This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
File:                     KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft (raw, json)
Hash identifier:          TXiyYrBnIdLmmKctL7dr3W6Us32H/UCEP7uiJ1TOiAk=
Subject key identifier:   07:3F:01:83:2F:59:6E:48:8C:DB:DB:83:0E:75:C8:04:91:33:CB:68
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019BF2740AB78E0169B6217EA76529308612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
Manifest number:          0FE0
Signing time:             Sun 25 Jan 2026 00:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 00:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 00:00:49 +0000
Files and hashes:         1: 1v9efWQrAg4BDId3pIk4c44PmVw.roa (hash: k5/SBN1yEQUS0XU3i/I69dLXfbTEMO/myKBAP0hZNns=)
                          2: Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (hash: 1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=)
                          3: FPBOE7r5OOktznz_3R2UIQrsuM8.roa (hash: 6/NtjVoPaKYVIjf6r5FmS/9bjWk6fdeQYR7Lu+clilk=)
                          4: GIqN1aolnCf-NZ3vtmoB1lfLhXU.roa (hash: WTQP5hxTgdnCG02OhJAjM1ZJsLN9CqYhLQ4bOesYr7M=)
                          5: KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl (hash: dzEBgxo3zOdWbkFGQCmvNtqFzdYaxVn3ixlBcWVWsFw=)
                          6: ax3hJrj1jKccen4LkvygGa6u_zk.roa (hash: YPVLrZ9Q05uGWBIZMWGr1R3Ivd6hvxv84SERSuRddso=)
                          7: i8kJNIdYqQmfEonJPIFF62WXUQU.roa (hash: VsuHI3Fj0R4Bibi8JuUm8YU4QqMFawXkLB4DTLwJzfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:0a:b7:8e:01:69:b6:21:7e:a7:65:29:30:86:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jan 25 00:00:49 2026 GMT
            Not After : Jan 26 00:00:49 2026 GMT
        Subject: CN=073f01832f596e488cdbdb830e75c8049133cb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:19:e0:60:7a:9d:fa:60:f9:d8:27:2a:ed:
                    f8:d2:d6:02:ea:de:ae:53:25:4b:8b:db:28:16:49:
                    af:e4:d7:e1:71:ff:d1:38:87:cb:9b:a7:bc:09:41:
                    4b:fb:8c:c2:94:01:aa:8d:88:1c:4a:18:55:2b:04:
                    d0:ae:f4:21:7d:be:86:6a:03:ce:6e:fd:31:3a:9b:
                    31:bb:bd:76:0b:0a:a8:56:70:38:5f:0f:b8:cd:91:
                    1d:dc:b9:5f:1d:12:45:1b:4f:f3:19:a4:41:2e:45:
                    c6:e0:ce:79:ed:6e:70:4f:f4:08:c7:91:c0:5a:b7:
                    c4:09:9c:ac:b5:76:b1:04:22:2d:76:40:15:5c:23:
                    25:84:a7:dc:43:91:62:59:22:41:d7:77:9d:b8:dd:
                    6b:e5:fe:6a:ac:6f:2f:ed:1e:e4:b1:22:82:a8:fc:
                    ec:1b:1a:d6:ac:8a:d4:c0:e7:40:00:49:bd:80:e3:
                    54:a3:56:89:8d:f1:ab:fd:4d:02:29:22:94:73:b0:
                    01:1b:4f:13:c1:2e:ff:1e:f6:a3:3b:e0:fb:b4:6b:
                    c7:b1:0e:13:00:d4:53:b3:89:51:9e:a8:f6:74:07:
                    25:e5:c1:0b:d7:75:78:79:f7:fb:8d:c3:15:34:8b:
                    ed:d8:d6:39:a5:fa:5b:49:9e:7c:b2:5f:20:60:1d:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:01:83:2F:59:6E:48:8C:DB:DB:83:0E:75:C8:04:91:33:CB:68
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:19:13:1d:ce:31:a0:46:21:dc:b0:b4:ca:a6:b6:ac:dd:
         12:99:3b:e5:f0:c6:6c:5d:9b:3c:7a:c2:55:21:65:dc:d8:df:
         80:68:d0:1b:45:f8:74:74:ff:7d:54:5d:36:85:f6:06:86:d2:
         75:59:40:35:e0:63:84:b8:7b:e8:0b:d4:01:d6:ec:03:3d:5d:
         7c:57:6c:dd:5b:84:5f:73:4d:5b:4e:24:b0:f6:47:2b:f5:39:
         8f:62:6c:80:ee:90:be:17:c0:92:4c:89:ec:e7:77:72:01:25:
         3b:c7:ec:ea:48:ca:3d:7a:2b:20:62:e0:5b:35:df:27:60:19:
         0c:8f:cb:da:7e:39:e0:f2:96:5d:9c:c2:71:55:63:4c:05:cb:
         77:b0:83:f1:bd:08:69:40:a9:4f:e0:bb:6c:39:c3:ce:59:3c:
         bd:8e:08:15:67:65:95:87:6d:cf:b5:f7:84:eb:e0:b6:a8:a5:
         c5:4f:45:99:72:94:ae:b9:8a:dc:d8:b4:4f:0d:b0:36:b6:d5:
         a1:79:a9:80:22:39:5f:83:1e:a4:58:38:41:c1:79:16:50:4b:
         86:5d:d1:ac:81:7e:18:a0:15:11:74:3b:44:9a:20:06:55:b2:
         4a:97:43:b3:a7:9e:e5:a8:65:09:4c:a2:9a:55:91:63:c6:0a:
         7d:05:c4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvydAq3jgFptiF+p2UpMIYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjYwMTI1MDAwMDQ5WhcNMjYwMTI2MDAwMDQ5WjAzMTEwLwYDVQQD
EygwNzNmMDE4MzJmNTk2ZTQ4OGNkYmRiODMwZTc1YzgwNDkxMzNjYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAEZ4GB6nfpg+dgnKu340tYC6t6u
UyVLi9soFkmv5Nfhcf/ROIfLm6e8CUFL+4zClAGqjYgcShhVKwTQrvQhfb6GagPO
bv0xOpsxu712CwqoVnA4Xw+4zZEd3LlfHRJFG0/zGaRBLkXG4M557W5wT/QIx5HA
WrfECZystXaxBCItdkAVXCMlhKfcQ5FiWSJB13eduN1r5f5qrG8v7R7ksSKCqPzs
GxrWrIrUwOdAAEm9gONUo1aJjfGr/U0CKSKUc7ABG08TwS7/HvajO+D7tGvHsQ4T
ANRTs4lRnqj2dAcl5cEL13V4eff7jcMVNIvt2NY5pfpbSZ58sl8gYB2PywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc/AYMvWW5IjNvbgw51yASRM8toMB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEsZEx3O
MaBGIdywtMqmtqzdEpk75fDGbF2bPHrCVSFl3NjfgGjQG0X4dHT/fVRdNoX2BobS
dVlANeBjhLh76AvUAdbsAz1dfFds3VuEX3NNW04ksPZHK/U5j2JsgO6QvhfAkkyJ
7Od3cgElO8fs6kjKPXorIGLgWzXfJ2AZDI/L2n454PKWXZzCcVVjTAXLd7CD8b0I
aUCpT+C7bDnDzlk8vY4IFWdllYdtz7X3hOvgtqilxU9FmXKUrrmK3Ni0Tw2wNrbV
oXmpgCI5X4MepFg4QcF5FlBLhl3RrIF+GKAVEXQ7RJogBlWySpdDs6ee5ahlCUyi
mlWRY8YKfQXEsg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:50 2026 by rpki-client