This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
File:                     kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json)
Hash identifier:          g3HQcsiBNwOEhLd5nMJVHicfuBPgKr/w0WzHRXtkpoM=
Subject key identifier:   E1:35:23:CD:E7:24:AB:83:1D:BE:FB:21:C3:34:D4:E9:33:C7:7D:D0
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Certificate issuer:       /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial:       019C420F6BC9CA78F6E6CE6C0522732541A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 11:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:32 +0000
Files and hashes:         1: 1f8yNz_6CeZb2_cKtFYjakkUYu0.roa (hash: CQrSvmHUDyMuGsezkRUoXIh9i5m3+0vp+bw6nOrytp0=)
                          2: eByvcSZKJ0C054yav4nbHodBBYg.roa (hash: iRSBboUDEVdKSWCvgZE0xP0Y8IB0acvS1GqTMfNLmr8=)
                          3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: w0gz/9z5j4W1kDKLp4jJ8ovjkXqkcvgOR79N28MSoX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:6b:c9:ca:78:f6:e6:ce:6c:05:22:73:25:41:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
        Validity
            Not Before: Feb  9 11:00:32 2026 GMT
            Not After : Feb 10 11:00:32 2026 GMT
        Subject: CN=e13523cde724ab831dbefb21c334d4e933c77dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:a5:45:95:65:ef:eb:98:7e:26:2b:7c:03:
                    bd:af:59:23:c8:34:56:2a:f6:0a:1a:56:c0:5f:74:
                    49:b9:99:5a:81:ce:5e:ae:95:ed:35:d8:50:d0:b3:
                    29:73:7d:01:22:40:78:0c:24:e9:21:08:c5:ec:4a:
                    8b:f8:ec:9b:ae:27:f5:7e:d9:b9:bc:cc:d8:d0:c3:
                    90:c8:34:98:76:20:66:1a:e6:7d:2f:1c:59:8d:28:
                    71:6c:3c:a9:98:ff:86:76:ed:a7:c2:90:55:96:7c:
                    24:df:b8:7e:66:4f:73:0b:37:0b:b6:30:71:71:cf:
                    41:12:10:85:7a:3a:14:99:83:df:a0:49:03:63:1d:
                    62:6a:81:ce:92:d0:3c:34:49:61:51:3c:2a:9f:0d:
                    c7:96:0a:fd:70:28:f6:0b:b4:55:75:4e:83:5a:11:
                    3b:2b:8f:8b:b9:c3:3f:a3:61:01:6c:41:96:2a:84:
                    64:f8:3f:6b:d1:54:7d:54:32:41:a7:ed:f7:44:01:
                    1d:dc:de:0f:31:87:a7:d9:a8:f3:9d:19:ef:92:a1:
                    d5:17:65:0c:72:86:e3:b5:d2:ad:0e:31:42:0f:80:
                    67:e2:ae:f2:07:42:c4:86:5b:d5:af:1d:8f:34:66:
                    49:0d:98:62:f3:60:54:07:2b:68:f7:9d:49:f3:1e:
                    02:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:35:23:CD:E7:24:AB:83:1D:BE:FB:21:C3:34:D4:E9:33:C7:7D:D0
            X509v3 Authority Key Identifier:
                keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:69:7d:5f:44:45:11:39:be:f8:8d:e1:bf:83:23:64:3c:
         73:d6:f2:51:9c:64:23:90:b6:6b:8d:17:a7:ef:da:76:82:61:
         a4:b8:99:ff:64:f7:92:63:ac:e3:06:41:96:da:7e:c5:37:93:
         b6:8d:fb:d6:34:0e:03:84:ea:fc:9b:35:3a:68:e9:f3:ca:34:
         84:0d:45:9d:e7:4b:89:16:ad:81:6c:a3:85:f2:66:61:3d:b4:
         bf:b4:e5:82:51:07:aa:1e:61:ac:95:b9:17:33:19:fa:f2:6e:
         87:f0:f6:f1:6e:1f:7c:03:7d:8c:a3:c1:27:70:da:5d:76:53:
         53:42:57:c2:a4:25:cf:27:7d:1d:df:27:e0:b5:a0:03:d6:1a:
         d2:1f:bd:32:76:b5:4f:55:ab:e1:26:a6:ee:a0:be:01:b0:ad:
         76:d7:99:aa:01:be:1d:70:00:25:19:7f:53:43:a5:97:46:82:
         37:3f:73:e2:da:50:d0:c3:0e:8b:00:ab:ef:e6:18:b1:c6:d2:
         22:cd:d2:37:83:82:50:ae:59:6e:43:6f:a6:98:46:ab:2c:e5:
         e4:4c:1f:68:c1:0c:8e:48:c5:c3:6c:55:ba:db:5c:8b:87:fd:
         8b:b6:3b:94:6e:c2:08:e5:4d:6d:59:b8:f2:f4:f8:76:12:f5:
         0c:ed:36:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD2vJynj25s5sBSJzJUGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl
MDgyODcwHhcNMjYwMjA5MTEwMDMyWhcNMjYwMjEwMTEwMDMyWjAzMTEwLwYDVQQD
EyhlMTM1MjNjZGU3MjRhYjgzMWRiZWZiMjFjMzM0ZDRlOTMzYzc3ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaulRZVl7+uYfiYrfAO9r1kjyDRW
KvYKGlbAX3RJuZlagc5erpXtNdhQ0LMpc30BIkB4DCTpIQjF7EqL+Oybrif1ftm5
vMzY0MOQyDSYdiBmGuZ9LxxZjShxbDypmP+Gdu2nwpBVlnwk37h+Zk9zCzcLtjBx
cc9BEhCFejoUmYPfoEkDYx1iaoHOktA8NElhUTwqnw3Hlgr9cCj2C7RVdU6DWhE7
K4+LucM/o2EBbEGWKoRk+D9r0VR9VDJBp+33RAEd3N4PMYen2ajznRnvkqHVF2UM
cobjtdKtDjFCD4Bn4q7yB0LEhlvVrx2PNGZJDZhi82BUByto951J8x4CPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE1I83nJKuDHb77IcM01Okzx33QMB8GA1UdIwQY
MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt
ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi
LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNVpfV9E
RRE5vviN4b+DI2Q8c9byUZxkI5C2a40Xp+/adoJhpLiZ/2T3kmOs4wZBltp+xTeT
to371jQOA4Tq/Js1Omjp88o0hA1FnedLiRatgWyjhfJmYT20v7TlglEHqh5hrJW5
FzMZ+vJuh/D28W4ffAN9jKPBJ3DaXXZTU0JXwqQlzyd9Hd8n4LWgA9Ya0h+9Mna1
T1Wr4Sam7qC+AbCtdteZqgG+HXAAJRl/U0Oll0aCNz9z4tpQ0MMOiwCr7+YYscbS
Is3SN4OCUK5ZbkNvpphGqyzl5EwfaMEMjkjFw2xVuttci4f9i7Y7lG7CCOVNbVm4
8vT4dhL1DO02fg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:29 2026 by rpki-client