This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File:                     K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier:          H1HLHjYD3CHYKMKBgna1ZxQC+0dzj3bi/7Mh3Vl9E+s=
Subject key identifier:   2E:5C:C0:AA:C9:B2:0C:65:8B:E0:A1:56:EF:78:D9:AC:B3:1B:DE:0F
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer:       /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial:       019C4390095C0EDDE3E7D087EA219C926860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: QClLVu+fvSnai9tkcttA/fVOEjuVkBukfHR+scHy0DU=)
                          2: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (hash: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:09:5c:0e:dd:e3:e7:d0:87:ea:21:9c:92:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=2e5cc0aac9b20c658be0a156ef78d9acb31bde0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:28:5f:ba:c2:a8:35:12:ce:92:e5:9a:10:
                    15:66:e4:45:c1:c9:27:a1:d8:f4:88:cb:cf:ef:cc:
                    7d:d9:18:46:4c:80:7f:f4:28:1a:61:cf:6b:7b:e7:
                    0a:eb:3c:3f:6c:16:5e:24:8b:7d:89:a1:78:f2:a6:
                    ba:a5:e5:33:82:b0:59:1d:3f:c5:c2:cf:82:eb:4b:
                    9c:20:2d:bc:56:9d:4c:6b:2a:1c:15:cb:dc:a3:71:
                    78:f5:0c:1a:6f:01:88:c3:63:9f:46:3d:d3:8a:d0:
                    39:1d:60:69:ad:71:b2:76:69:78:b4:03:da:31:d1:
                    fe:74:1b:44:0b:9a:fd:e4:af:c2:cb:9c:3d:10:2d:
                    76:cd:13:4c:d7:17:aa:e9:bf:88:6e:97:29:59:2e:
                    48:82:6d:69:e1:0c:bf:1b:ef:82:a5:3d:b7:6e:86:
                    0c:e6:3a:26:5a:d2:e9:3a:65:c3:8e:01:d5:0d:68:
                    42:46:2f:36:6e:cc:9c:15:d2:87:a4:9b:4e:64:eb:
                    e5:3d:25:c6:a6:66:01:0d:0d:13:95:3f:b6:22:06:
                    24:b4:66:3c:0c:a3:90:21:a7:c1:f8:4d:43:0f:dc:
                    02:f3:c8:10:a5:78:98:a5:75:cd:99:a8:b4:0d:6a:
                    ad:af:d3:a3:1b:f2:c9:04:7e:d5:34:86:a5:24:5a:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:C0:AA:C9:B2:0C:65:8B:E0:A1:56:EF:78:D9:AC:B3:1B:DE:0F
            X509v3 Authority Key Identifier:
                keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4a:f0:f0:05:36:f5:45:ff:33:92:ee:b1:4b:55:69:5d:49:
         f3:47:db:a5:09:ce:01:19:90:a0:49:85:02:ee:ea:20:85:02:
         ed:a7:21:71:87:37:c7:17:2f:f3:a7:e2:85:48:d9:f2:0d:ef:
         8d:33:21:3f:79:65:58:2e:29:3f:c5:35:3a:22:c0:5d:51:9b:
         ad:4f:98:7d:80:ac:1a:aa:02:c3:07:81:7f:45:2a:11:1c:07:
         64:cf:07:7f:b4:66:0e:4a:9a:8f:d3:aa:af:13:9a:83:af:17:
         be:b2:49:62:8b:34:e0:e6:e4:8e:57:7a:2e:7e:d9:9c:1e:77:
         e6:ff:2d:9e:f4:e1:bd:05:f0:5f:3a:e0:bf:35:5b:1c:c7:48:
         27:11:95:87:32:13:e5:c0:f5:c6:6d:9b:ec:a5:e0:35:96:06:
         20:37:de:e6:94:7a:c9:e9:96:16:4e:a6:a5:c1:a0:e0:01:bb:
         c5:5b:07:85:c5:6e:bb:7c:d4:79:6b:dc:ac:83:44:76:c6:b6:
         1e:e3:0f:83:69:e1:69:9a:5b:66:37:3d:be:cc:c2:ab:2c:d4:
         f7:f5:6d:68:7e:44:24:97:bd:7c:78:5e:4b:44:f1:5f:41:95:
         58:aa:f7:7b:d8:dc:37:3b:35:3e:0a:b5:26:c5:02:63:4c:6a:
         26:b0:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:51 2026 by rpki-client