This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File:                     kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier:          AjqOTuKXNxUs/8I/nKe2K+StqNUe3Cbp5gCn1dusJqk=
Subject key identifier:   10:C5:D7:56:7A:C0:B5:34:A0:E8:02:84:7B:3D:61:6D:AA:E4:56:A9
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer:       /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial:       019C4390C206C121F98871427A2D405F8177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 18:01:26 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:26 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:26 +0000
Files and hashes:         1: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: 1U8tC9WkZ0WQOneCcbHl1Oth0xHakeIcVZlBZ6Mp3JA=)
                          2: m64MgsXTuVAo-KXrz-HC9VS3YL4.roa (hash: aAemQZEctQRghlYaCM8BeUg6WijqhJ1QuHQjJjaDAco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:c2:06:c1:21:f9:88:71:42:7a:2d:40:5f:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
        Validity
            Not Before: Feb  9 18:01:26 2026 GMT
            Not After : Feb 10 18:01:26 2026 GMT
        Subject: CN=10c5d7567ac0b534a0e802847b3d616daae456a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:25:a3:b9:79:41:40:61:26:d8:56:a1:a2:
                    83:05:60:85:4a:27:e0:b6:5d:37:ef:d5:7f:b6:04:
                    f8:0c:80:24:c1:36:e8:5f:c5:8b:0c:ce:99:52:d8:
                    f2:bd:15:61:ed:10:7d:d9:3e:a1:ba:89:fe:88:2b:
                    a2:7c:b4:08:8b:85:55:06:f8:df:66:74:e1:26:c4:
                    07:e1:c6:eb:2e:3e:7f:26:25:c9:13:d9:ed:da:28:
                    12:ee:e9:af:c2:e5:dd:13:24:72:ed:28:a6:da:d7:
                    fa:f8:62:3d:9c:08:81:37:a9:57:db:b5:13:b3:31:
                    d7:4c:f5:ce:81:34:16:47:03:38:c1:da:27:78:b0:
                    90:25:4e:12:35:76:86:00:7d:da:d1:e3:cc:17:49:
                    3c:41:f6:27:09:5d:ab:03:06:37:af:96:13:e0:8d:
                    69:31:a8:89:e7:91:53:46:fc:44:af:1f:5a:22:59:
                    22:bb:4c:fa:28:96:fc:bf:03:3d:3a:90:0f:5b:a7:
                    64:f4:19:99:4a:34:b6:6f:1b:9b:c2:fc:84:ac:e5:
                    87:db:13:b4:86:4d:40:bd:13:c8:f5:28:db:2e:ac:
                    64:db:c6:1d:3e:b7:d3:ab:ec:8f:b5:6d:22:c9:7b:
                    d4:c7:4d:08:5b:0d:3e:90:ef:53:1d:07:de:9f:42:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:D7:56:7A:C0:B5:34:A0:E8:02:84:7B:3D:61:6D:AA:E4:56:A9
            X509v3 Authority Key Identifier:
                keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:35:58:10:bc:48:00:d9:5a:77:a0:2f:16:bf:bc:1e:e1:5a:
         65:37:f6:32:b4:0b:6b:34:a5:bf:69:68:93:5e:0a:54:54:92:
         57:80:18:ad:d8:fe:77:e4:3d:8c:07:fe:ee:53:cc:5a:81:35:
         d1:23:8d:96:1f:34:2b:be:0a:09:1e:6a:c1:7e:0c:2f:28:ad:
         8e:91:8f:3a:a8:04:0c:81:69:49:48:3d:97:81:4d:81:e2:ac:
         ac:4b:07:a3:1c:b0:a3:11:c5:8b:45:c8:d4:c0:77:9a:c6:9e:
         98:ee:ad:b7:72:39:cf:66:1c:c8:69:8f:8c:f2:6d:09:76:0d:
         b6:5e:cf:e6:d5:f1:5b:46:08:61:6d:a5:8a:c6:ad:cc:87:0f:
         0a:67:36:1e:8d:8f:d5:91:1f:ad:59:03:34:7c:97:57:20:d4:
         8b:21:74:0a:a3:69:09:d6:46:a7:60:3b:5b:36:d4:64:b5:70:
         fb:c6:1d:4e:05:ac:aa:92:a6:54:fb:25:61:2d:64:15:11:1e:
         fb:8b:e0:5f:ee:6a:99:a3:7f:66:2b:46:b8:f7:6e:a6:15:10:
         9b:d6:ec:d2:e9:b7:1f:1b:11:6d:10:63:1d:05:0e:53:30:e7:
         c6:3b:cc:e1:cd:be:8f:94:f1:1a:68:bd:00:c0:0f:a6:15:e5:
         2b:76:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:49 2026 by rpki-client