This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File:                     KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier:          dAxtLQSxlu0BssofevOxKDczAIfiR5k4n8YffzSZlrc=
Subject key identifier:   60:69:6E:AE:8C:A7:7D:EC:98:01:C9:86:B8:8F:E9:12:10:1D:96:F5
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer:       /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial:       019C4390941C2347C21C2DFBAABD6EE8C6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number:          1815
Signing time:             Mon 09 Feb 2026 18:01:14 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:14 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:14 +0000
Files and hashes:         1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: 2IkYuppdF9QAA57C2MtyN1d5Zix0VN/qKRfnctn1Ffw=)
                          2: ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa (hash: GGqHD6czDexP5GBUgnHHO7EZlQS3Oh/AerMKhihhJ9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:94:1c:23:47:c2:1c:2d:fb:aa:bd:6e:e8:c6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
        Validity
            Not Before: Feb  9 18:01:14 2026 GMT
            Not After : Feb 10 18:01:14 2026 GMT
        Subject: CN=60696eae8ca77dec9801c986b88fe912101d96f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:fd:5a:e9:07:fc:1d:0e:05:36:6c:02:bb:
                    64:fa:b3:48:14:1b:a1:0a:68:04:1b:95:f8:c4:0f:
                    9c:c5:08:a7:50:33:7c:28:3a:f2:99:80:3f:d4:c4:
                    26:57:db:36:0d:91:87:13:92:66:26:69:2a:20:5b:
                    6a:ed:f5:a0:d7:87:db:23:5f:d3:79:c3:87:ec:18:
                    92:e5:64:fd:74:e5:93:68:84:91:c6:f0:34:03:69:
                    d3:4e:3a:34:f6:77:6d:60:24:c0:74:08:c9:e8:68:
                    2b:20:7d:b8:33:61:fd:7d:f4:6e:de:21:e3:71:6b:
                    02:db:88:40:b9:05:77:47:ca:65:46:84:cc:8e:52:
                    d6:22:1a:b0:7b:e4:3e:61:41:bc:13:2b:b7:28:df:
                    48:2b:e8:c6:0a:a0:14:45:52:da:f1:69:2d:52:fc:
                    15:50:89:d0:b5:4b:4f:09:2a:d1:30:6c:87:15:33:
                    2d:37:42:f2:d5:b5:8d:ee:6b:4d:4d:e1:79:6e:02:
                    bb:a0:b1:e1:0f:0e:e5:d4:f2:49:70:e3:41:9c:88:
                    6a:fb:c7:6d:02:a7:c4:8a:c8:3b:2f:6c:36:bd:45:
                    8d:c3:d5:dd:94:39:4d:28:a7:c9:eb:09:7b:5e:b1:
                    c6:35:23:57:37:7b:80:af:70:69:c6:15:74:d5:cb:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:6E:AE:8C:A7:7D:EC:98:01:C9:86:B8:8F:E9:12:10:1D:96:F5
            X509v3 Authority Key Identifier:
                keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:02:67:aa:95:6b:ed:f0:58:db:b6:41:72:bf:88:dc:98:48:
         02:5b:b4:4f:79:5b:a0:38:66:71:cc:d7:a3:9e:e2:e9:1b:0d:
         4a:f7:14:27:d6:80:6a:dd:5c:8b:3f:a5:7e:a4:77:ae:e0:c4:
         12:e1:10:63:d6:91:95:b1:26:eb:4e:94:02:d8:88:bc:05:0c:
         94:78:af:61:9e:6a:80:3a:68:1b:00:87:a8:d4:57:51:3b:e5:
         b8:30:0a:29:0d:53:a8:1f:70:f2:40:83:41:0d:10:3d:4b:6b:
         7f:f0:5c:f6:59:ad:1c:ae:a5:22:ab:30:b7:77:a1:76:7c:8e:
         a6:c2:5f:ff:63:1c:37:ae:5b:1b:ed:b2:50:85:f5:41:d7:c7:
         dd:30:ed:19:97:69:0b:e7:f4:83:b7:e9:ce:c2:0f:f4:2c:aa:
         20:59:4e:5a:c1:a1:a0:39:d7:3b:a1:cc:cc:4c:1f:0c:5e:56:
         a2:17:0d:39:27:c7:dd:0c:b5:1f:e6:7b:7a:57:9f:b9:8b:a3:
         bf:8a:20:ce:d2:09:02:ac:d6:38:92:44:63:9c:bc:a7:92:32:
         6a:ae:36:64:6c:10:86:d5:5d:dd:e8:eb:c3:73:f4:1a:7c:50:
         79:7e:67:8e:3d:13:7b:4f:3d:00:c2:14:33:fe:e0:b9:b8:4f:
         32:5d:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:43 2026 by rpki-client