This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File:                     DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier:          pyJEkxrNtWrgGgb7vRrOj5u+R286yi3KoLyn3q5g3ns=
Subject key identifier:   C3:26:13:45:96:2A:26:7A:B4:A8:F7:76:D1:4C:56:93:9B:83:93:78
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer:       /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial:       019C42B45EE6CCAF4B94A7F072C7C5EAFE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number:          48
Signing time:             Mon 09 Feb 2026 14:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:42 +0000
Files and hashes:         1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: Z4iWckrq3gCisZUWafeAOGaaSKHq745Q6u043XImjbU=)
                          2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:5e:e6:cc:af:4b:94:a7:f0:72:c7:c5:ea:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
        Validity
            Not Before: Feb  9 14:00:42 2026 GMT
            Not After : Feb 10 14:00:42 2026 GMT
        Subject: CN=c3261345962a267ab4a8f776d14c56939b839378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:e8:6b:15:6b:2f:f9:9e:ad:fd:67:39:ed:
                    1c:66:ca:90:db:4b:ed:e1:3f:92:71:9c:f9:01:90:
                    8a:6c:c6:46:fb:d7:80:1c:28:c9:09:f2:a7:0b:e5:
                    c1:dc:e8:b4:4d:9d:8e:5e:e1:a7:1a:38:50:a4:9a:
                    e2:04:ad:66:30:ac:dd:9d:96:5d:5a:7c:f0:66:7a:
                    58:b3:63:f6:93:54:ae:4a:c8:80:97:19:c3:d8:53:
                    29:55:db:0f:54:17:cd:a6:bd:31:1d:5b:f2:0e:34:
                    8b:fa:a3:41:e1:04:2c:bf:d7:9f:5d:5d:64:ea:d2:
                    fa:0f:c5:62:f7:65:d5:ee:aa:11:a0:73:82:88:48:
                    13:a6:21:af:a4:e8:d5:78:d6:c3:69:57:29:ea:3e:
                    a1:87:be:56:51:85:92:31:d8:85:92:91:6c:3f:78:
                    3b:75:ac:fd:cc:33:5a:ea:9f:97:2e:1a:ca:70:54:
                    df:6d:8d:90:aa:75:bb:62:4a:9c:75:7a:88:a3:9d:
                    51:5c:95:4a:7d:da:c3:0c:51:5a:0e:b2:16:c2:61:
                    c2:83:d7:99:84:6d:96:f5:59:61:c2:4b:3e:6e:ea:
                    d8:cf:78:44:4e:40:8a:b8:f3:f5:44:e1:a8:f2:76:
                    e3:e1:cb:3c:87:b6:43:07:0e:43:f9:e8:10:03:9a:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:26:13:45:96:2A:26:7A:B4:A8:F7:76:D1:4C:56:93:9B:83:93:78
            X509v3 Authority Key Identifier:
                keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:42:10:5b:0a:19:45:cc:65:b7:f5:8e:51:be:db:0d:58:
         d8:9f:94:16:ba:f6:e8:45:22:fe:0c:79:99:cd:61:c8:d1:ae:
         c8:bf:5e:b4:db:b7:82:d1:cf:a5:21:a8:a8:dd:8b:35:2a:b2:
         09:de:04:92:13:b6:ad:d2:24:61:70:53:cb:ed:2c:4f:86:4b:
         fd:93:e0:db:0a:4a:7e:2f:d9:9c:e5:15:83:45:4a:50:60:7f:
         cd:9b:0b:69:b1:c3:40:f0:48:a0:0c:53:d5:f0:43:6a:0d:d6:
         b8:21:aa:fd:9f:61:27:c4:b2:3a:7e:43:e2:bf:21:fc:f2:30:
         42:22:7b:51:ab:f3:5c:8e:76:71:c1:a5:55:2f:bc:ce:3e:ab:
         0e:71:df:19:62:eb:d5:a6:66:4e:68:cf:fd:ac:bd:2c:6e:95:
         4e:c0:a5:c0:f7:45:e1:98:d5:84:d5:1c:8a:da:e5:c5:98:0e:
         a7:49:bd:82:09:80:2b:ba:94:93:63:c0:44:49:a9:5f:1c:aa:
         3c:42:1c:5a:9d:38:20:bd:b9:49:81:ba:57:57:37:07:b0:52:
         55:36:12:20:36:38:b3:ff:03:d7:fa:e1:04:cd:77:77:be:73:
         e5:7a:af:c9:fe:45:2f:37:cf:07:ad:4c:01:3d:39:ae:0f:4f:
         b8:1c:a3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtF7mzK9LlKfwcsfF6v6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjBkNjJkZWUzYTE0YTA2ZTUyYjdlZjdhMDgzMDMzOGQ5
ZDc3NTEwHhcNMjYwMjA5MTQwMDQyWhcNMjYwMjEwMTQwMDQyWjAzMTEwLwYDVQQD
EyhjMzI2MTM0NTk2MmEyNjdhYjRhOGY3NzZkMTRjNTY5MzliODM5Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4PoaxVrL/merf1nOe0cZsqQ20vt
4T+ScZz5AZCKbMZG+9eAHCjJCfKnC+XB3Oi0TZ2OXuGnGjhQpJriBK1mMKzdnZZd
WnzwZnpYs2P2k1SuSsiAlxnD2FMpVdsPVBfNpr0xHVvyDjSL+qNB4QQsv9efXV1k
6tL6D8Vi92XV7qoRoHOCiEgTpiGvpOjVeNbDaVcp6j6hh75WUYWSMdiFkpFsP3g7
daz9zDNa6p+XLhrKcFTfbY2QqnW7YkqcdXqIo51RXJVKfdrDDFFaDrIWwmHCg9eZ
hG2W9Vlhwks+burYz3hETkCKuPP1ROGo8nbj4cs8h7ZDBw5D+egQA5rCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMmE0WWKiZ6tKj3dtFMVpObg5N4MB8GA1UdIwQY
MBaAFA3w1i3uOhSgblK373oIMDONnXdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMt
NTE4NGNkNmZjMjEzLzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xMGRhYzktMjdlOC00YTNiLWI0MWMtNTE4NGNkNmZjMjEz
LzEvRGZEV0xlNDZGS0J1VXJmdmVnZ3dNNDJkZDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+5CEFsK
GUXMZbf1jlG+2w1Y2J+UFrr26EUi/gx5mc1hyNGuyL9etNu3gtHPpSGoqN2LNSqy
Cd4EkhO2rdIkYXBTy+0sT4ZL/ZPg2wpKfi/ZnOUVg0VKUGB/zZsLabHDQPBIoAxT
1fBDag3WuCGq/Z9hJ8SyOn5D4r8h/PIwQiJ7UavzXI52ccGlVS+8zj6rDnHfGWLr
1aZmTmjP/ay9LG6VTsClwPdF4ZjVhNUcitrlxZgOp0m9ggmAK7qUk2PAREmpXxyq
PEIcWp04IL25SYG6V1c3B7BSVTYSIDY4s/8D1/rhBM13d75z5Xqvyf5FLzfPB61M
AT05rg9PuByjGA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:40 2026 by rpki-client