This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File:                     k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier:          YkktJ0D5C8IZhRwdp0ai5jBoUVPJ7KvFnBWpgAP3ZSM=
Subject key identifier:   2D:A5:5C:CC:F5:52:13:F4:AE:EE:52:90:A5:14:41:0A:2C:E7:88:0E
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer:       /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial:       019C432228BF46AD09BBAD81FE96B98A97D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number:          180D
Signing time:             Mon 09 Feb 2026 16:00:37 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:37 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:37 +0000
Files and hashes:         1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: jGkQVGmTwDSM5rFUDSq+PohCx6uH8cUr5lGCzMpjbmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:28:bf:46:ad:09:bb:ad:81:fe:96:b9:8a:97:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
        Validity
            Not Before: Feb  9 16:00:37 2026 GMT
            Not After : Feb 10 16:00:37 2026 GMT
        Subject: CN=2da55cccf55213f4aeee5290a514410a2ce7880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:ee:93:b8:b8:2b:63:66:8f:14:43:9e:40:
                    af:f3:9c:f9:8a:d8:aa:8a:80:8c:2d:29:9e:80:be:
                    cb:98:e8:86:a2:6c:99:83:73:35:bd:c1:f8:26:27:
                    31:73:9a:62:4e:31:28:ce:ef:f1:0c:c4:55:09:d8:
                    07:11:69:4d:c9:dc:b5:96:4c:a3:55:1c:ca:31:4f:
                    e3:ae:73:8b:a5:0f:2d:77:db:b1:21:0c:bf:29:9f:
                    b5:4b:1d:16:ab:bb:57:f9:6e:e2:78:23:4d:81:f3:
                    04:6d:7c:58:81:39:aa:ae:13:43:c4:46:7d:f5:c2:
                    3b:08:a7:a8:ff:72:35:03:1f:22:9f:a5:0e:03:59:
                    2c:f9:87:f5:ea:dc:d4:37:22:18:02:d2:d4:f3:4a:
                    1a:61:b1:20:ad:28:9f:39:7f:7d:2f:d9:34:4d:62:
                    0b:42:d0:d2:7f:f5:a4:9e:5a:bf:91:71:fc:04:ce:
                    c1:f6:53:b1:7e:73:0a:4b:ee:38:0d:5d:87:d1:74:
                    35:f3:32:eb:74:33:f7:82:9d:8f:d9:bd:0d:24:b3:
                    b3:31:7c:d0:ce:86:ee:cd:8a:f3:32:cc:48:6a:8d:
                    09:85:26:55:90:05:49:84:8a:24:c1:cc:89:38:ad:
                    8d:24:65:80:8f:42:88:44:d0:b2:8f:cd:f0:b7:62:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:5C:CC:F5:52:13:F4:AE:EE:52:90:A5:14:41:0A:2C:E7:88:0E
            X509v3 Authority Key Identifier:
                keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:61:fd:f2:80:d0:a2:9b:47:29:9e:54:27:8a:e0:0a:10:eb:
         f4:5b:d8:94:57:80:18:06:5c:7e:7a:32:58:09:44:1d:a3:c9:
         e8:2e:8f:41:c0:a5:1b:90:d4:78:2b:ea:23:cb:7e:4b:8b:f9:
         0c:ac:29:0b:bd:0b:34:d5:87:25:21:02:90:68:bd:98:18:32:
         4d:77:7f:d0:e0:3c:94:28:f5:d0:79:a2:b2:c7:ca:17:50:ce:
         40:8e:15:3b:01:5b:63:b8:ef:3c:f7:ca:de:31:38:eb:a1:5b:
         49:74:bd:0a:f7:f7:3d:24:ca:d7:0b:7a:ae:0e:7b:7b:97:fb:
         11:e7:42:94:47:9e:25:73:2b:ba:8b:24:a0:59:f9:51:09:ed:
         99:44:35:51:d2:8c:07:ea:68:3e:f1:6e:97:b3:7a:55:3d:d4:
         cd:b6:64:5a:55:f5:f1:83:5e:21:99:3d:bf:45:eb:c3:61:17:
         7f:02:c9:a6:a8:02:dd:60:71:a6:5d:5c:4f:be:f3:dd:48:08:
         26:e8:ca:0a:11:c5:b4:45:9f:1c:ab:d9:77:a0:8a:0c:c9:34:
         ee:1e:40:28:8d:1f:cf:4b:d1:ae:13:c5:90:97:8c:1c:fe:49:
         0a:cd:7a:72:08:77:4c:eb:e1:19:1f:c5:1c:d2:93:72:43:b4:
         10:0b:76:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIii/Rq0Ju62B/pa5ipfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmE3ZTAwOGVjNmIwMDIxMDNhMWJkMWVkNjk2YjE3NmY4
N2IzNTIwHhcNMjYwMjA5MTYwMDM3WhcNMjYwMjEwMTYwMDM3WjAzMTEwLwYDVQQD
EygyZGE1NWNjY2Y1NTIxM2Y0YWVlZTUyOTBhNTE0NDEwYTJjZTc4ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksLuk7i4K2NmjxRDnkCv85z5itiq
ioCMLSmegL7LmOiGomyZg3M1vcH4Jicxc5piTjEozu/xDMRVCdgHEWlNydy1lkyj
VRzKMU/jrnOLpQ8td9uxIQy/KZ+1Sx0Wq7tX+W7ieCNNgfMEbXxYgTmqrhNDxEZ9
9cI7CKeo/3I1Ax8in6UOA1ks+Yf16tzUNyIYAtLU80oaYbEgrSifOX99L9k0TWIL
QtDSf/Wknlq/kXH8BM7B9lOxfnMKS+44DV2H0XQ18zLrdDP3gp2P2b0NJLOzMXzQ
zobuzYrzMsxIao0JhSZVkAVJhIokwcyJOK2NJGWAj0KIRNCyj83wt2JcEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2lXMz1UhP0ru5SkKUUQQos54gOMB8GA1UdIwQY
MBaAFJP6fgCOxrACEDob0e1paxdvh7NSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEt
ZjdlOTFhYzBmYWQ5LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEtZjdlOTFhYzBmYWQ5
LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWH98oDQ
optHKZ5UJ4rgChDr9FvYlFeAGAZcfnoyWAlEHaPJ6C6PQcClG5DUeCvqI8t+S4v5
DKwpC70LNNWHJSECkGi9mBgyTXd/0OA8lCj10HmissfKF1DOQI4VOwFbY7jvPPfK
3jE466FbSXS9Cvf3PSTK1wt6rg57e5f7EedClEeeJXMruoskoFn5UQntmUQ1UdKM
B+poPvFul7N6VT3UzbZkWlX18YNeIZk9v0Xrw2EXfwLJpqgC3WBxpl1cT77z3UgI
JujKChHFtEWfHKvZd6CKDMk07h5AKI0fz0vRrhPFkJeMHP5JCs16cgh3TOvhGR/F
HNKTckO0EAt2tQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:10 2026 by rpki-client