:4a:a3:86:73:ce:dc:1c:f1:1b:1a:97:
                    dd:b7:3e:1e:a3:da:18:a7:6d:c4:ae:f8:ac:71:b9:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:20:0A:81:93:47:2A:E3:36:7E:60:79:83:AA:C3:53:C7:BD:C2
            X509v3 Authority Key Identifier:
                keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:60:0c:a5:66:a7:fe:2d:02:ec:a9:e1:d5:ab:59:e4:62:
         9e:8f:e5:dc:6d:97:ff:96:17:13:90:4f:e4:57:7a:4a:a0:90:
         c2:89:85:b9:b2:66:49:4f:df:55:37:1e:ed:29:23:a7:74:5c:
         4a:0a:21:19:5b:b8:8f:84:ab:33:0e:20:90:a3:22:cf:1c:64:
         f0:e6:b7:29:8e:1e:87:39:61:24:1d:b8:72:c9:94:80:88:91:
         35:a3:59:14:a0:fe:b2:ab:35:f7:be:88:11:02:97:e8:01:f3:
         d8:a9:cc:41:03:86:82:28:63:cd:d9:32:e2:9c:56:86:65:4b:
         56:18:b1:41:d3:bb:08:83:23:40:07:71:3e:d0:d7:4d:6f:95:
         99:72:c5:86:6e:38:82:14:2e:6a:8f:c1:3c:d8:ae:b2:3c:88:
         ef:49:99:b7:a3:54:51:c1:6d:81:21:3f:69:8a:99:67:84:d6:
         78:94:a4:18:14:df:88:2d:70:f6:7d:e8:07:32:71:2b:e9:63:
         c1:0e:6a:13:14:4e:65:79:81:05:9f:93:fa:12:5d:21:33:6a:
         c8:40:32:5b:6c:93:48:6e:c1:6b:e6:a7:d2:3f:46:76:89:c8:
         e4:c3:ba:d6:55:af:50:33:ee:cf:10:00:e7:a4:62:11:3e:a7:
         f6:2a:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:36 2026 by rpki-client