This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File:                     k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier:          aCT2a6hgkwU3a7huooAtffrJcxLMpNIR591JOWGzKJs=
Subject key identifier:   7D:D5:5F:22:52:C7:02:21:7B:37:E8:03:EB:79:46:83:91:11:F6:1E
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer:       /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial:       019C44DA48B3D8AF3D64E150CA3063C731CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number:          1811
Signing time:             Tue 10 Feb 2026 00:01:21 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:21 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:21 +0000
Files and hashes:         1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: eR/z/lSBPK3RPyYCYB/vYh1XW4BKWmth2fZju8MbZI4=)
                          2: wdmEAU2UHexPl9Fd8jFjApSrnME.roa (hash: ytdBjY97O2O0azkD9/5YnzB54mNzzsWykxPR/Of2YIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:da:48:b3:d8:af:3d:64:e1:50:ca:30:63:c7:31:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
        Validity
            Not Before: Feb 10 00:01:21 2026 GMT
            Not After : Feb 11 00:01:21 2026 GMT
        Subject: CN=7dd55f2252c702217b37e803eb7946839111f61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:a0:fe:d2:53:af:1e:6c:1e:b8:81:4e:df:
                    9c:c0:3f:b8:7f:1d:83:bc:83:2a:7d:f1:69:98:81:
                    c1:3f:8a:92:1e:c0:8a:5d:e1:81:2a:17:ba:6a:a7:
                    ce:a4:43:21:16:28:22:2b:61:10:a2:9b:8b:5c:6d:
                    c1:66:18:23:fa:2f:b7:0e:95:dc:eb:ce:13:08:10:
                    37:e8:85:fe:da:bb:0b:bb:a3:ac:c5:1c:d1:fb:1b:
                    59:95:9d:a6:79:73:a8:63:3d:54:4e:1d:1b:67:93:
                    c5:43:a3:95:65:05:1a:17:eb:b5:4d:aa:2e:10:5e:
                    4a:03:f8:aa:22:f8:7a:d0:fe:83:96:f9:7f:02:23:
                    1c:b3:0f:27:09:77:42:08:20:87:ce:ce:b5:7e:7e:
                    00:99:c0:a8:06:a4:b8:a6:9d:9d:94:03:d6:f8:a7:
                    99:51:50:39:1d:7b:74:d0:36:a4:ba:f9:6e:17:b3:
                    4a:11:a2:b2:57:c6:e3:6d:1c:29:ac:66:36:5d:da:
                    7c:d2:b9:a1:88:3f:9e:b2:b8:ac:6d:e2:f9:7a:21:
                    51:76:ac:5c:0b:60:5e:7d:da:5e:98:f2:c0:7e:98:
                    f6:11:67:20:ef:a7:57:33:08:72:d8:17:5b:1e:2c:
                    13:a4:f9:ef:f2:36:5e:55:fa:5c:dc:49:ca:73:ca:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:5F:22:52:C7:02:21:7B:37:E8:03:EB:79:46:83:91:11:F6:1E
            X509v3 Authority Key Identifier:
                keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:10:4b:13:06:75:af:52:ce:31:55:51:72:f3:03:e5:ed:26:
         29:ad:55:8c:e6:38:ca:43:5c:cf:a7:3c:f0:a6:3c:32:5d:11:
         a7:ad:51:62:72:5d:8e:ee:c4:ef:d2:f2:4f:8a:97:b8:82:2e:
         9e:86:07:94:07:fc:8c:2d:e9:ca:fc:4b:b6:f6:c6:41:0d:53:
         62:be:3b:fb:d8:b7:ae:2c:93:38:58:47:77:fd:b2:09:d9:b8:
         23:5f:5c:e9:18:be:58:46:2d:1a:ef:c2:43:2d:5b:14:24:39:
         8b:7e:ec:2e:ad:64:6a:c3:9a:93:ac:2e:49:73:87:02:23:77:
         8d:aa:22:c6:56:c6:6d:39:74:e3:53:a5:03:0b:1d:d8:4b:94:
         75:ab:2d:90:f7:9c:38:50:8e:6f:a2:b3:32:fc:95:5a:64:58:
         bc:6d:03:bd:38:e6:5a:28:91:90:86:5e:fe:c7:d2:83:74:a4:
         98:c0:5d:b4:e4:31:9b:fb:10:f3:ba:8a:7c:27:71:60:f7:a3:
         df:57:35:07:f1:cd:be:ae:82:14:7b:4a:76:5d:60:03:c5:66:
         de:34:5d:ef:e8:2a:f9:1a:0a:7a:ff:49:21:e3:ce:55:5f:3c:
         5d:a4:6b:9a:68:16:3d:7c:32:b8:e8:2d:b2:bc:c6:d0:b8:a7:
         29:ba:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:15 2026 by rpki-client