This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
File:                     D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json)
Hash identifier:          uTtS2hpS2wyM4Wxzd9p4G76/xyQqW7sHYu5xbwPdSzw=
Subject key identifier:   FD:7A:A5:79:C2:0B:CA:9B:B0:BE:DD:C0:44:82:5E:C0:51:91:79:87
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Certificate issuer:       /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial:       019C446B9561094C4E5615BA162B4200CD06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
Manifest number:          06A2
Signing time:             Mon 09 Feb 2026 22:00:27 +0000
Manifest this update:     Mon 09 Feb 2026 22:00:27 +0000
Manifest next update:     Tue 10 Feb 2026 22:00:27 +0000
Files and hashes:         1: 6qWCpueTH15zed_1u4JRaf2a7QQ.roa (hash: wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=)
                          2: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: nbu0FPvwwdrnbyHoE9R+lIKwJCqQRSPhfncfgYuk5Xs=)
                          3: bym9GRTaQWoyTuXrKo4RqKoL5XU.roa (hash: /U5VFGEjkXG97DPwKGp9iZ6D0eP8N7dLqjJVI4Njw9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:6b:95:61:09:4c:4e:56:15:ba:16:2b:42:00:cd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
        Validity
            Not Before: Feb  9 22:00:27 2026 GMT
            Not After : Feb 10 22:00:27 2026 GMT
        Subject: CN=fd7aa579c20bca9bb0beddc044825ec051917987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:5e:3e:2c:0c:cd:c0:ef:bc:e7:19:41:e5:
                    f1:20:e0:37:86:aa:ec:bc:24:9d:bd:94:ae:63:49:
                    9b:8c:e4:bd:c6:15:91:b3:36:1f:44:a1:1d:b6:33:
                    7b:99:54:a4:76:93:18:3b:71:6c:a0:e5:2e:a8:08:
                    0b:96:66:20:96:e2:04:cd:1f:82:a2:1e:9f:e1:7d:
                    d7:7b:ea:0a:b7:5f:9f:0e:1c:b2:17:9b:7e:24:b7:
                    35:ec:cd:54:76:23:2a:5f:65:32:46:77:98:bf:23:
                    5c:70:04:38:bb:53:60:62:35:81:3b:37:77:4b:12:
                    4f:db:ad:8f:b3:80:47:21:56:b9:79:9f:98:de:7c:
                    a8:41:52:ea:75:c7:7d:96:9c:bb:26:bb:4a:95:c8:
                    0e:b9:47:f5:97:59:eb:fd:98:a6:7d:e5:f0:41:dc:
                    e2:3d:7b:12:4c:0a:a9:10:99:d4:d7:ed:e0:80:77:
                    62:2f:ec:67:69:c1:60:8f:40:fc:a2:95:e8:6f:71:
                    10:fa:8b:3b:1b:2d:83:a2:1b:ae:54:4a:06:93:e2:
                    b8:62:ce:3e:a4:a7:e4:d4:3e:89:15:c6:ab:c7:7b:
                    21:05:6e:66:74:26:3d:ff:1a:b8:a6:0c:db:80:38:
                    d8:75:7f:f4:c0:d8:ae:cb:5d:34:21:ed:61:f9:41:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7A:A5:79:C2:0B:CA:9B:B0:BE:DD:C0:44:82:5E:C0:51:91:79:87
            X509v3 Authority Key Identifier:
                keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d6:1e:c4:b7:d9:df:37:13:02:43:56:b2:e3:fb:1a:71:c8:
         ae:d9:22:e3:c5:a0:82:94:49:10:8f:ec:24:71:67:df:e7:10:
         a1:e0:24:c9:a1:94:50:45:94:e8:a6:e2:50:f1:69:ef:25:0d:
         e1:f7:22:03:61:0e:af:c7:13:fb:31:6b:98:07:84:49:08:82:
         82:1d:00:1c:4c:f8:c5:ed:a0:2b:ef:b3:30:93:e1:64:0a:61:
         c3:7c:f3:3e:aa:e1:bd:a6:35:a2:c9:ee:ae:bc:09:08:5e:fd:
         c5:ec:93:d6:6c:37:e3:b0:2e:e5:4c:67:88:9a:3c:41:53:6a:
         9e:1d:a9:4e:2d:56:6a:d6:52:ca:c5:4a:2f:10:c2:b8:66:c6:
         09:b7:c1:e0:33:85:fa:8e:31:8f:e2:6e:42:62:1f:6b:a6:d8:
         a7:73:22:41:4d:f0:eb:34:7a:22:fb:7e:2f:22:6d:c0:5e:1e:
         f7:33:9a:01:a0:4f:59:1a:55:a9:be:ae:e5:66:6b:9e:ef:8a:
         49:19:b2:d5:f0:a1:54:be:f9:29:65:88:18:b4:68:61:b7:24:
         85:80:72:22:a1:b8:ce:f4:a1:5f:32:57:71:dd:18:0d:55:ed:
         78:b7:1c:3d:13:7b:15:eb:a9:20:48:b2:fd:ae:5f:6f:e8:3b:
         f0:c0:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:54 2026 by rpki-client