This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File:                     dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier:          axfuIvUPdkLOrqcQm5BeNE+Ke5YG8ViqRwc1ztO0sDs=
Subject key identifier:   EE:2D:60:DA:28:6F:12:04:7F:21:9B:6A:6B:DD:84:E5:20:3B:0B:3F
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer:       /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial:       019C427DB94A02F0C970C9C6CAB6826C8BC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number:          14DF
Signing time:             Mon 09 Feb 2026 13:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:01 +0000
Files and hashes:         1: UqOGG4c7n0ejuJEiFx7KGDz_Wqs.roa (hash: q8p+2Wkdt6lzjJzM6L+Kae+pIXekdc1IH56/fHFs0fA=)
                          2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: sFoAVCU+1znDfs5aDYvfAU16Fy/XvovXGBhqJmW1yPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:b9:4a:02:f0:c9:70:c9:c6:ca:b6:82:6c:8b:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
        Validity
            Not Before: Feb  9 13:01:01 2026 GMT
            Not After : Feb 10 13:01:01 2026 GMT
        Subject: CN=ee2d60da286f12047f219b6a6bdd84e5203b0b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:4e:04:7d:57:ad:45:6a:23:13:a1:7f:2c:
                    4f:4b:4f:8c:12:10:2f:91:6b:8e:94:ce:b2:d5:fc:
                    6e:36:91:51:3c:1b:03:dc:40:d3:bd:21:f5:5e:15:
                    b0:e5:f0:c4:71:d6:1c:3f:73:22:4d:72:59:28:f2:
                    dd:33:43:31:73:35:db:4d:b9:6e:70:48:8b:e2:b0:
                    a5:60:01:9a:3d:32:d2:41:4d:b6:af:b4:e1:2f:bb:
                    e1:8d:5f:2e:11:c4:db:07:4d:7f:67:41:11:59:b3:
                    7f:77:03:b5:e2:4d:f7:55:0e:60:54:ae:61:68:03:
                    f3:a7:fc:6e:7c:3c:74:0a:b9:a5:2e:4f:36:c6:6d:
                    40:38:1b:55:d6:a3:26:65:13:2a:45:01:d9:7b:d8:
                    44:f8:f2:ae:69:fd:90:8e:16:26:3f:e7:6f:e3:cc:
                    6f:90:33:3c:f9:c0:fc:0d:33:20:b4:19:75:9b:97:
                    39:24:8d:ed:0c:6c:70:a8:87:3c:33:f2:e6:5a:8b:
                    e6:da:69:27:cf:2c:4c:c1:f4:26:c1:2e:bf:f5:cd:
                    e9:f6:f1:20:20:60:ef:45:c3:b8:bb:7c:cd:54:a5:
                    7a:04:e7:0b:43:84:f6:6d:df:d3:ee:e4:8c:06:ff:
                    b9:aa:a7:18:51:da:ce:aa:0a:de:8d:82:da:e7:b1:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:60:DA:28:6F:12:04:7F:21:9B:6A:6B:DD:84:E5:20:3B:0B:3F
            X509v3 Authority Key Identifier:
                keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:ff:d4:fc:ce:7a:2c:6f:4b:a5:e5:e1:dc:38:48:c4:9c:
         12:5d:0e:94:21:3a:c7:45:bc:14:45:33:9b:bf:f1:6b:0f:c6:
         e5:1f:59:39:64:df:ba:c3:4b:9c:77:f3:20:25:7c:bd:33:78:
         46:cb:66:4a:ad:d0:91:ed:81:e8:58:44:10:89:e7:d5:d1:de:
         cb:55:27:5a:f5:b8:54:22:26:66:9e:41:5b:39:fc:ac:61:8c:
         32:bc:70:f9:4e:2a:eb:09:94:a1:13:ae:dd:19:62:2d:45:74:
         5d:b1:e5:b5:6b:e7:f7:9b:4d:70:4b:89:19:70:68:00:2a:a5:
         a9:61:df:54:88:32:5f:2c:3c:9b:0f:e9:00:40:6c:3f:9a:96:
         ef:98:83:3e:72:6c:c4:d4:aa:64:02:f7:92:0a:5d:ee:ba:ea:
         13:5e:6e:21:46:85:91:c8:a9:b6:61:1a:fe:d4:40:01:55:46:
         b3:ed:49:5f:80:54:a4:db:5d:3a:cb:39:78:09:c4:49:0a:c7:
         d4:ce:85:ca:7d:80:1a:cb:a9:eb:34:27:7d:92:8d:4b:f3:c8:
         3b:e4:4e:6b:ea:5d:91:f8:44:a3:90:12:3a:4d:41:39:00:56:
         e3:35:14:e7:26:66:21:31:6c:49:8a:40:86:f6:86:33:f0:55:
         fb:8a:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:36 2026 by rpki-client