This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          Dh492y+KgeJsirTAcgjWntBkdcXeuPrhOrExWxx1gcE=
Subject key identifier:   44:D6:45:FF:1A:B9:CD:64:BC:26:E8:16:0B:76:F5:8F:B5:02:9B:CE
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       019B8ACFA4402DDD8B0E208A2AA71CC82766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          137F
Signing time:             Sun 04 Jan 2026 21:00:22 +0000
Manifest this update:     Sun 04 Jan 2026 21:00:22 +0000
Manifest next update:     Mon 05 Jan 2026 21:00:22 +0000
Files and hashes:         1: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: 8/WiOWC2t0D8jbwol8/qgEsRE5NHz5mcCOoHGoRCxJ8=)
                          2: J_Si888mTIUXmJzVcE29O7uvG1U.roa (hash: VmGywc+NvwZVzJ1wiqrPqs8vYg44e/VGLRIHOp7zQZE=)
                          3: MhLZWTXS4S3zmEURdP_TdxvNgJY.roa (hash: 9rV4NDo4H6diAwu7rDUdqQOfSLYPartWt7sMtwpYVzY=)
                          4: d01OZQ1h5yd4zGfVbRIIarVh3s4.roa (hash: Xg/0ZNy0ArMdMbPyTvAy9IQ+pjsxh8KiRBOhFT7eW1Q=)
                          5: kviMEyCZuerPbRSjjOAweNUOX9M.roa (hash: XkVxdbAObzQecFi8jNeAZta/hKgnPT5nn3X0mpt80lw=)
                          6: rxoDYFpq8vIo4tsEseR7hW-PJWw.roa (hash: fCuVig3kLTHc4MXvnEsk4nmU3uAS7Jg8f43kLxgMMuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Jan 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8a:cf:a4:40:2d:dd:8b:0e:20:8a:2a:a7:1c:c8:27:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Jan  4 21:00:22 2026 GMT
            Not After : Jan  5 21:00:22 2026 GMT
        Subject: CN=44d645ff1ab9cd64bc26e8160b76f58fb5029bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:3d:46:f8:ef:c5:28:9a:2b:74:9c:97:60:
                    d7:7e:d1:8f:59:3e:ad:70:39:b4:8f:b2:25:4f:4b:
                    36:cf:5d:d2:13:07:9b:39:95:3d:50:fb:73:a0:bd:
                    17:a1:85:f1:a8:f5:ce:02:1e:3f:2d:6c:ba:a2:a2:
                    55:1c:a4:a9:da:69:37:2e:2c:d9:a1:3e:d1:35:a7:
                    eb:70:33:87:38:b8:05:97:cf:1f:0d:58:69:e2:98:
                    a9:75:aa:a4:63:46:c3:79:38:3f:86:e7:c4:86:25:
                    81:ec:36:41:eb:08:ff:0c:0e:b5:c6:55:b9:34:44:
                    ec:41:dc:31:1a:24:f4:5e:84:f0:da:78:c9:ed:e4:
                    db:a6:ac:b2:47:9e:10:8d:08:3e:10:1d:cd:6c:d1:
                    31:63:23:da:a2:00:a4:0f:e1:38:f5:7e:e1:49:da:
                    08:9b:70:70:77:88:a3:8f:fb:1e:01:4b:aa:f3:d1:
                    20:05:93:4a:6b:bc:d7:b5:21:73:68:fd:75:49:57:
                    e7:64:ca:68:cd:ac:56:a7:03:e7:97:19:88:e8:03:
                    a3:22:0f:76:f7:ad:27:82:4a:76:56:b8:9a:88:61:
                    86:52:0c:3c:0b:e2:70:83:06:33:69:2f:41:9c:a0:
                    15:c8:1d:00:ce:e3:f1:44:a4:1f:cb:57:65:91:c7:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:45:FF:1A:B9:CD:64:BC:26:E8:16:0B:76:F5:8F:B5:02:9B:CE
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:26:3d:1f:ea:6c:70:20:33:25:3a:9c:fa:e7:1c:f1:f6:
         a5:46:b3:a2:69:df:5d:5e:01:00:f2:5e:cb:e8:06:44:cf:7a:
         8f:4c:96:41:57:9c:7d:05:2c:49:86:d0:0f:8d:ed:67:7e:41:
         f1:eb:1c:08:1b:2a:46:53:13:5b:8f:10:e6:e6:c7:5f:d9:84:
         75:f1:af:0f:27:9a:c9:aa:e8:40:fe:d1:45:8f:82:01:ba:61:
         08:c0:19:93:7f:55:d7:d3:82:28:48:58:d7:90:9b:22:cc:7f:
         10:fe:fe:f7:7a:44:f1:e6:f8:5b:3e:93:2f:e7:82:1b:20:ec:
         f7:5f:b3:1b:9e:21:2a:d8:1c:27:16:b9:1f:d7:c5:90:8b:3e:
         28:86:29:5b:ef:14:f9:12:d5:49:8b:ba:32:83:58:9c:0a:40:
         d7:74:34:32:5f:8f:a5:36:28:67:65:bd:4e:f5:5a:ec:a1:30:
         c1:d5:72:d5:6a:12:48:55:61:07:95:61:bc:ab:53:29:ae:92:
         42:31:91:5e:1b:60:bf:54:72:dc:b3:4c:66:79:f9:c0:16:26:
         02:52:01:75:68:85:e3:4c:d4:39:d0:41:2a:64:d3:89:d3:4f:
         d5:84:d8:6e:b3:44:95:ea:f0:7d:e5:32:ed:29:ce:a5:58:0c:
         22:0d:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 03:04:07 2026 by rpki-client