This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File:                     KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier:          EWPLPt+RLWjfzU8X+Wzdi9/zj9UTaKOxCi58aWxVKOk=
Subject key identifier:   BB:20:03:BB:1A:BA:51:94:0F:36:80:FC:7D:55:9E:D5:A5:AC:1D:94
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer:       /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial:       019C43C6C27EF98E1A3685B0A278E1913A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number:          08E7
Signing time:             Mon 09 Feb 2026 19:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:25 +0000
Files and hashes:         1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: Iaq4T3pif+1eLbPNueZFcRLpFY+p98zPfMmHwYvc7Sc=)
                          2: xZy9yG14ltJYyTdhV8EKh-Qv2Tw.roa (hash: WIYaIC5s3N8ZnXYMhEb9bDmMVDtOHXmvh+va633nXao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c6:c2:7e:f9:8e:1a:36:85:b0:a2:78:e1:91:3a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
        Validity
            Not Before: Feb  9 19:00:25 2026 GMT
            Not After : Feb 10 19:00:25 2026 GMT
        Subject: CN=bb2003bb1aba51940f3680fc7d559ed5a5ac1d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:dc:9b:7e:cd:ed:46:7b:89:d8:14:5b:ff:
                    56:0e:20:4a:0a:e8:fd:ea:b2:70:5d:21:7c:da:a9:
                    db:88:34:61:0f:15:11:21:e9:c6:f6:5e:7d:04:61:
                    84:21:cc:3a:cc:9b:f9:68:fd:a0:e0:03:2b:67:af:
                    21:3e:8c:0f:8d:f8:69:6a:a5:f0:08:db:3d:4e:1d:
                    c4:50:27:20:53:59:7c:e3:77:8c:7f:a7:b7:d1:e5:
                    6d:b2:d1:31:9f:3b:dd:8d:17:3e:59:a7:64:82:5b:
                    a0:a1:41:ae:36:ed:69:4f:23:7d:15:4f:2c:38:2e:
                    0b:e9:60:21:7b:2d:a8:f4:dd:04:f0:53:8e:ca:de:
                    4e:90:d2:f4:08:21:18:be:fc:53:e6:24:8b:79:9f:
                    87:73:25:ce:d7:67:39:be:af:b1:ec:10:df:6b:57:
                    df:1f:23:ad:b7:b3:e2:33:83:b3:40:6f:b8:d5:b6:
                    43:52:f4:32:71:30:8e:59:e5:00:ca:21:61:88:c6:
                    e3:f2:f9:ed:61:2b:5a:d3:a5:2e:28:8e:c1:f6:9c:
                    74:b3:64:a2:04:53:32:75:4f:76:9b:2f:59:c6:58:
                    cd:c2:ba:6a:2b:17:a0:f4:41:93:88:b1:13:da:92:
                    11:a3:25:b7:56:b5:83:29:73:c0:5d:70:f6:37:34:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:20:03:BB:1A:BA:51:94:0F:36:80:FC:7D:55:9E:D5:A5:AC:1D:94
            X509v3 Authority Key Identifier:
                keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:37:b7:cc:9e:6b:b3:2f:90:20:73:3c:7a:30:6c:86:18:84:
         e3:ca:35:df:59:5b:08:1e:e0:a3:22:a4:40:73:68:45:24:19:
         78:48:b1:3b:32:3d:2d:2a:49:53:cd:a1:c1:1d:0c:19:5f:94:
         de:c4:d2:93:7b:70:4c:4a:aa:ed:f1:2b:eb:26:8d:e6:75:96:
         5e:36:b2:d3:dc:2a:d4:a5:60:2a:0f:d6:b0:90:78:59:db:9d:
         5e:43:d2:c9:3e:43:9f:28:5f:48:b0:be:3f:76:e9:b9:c5:9d:
         b4:05:c3:76:49:1b:88:00:cc:9f:73:0c:34:e0:fb:c4:8c:d8:
         dd:45:36:32:46:aa:80:58:9b:8d:09:f3:b5:b9:a0:b1:76:04:
         98:6e:c1:00:5f:fd:c0:62:d7:f7:35:f0:39:8f:fe:4b:7f:e1:
         69:07:b1:a7:9b:83:6d:38:78:5c:97:f2:9b:ca:23:38:e0:d1:
         69:a7:62:3a:22:fb:e2:50:07:4f:62:56:01:c5:79:a2:9c:ce:
         c1:7e:3a:ff:2e:83:16:a3:25:70:4a:31:12:5b:89:8b:80:48:
         4b:42:48:16:cc:af:aa:da:d4:de:a6:e6:60:6a:6d:4d:3c:bb:
         db:da:12:db:6b:d0:bc:a1:3c:cc:2d:ec:58:f7:75:0d:df:82:
         cf:d4:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:04 2026 by rpki-client