This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File:                     C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier:          24lZ8ipks2t+sWkRz/pi+TYu7ey9L+WG66z0obruNsA=
Subject key identifier:   74:27:31:9C:7F:72:7C:CE:AF:2B:D3:AF:A5:63:70:22:08:8A:6B:AD
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer:       /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial:       019C44DA161E7577AC15AD905EAC3FD87D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number:          1810
Signing time:             Tue 10 Feb 2026 00:01:08 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:08 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:08 +0000
Files and hashes:         1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: 306CVztl/ot3Lg33ZvmcgKhqNK2rH0tUs/VE31379PY=)
                          2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:16:1e:75:77:ac:15:ad:90:5e:ac:3f:d8:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
        Validity
            Not Before: Feb 10 00:01:08 2026 GMT
            Not After : Feb 11 00:01:08 2026 GMT
        Subject: CN=7427319c7f727cceaf2bd3afa5637022088a6bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:84:05:f5:bd:da:ed:22:70:fc:89:80:d6:
                    3c:86:aa:be:e3:d4:0a:ec:0e:11:0f:d6:f5:09:09:
                    cd:2e:7b:a0:d0:85:08:05:e2:cd:84:85:13:1a:e6:
                    11:4b:8f:29:3f:15:cf:5b:f0:42:df:96:33:b4:d1:
                    40:89:8c:67:97:52:e9:53:7c:79:0f:dd:60:ad:6a:
                    d8:5a:1d:54:ae:2e:05:4f:5c:b2:92:51:fa:a2:a9:
                    86:2c:62:fa:1b:41:07:60:a1:be:80:4f:df:64:bd:
                    50:5a:b9:a6:3d:e4:b8:52:76:89:af:6a:6b:00:17:
                    e6:be:7a:26:28:aa:0f:53:a9:4b:ec:7c:4c:4a:c8:
                    cd:19:50:81:63:e4:b0:b3:11:47:e1:67:10:8a:03:
                    ff:b4:b0:15:27:bd:2b:b5:76:a7:1f:c6:3c:f2:79:
                    83:6e:cf:8a:3b:58:28:58:cc:dc:a7:a4:af:e5:b6:
                    8b:45:17:b2:45:9d:73:45:e5:ab:11:71:2f:83:ae:
                    5f:f8:d9:1e:1f:b3:3d:d2:0f:be:35:16:0b:5b:fe:
                    78:a8:5d:48:2f:b6:65:97:08:05:e1:6e:c1:b2:85:
                    b4:3a:11:e8:d2:cd:b4:bd:77:63:29:dc:60:94:bc:
                    7f:27:5b:c6:db:28:52:98:97:86:d6:64:1a:d9:71:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:27:31:9C:7F:72:7C:CE:AF:2B:D3:AF:A5:63:70:22:08:8A:6B:AD
            X509v3 Authority Key Identifier:
                keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:5a:87:ec:f7:42:8b:d1:98:42:ab:5f:f8:b1:7a:55:35:
         6c:22:9d:f2:b5:5b:bc:21:80:27:b3:e7:5a:e3:6f:ce:63:82:
         de:66:b7:06:49:7b:26:90:78:b3:e4:f3:f8:c7:38:d3:ca:fe:
         ea:63:c8:e0:b0:1e:84:aa:20:a3:8f:0b:90:67:df:3d:9e:61:
         1c:75:bb:e0:67:79:a1:5f:d2:77:ba:14:c1:09:00:31:fc:af:
         ef:b6:d8:36:04:49:8c:a6:99:04:e5:3c:fe:43:db:2a:d3:8a:
         9e:dc:a3:98:1e:c3:ba:21:aa:f2:1f:3b:7a:01:3a:cb:17:43:
         29:c6:de:ac:dc:8f:3d:c7:08:2b:3d:63:0e:72:8d:e7:fa:a8:
         e1:50:91:64:f7:f9:ef:52:d4:75:72:9e:f0:8f:82:b0:8d:d6:
         b4:a0:cc:c3:22:50:6a:05:e7:82:89:98:61:11:85:e4:92:a4:
         fb:60:32:0c:c5:91:98:ab:24:54:84:e2:b8:bd:3d:2e:df:3f:
         1e:a3:d8:59:2a:6a:c3:20:79:5b:01:76:4e:62:d2:c2:1a:41:
         9d:5a:29:b4:ca:cb:bb:73:78:1f:51:f4:4c:43:90:4b:0e:8a:
         43:ac:9c:fb:3c:2f:6f:ef:5c:7a:30:28:0f:f1:7d:68:4e:d9:
         03:f6:02:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2hYedXesFa2QXqw/2H0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0
ZGYzMTkwHhcNMjYwMjEwMDAwMTA4WhcNMjYwMjExMDAwMTA4WjAzMTEwLwYDVQQD
Eyg3NDI3MzE5YzdmNzI3Y2NlYWYyYmQzYWZhNTYzNzAyMjA4OGE2YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQKEBfW92u0icPyJgNY8hqq+49QK
7A4RD9b1CQnNLnug0IUIBeLNhIUTGuYRS48pPxXPW/BC35YztNFAiYxnl1LpU3x5
D91grWrYWh1Uri4FT1yyklH6oqmGLGL6G0EHYKG+gE/fZL1QWrmmPeS4UnaJr2pr
ABfmvnomKKoPU6lL7HxMSsjNGVCBY+SwsxFH4WcQigP/tLAVJ70rtXanH8Y88nmD
bs+KO1goWMzcp6Sv5baLRReyRZ1zReWrEXEvg65f+NkeH7M90g++NRYLW/54qF1I
L7ZllwgF4W7BsoW0OhHo0s20vXdjKdxglLx/J1vG2yhSmJeG1mQa2XHguQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQnMZx/cnzOryvTr6VjcCIIimutMB8GA1UdIwQY
MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt
ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx
LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW5ah+z3
QovRmEKrX/ixelU1bCKd8rVbvCGAJ7PnWuNvzmOC3ma3Bkl7JpB4s+Tz+Mc408r+
6mPI4LAehKogo48LkGffPZ5hHHW74Gd5oV/Sd7oUwQkAMfyv77bYNgRJjKaZBOU8
/kPbKtOKntyjmB7DuiGq8h87egE6yxdDKcberNyPPccIKz1jDnKN5/qo4VCRZPf5
71LUdXKe8I+CsI3WtKDMwyJQagXngomYYRGF5JKk+2AyDMWRmKskVITiuL09Lt8/
HqPYWSpqwyB5WwF2TmLSwhpBnVoptMrLu3N4H1H0TEOQSw6KQ6yc+zwvb+9cejAo
D/F9aE7ZA/YCqA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:08 2026 by rpki-client