This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File:                     KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier:          ALplU1FXE2tQ9Cauajz2ypzp3Uea7KtYDqS64kfIHgk=
Subject key identifier:   DA:14:E3:B1:65:9F:5E:BC:54:77:91:5A:B5:46:3A:FB:0F:3B:8A:54
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer:       /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial:       019C42B480778C58F212B2E9981914F27EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 14:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:51 +0000
Files and hashes:         1: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: 8y7nE+8Xs10REfIrZ48tCF1JolMATlQF54TL0f13+tc=)
                          2: kJEiuD-GMOjhqR0rKkDRKANvZg0.roa (hash: VBIq2jI9wWHxfuXZX8azYqnz8N0JMYIJ6HfvAGOQ2uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:80:77:8c:58:f2:12:b2:e9:98:19:14:f2:7e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
        Validity
            Not Before: Feb  9 14:00:51 2026 GMT
            Not After : Feb 10 14:00:51 2026 GMT
        Subject: CN=da14e3b1659f5ebc5477915ab5463afb0f3b8a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:d8:91:30:96:20:4d:05:32:e8:64:fc:47:
                    c2:bb:06:d7:07:d6:86:c6:f8:a8:e7:01:d6:09:4f:
                    d5:72:da:e7:85:35:df:34:15:f3:90:3e:bc:76:a2:
                    c7:f6:dd:f5:b3:f0:fb:0b:e3:32:8e:d1:0d:8f:50:
                    86:0b:4c:4e:d7:75:dc:0a:71:b8:45:fa:b0:c9:b1:
                    2b:23:d9:44:e4:78:dc:c6:a5:a4:8e:ad:e6:68:7f:
                    b0:04:22:bf:6f:29:88:ac:37:90:db:55:54:5a:7f:
                    5d:4d:d4:71:27:26:a0:f8:21:1c:96:64:57:59:41:
                    4a:66:0a:82:bd:a0:e4:01:1a:74:52:c2:a7:91:a5:
                    87:6b:6e:74:0f:d8:3f:ed:ff:5d:41:84:b2:97:38:
                    8f:05:f3:85:a4:e6:16:88:b9:92:d5:a4:b9:4a:09:
                    0e:01:20:16:ac:dc:66:51:d1:d2:89:39:0d:b8:af:
                    e6:38:d7:17:7f:f1:10:0f:a5:7b:84:bc:16:b6:5e:
                    6f:c7:f1:bd:9b:3a:da:30:2e:d3:b1:c8:09:80:c1:
                    9e:79:8a:8b:2f:66:21:65:5a:89:d3:59:b6:f5:d9:
                    3d:f3:bf:4f:1c:fc:12:62:bf:cf:fe:d7:3a:0f:9b:
                    1e:b4:96:fc:cd:65:6d:98:f1:4e:b4:bb:55:fe:47:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:E3:B1:65:9F:5E:BC:54:77:91:5A:B5:46:3A:FB:0F:3B:8A:54
            X509v3 Authority Key Identifier:
                keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:84:d0:f8:c7:1d:79:f8:91:77:3f:a7:4b:b4:21:56:1f:
         6f:4b:bf:63:07:da:06:bb:c6:d2:44:7e:e3:4e:77:80:9a:0d:
         e2:c6:a3:8e:cf:c5:7a:af:7f:73:ad:5b:00:bb:e4:02:f8:6a:
         2b:5c:66:ed:81:a3:19:e0:2a:a5:19:6b:c5:dd:72:0c:2e:14:
         06:9f:7b:1d:14:7a:13:f1:60:fc:68:97:ab:d6:83:2b:87:b5:
         ab:d6:f0:20:1b:ca:65:bb:fc:11:cd:84:7e:c7:d2:60:eb:71:
         7f:70:6f:41:76:37:80:e0:0b:61:04:4b:73:4f:ed:22:e1:67:
         5b:9e:a2:c5:98:b9:3a:2f:e0:29:83:64:63:42:52:d0:da:ee:
         4d:ce:3f:b7:4f:43:de:95:5c:28:02:41:86:62:9c:2f:b8:b5:
         ef:d4:a0:83:28:f1:48:08:5d:9c:66:60:51:0f:b7:3b:55:34:
         5b:3a:74:d4:ef:77:87:7a:10:ca:46:c5:45:6c:ac:b9:eb:b0:
         a0:67:2a:35:3b:11:9a:3d:82:27:de:a2:47:08:71:9d:74:06:
         c5:91:35:70:ae:24:58:5e:97:ea:ae:b5:c2:e3:19:be:37:17:
         96:77:80:18:8d:7d:fa:75:21:08:55:d2:07:80:22:a4:7d:5b:
         fc:3c:0d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtIB3jFjyErLpmBkU8n6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi
ZjI4ZTQwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD
EyhkYTE0ZTNiMTY1OWY1ZWJjNTQ3NzkxNWFiNTQ2M2FmYjBmM2I4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzHYkTCWIE0FMuhk/EfCuwbXB9aG
xvio5wHWCU/VctrnhTXfNBXzkD68dqLH9t31s/D7C+MyjtENj1CGC0xO13XcCnG4
RfqwybErI9lE5HjcxqWkjq3maH+wBCK/bymIrDeQ21VUWn9dTdRxJyag+CEclmRX
WUFKZgqCvaDkARp0UsKnkaWHa250D9g/7f9dQYSylziPBfOFpOYWiLmS1aS5SgkO
ASAWrNxmUdHSiTkNuK/mONcXf/EQD6V7hLwWtl5vx/G9mzraMC7TscgJgMGeeYqL
L2YhZVqJ01m29dk9879PHPwSYr/P/tc6D5setJb8zWVtmPFOtLtV/ke2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoU47Fln168VHeRWrVGOvsPO4pUMB8GA1UdIwQY
MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt
NTg5NWI2OWQxODllLzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll
LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+2E0PjH
HXn4kXc/p0u0IVYfb0u/YwfaBrvG0kR+4053gJoN4sajjs/Feq9/c61bALvkAvhq
K1xm7YGjGeAqpRlrxd1yDC4UBp97HRR6E/Fg/GiXq9aDK4e1q9bwIBvKZbv8Ec2E
fsfSYOtxf3BvQXY3gOALYQRLc0/tIuFnW56ixZi5Oi/gKYNkY0JS0NruTc4/t09D
3pVcKAJBhmKcL7i179SggyjxSAhdnGZgUQ+3O1U0Wzp01O93h3oQykbFRWysueuw
oGcqNTsRmj2CJ96iRwhxnXQGxZE1cK4kWF6X6q61wuMZvjcXlneAGI19+nUhCFXS
B4AipH1b/DwNrw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:51 2026 by rpki-client