This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
File:                     KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft (raw, json)
Hash identifier:          Akm0MTR0+q/fZyS6CMb8/M1b6AntYWnqS9Bnr4Bq2C8=
Subject key identifier:   73:EA:D5:1B:4E:E0:C5:21:A1:4C:57:DF:6B:78:C7:C2:6F:F7:BB:07
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Certificate issuer:       /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial:       019C41A19AE31FF6610407BB082461316B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
Manifest number:          0C08
Signing time:             Mon 09 Feb 2026 09:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:35 +0000
Files and hashes:         1: KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl (hash: +3Zk+mmGDj5Cb+fno5+9R4A8Q+TPHMlqdX+KpjZguiw=)
                          2: oXHERV6aA92q4XM2FtjLJ6RybNw.roa (hash: biGeyIKzfwGkq1HyLc7g1XF4DU08F8Q47/MaS1GoJuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:9a:e3:1f:f6:61:04:07:bb:08:24:61:31:6b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
        Validity
            Not Before: Feb  9 09:00:35 2026 GMT
            Not After : Feb 10 09:00:35 2026 GMT
        Subject: CN=73ead51b4ee0c521a14c57df6b78c7c26ff7bb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:b7:9d:e4:59:19:79:72:53:49:e8:47:fd:
                    a4:75:df:51:e0:43:5a:08:cb:70:6c:72:bc:8d:b9:
                    60:5e:13:99:74:f3:d5:dd:ea:e6:3c:61:02:3e:88:
                    78:d6:14:4d:60:9a:fd:ea:51:4a:41:9e:63:0f:2f:
                    42:92:58:da:21:e8:1e:ad:a8:d8:c8:11:a1:9c:8a:
                    ea:9d:8a:9e:01:37:65:ba:45:77:17:12:c2:f5:d6:
                    75:38:0b:49:3e:d7:7d:f5:42:e7:6e:7e:7d:b5:0f:
                    64:2b:80:8a:67:00:31:fb:00:40:4a:96:c4:41:30:
                    2b:1f:b1:40:c5:e6:69:2b:bc:b8:db:33:ee:f0:d3:
                    4a:c1:1d:23:6f:06:63:fa:5b:13:ac:f0:33:0d:ea:
                    5e:8d:30:3f:a2:ca:f7:76:ea:84:67:fc:d3:50:bc:
                    fa:da:70:55:eb:b9:fb:5b:d0:ef:c4:8e:74:87:85:
                    23:a0:01:b2:f1:0e:a3:f1:17:de:a7:da:4d:49:c3:
                    24:b5:6b:8a:f8:59:c6:86:3d:a0:c3:c2:68:33:6e:
                    5f:20:58:7e:ff:4e:bc:37:5b:11:35:95:92:ae:73:
                    6e:44:97:6f:f3:af:80:55:07:bf:94:06:34:14:2e:
                    77:ca:89:97:6e:dd:0e:4a:80:68:85:ee:35:59:f8:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:D5:1B:4E:E0:C5:21:A1:4C:57:DF:6B:78:C7:C2:6F:F7:BB:07
            X509v3 Authority Key Identifier:
                keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:9f:80:b5:d5:c9:b3:82:1b:ea:8d:55:90:36:8b:70:6b:
         2a:55:c2:7b:89:1e:23:aa:cb:dc:e3:ae:ab:7b:df:2b:24:29:
         f7:c1:12:47:d6:c5:6e:21:ef:7b:95:96:b0:52:d7:92:a4:f6:
         02:57:18:1e:63:4c:99:52:a1:e7:e4:60:1b:da:ff:b0:f3:a2:
         65:b7:2e:97:2e:d1:16:11:c7:e7:11:2d:6f:de:5f:d3:8b:09:
         a6:c3:6b:00:d9:09:b9:a2:36:27:15:7f:4d:6b:61:7d:51:ba:
         8a:f2:68:8e:fc:a9:00:63:c5:fa:92:a0:91:c3:ab:0d:f5:a9:
         8f:f8:e3:85:4e:d5:03:5f:04:28:2c:3b:f5:85:65:fe:7c:a2:
         32:3c:e2:78:65:54:71:89:eb:a4:5f:c7:df:eb:b6:d1:ee:6c:
         bf:06:17:d0:a5:94:50:03:27:b0:17:f1:54:a0:a2:4c:00:dc:
         ea:4e:48:27:ba:2b:1d:a3:82:c8:68:f6:6e:3e:f5:5e:a9:55:
         b0:ca:1e:c2:a4:99:31:0c:02:2c:07:3f:fd:67:06:54:d1:8c:
         e1:76:51:18:cd:98:38:b4:fd:e1:99:9e:f2:63:87:5a:0f:e8:
         70:92:a9:51:e4:5b:9c:92:8d:b8:70:87:c3:8f:8d:39:34:22:
         05:79:8e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:20 2026 by rpki-client