This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File:                     K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier:          MYumHd65812P0clOmLMvTE/rxBfgbMsjF6pnA1DTiv0=
Subject key identifier:   D2:F4:1C:0D:FB:46:F6:E5:F4:47:EC:E5:73:55:F2:71:E2:4A:C2:8F
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer:       /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial:       019C1BA77B96E287860479C31625252925DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number:          0DA0
Signing time:             Mon 02 Feb 2026 00:01:26 +0000
Manifest this update:     Mon 02 Feb 2026 00:01:26 +0000
Manifest next update:     Tue 03 Feb 2026 00:01:26 +0000
Files and hashes:         1: 1PhEt7d2bIZajs7zcFZXSrntDY4.asa (hash: BYzdd5z1dD/0QZaOur8Wom9Qky9ooHw4d1Iq4ijc28Y=)
                          2: 1QZ2MlTqXygwlnH8Udt0i4cHU2M.roa (hash: yoD+lVhqZgbthHDn2WTTaJtIVkfO54F2E284Wpna3Yw=)
                          3: 5W18PLtoPDw5A2YFyl-bB0MZPAE.asa (hash: NrXrmKxI1eaX0qZUxOWgMfVIdHhXl2LBUzitNWKA29U=)
                          4: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: PvmrhoQgC6sN2fXvvNdiH6igmEPJX1RJrk15hrDlrPI=)
                          5: ZPfnhEjHi4NI36tu0dLcrPzoAig.roa (hash: xvjCHRDS1lEyFHZogtyexGsEZ/ooA4FqTv+iQbKhLEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:a7:7b:96:e2:87:86:04:79:c3:16:25:25:29:25:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
        Validity
            Not Before: Feb  2 00:01:26 2026 GMT
            Not After : Feb  3 00:01:26 2026 GMT
        Subject: CN=d2f41c0dfb46f6e5f447ece57355f271e24ac28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:d3:7f:4f:b1:75:29:01:4f:46:18:e3:63:
                    c4:98:28:85:47:34:a4:9d:ef:f5:45:12:f0:d3:8a:
                    25:11:a2:15:c2:bb:b6:bd:10:d9:a0:fd:52:ed:69:
                    e2:e0:5c:9f:49:8e:23:6e:ec:ab:10:5d:4f:76:91:
                    09:b0:3d:06:cb:b0:27:10:88:f4:b1:e6:b0:62:78:
                    10:84:a8:64:3f:60:97:b2:3f:56:bd:3d:1e:0d:18:
                    36:b0:ae:ce:b7:3d:ae:50:b5:a9:d6:06:a1:e3:d3:
                    82:b6:de:aa:3c:73:c3:06:99:59:dc:62:ff:bc:df:
                    4a:db:06:07:9e:25:58:17:10:fb:38:3d:65:f7:fd:
                    cd:b3:a9:cd:14:8c:59:0c:29:74:7c:0c:e1:b3:55:
                    f6:41:da:53:5d:0f:bf:46:6b:f7:42:ed:d9:d4:3d:
                    21:04:63:29:27:75:e1:da:73:b7:ea:43:4f:b5:03:
                    70:98:a9:04:05:ed:3d:2a:69:79:9f:f9:88:b2:11:
                    3b:64:5c:df:9e:ed:b1:fa:29:4b:b3:59:9b:ce:4d:
                    12:74:06:1a:09:62:c4:6c:0f:51:66:a7:a6:68:80:
                    3c:e1:9e:c5:18:94:55:f6:fb:68:59:53:b7:ff:66:
                    00:25:29:ae:8f:b3:4a:6a:7c:00:fd:93:a7:fc:64:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F4:1C:0D:FB:46:F6:E5:F4:47:EC:E5:73:55:F2:71:E2:4A:C2:8F
            X509v3 Authority Key Identifier:
                keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:57:79:6e:6e:75:5e:28:f7:11:48:f0:34:69:b1:e3:2d:3f:
         c6:b7:25:b0:29:bf:f2:ac:74:ca:72:f7:07:65:bc:2e:30:12:
         17:ca:61:fc:15:63:49:0a:93:1f:a7:34:c9:19:92:d0:9a:51:
         96:ae:5b:cf:a7:85:65:05:55:07:1d:05:aa:8e:ee:07:22:c8:
         9b:45:0e:be:1f:4e:84:36:b0:6a:96:02:a7:ba:a7:01:32:8a:
         6c:20:7f:95:28:c9:71:7e:08:fa:dc:0b:e0:c0:0a:ec:a9:96:
         4b:85:c1:53:72:0b:a3:ed:eb:5c:c9:d8:4d:cd:e0:5f:41:b1:
         59:da:59:08:42:3d:62:59:9a:4b:62:5f:cf:45:ca:73:1f:ac:
         ce:0a:50:a0:64:93:97:91:87:96:f2:85:08:f1:10:32:f7:44:
         61:38:45:21:1a:62:8a:b0:46:4d:02:06:64:3a:ff:56:61:1c:
         7f:7e:c3:fc:3f:3b:4b:a6:d5:b9:a5:fa:6d:ec:82:09:d1:f8:
         38:87:58:87:6d:d1:75:f8:44:28:04:74:06:fe:76:ee:49:fc:
         9e:99:65:fb:46:f2:b4:db:1b:f2:f5:0d:96:6f:35:73:cc:7f:
         5b:5f:e9:1a:6c:aa:8b:ee:b2:75:18:1c:28:39:20:10:05:08:
         70:bc:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client