This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File:                     dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier:          6aYgViJdjL6SwWxyQ0oPpzTJEPB43/4+OZA6llH5ABE=
Subject key identifier:   92:CE:9F:97:92:0C:36:13:8A:73:47:62:C2:69:D0:9F:2A:26:96:26
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer:       /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial:       019C416AF38D6773A756B265AC2FD6EDBF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number:          0CCB
Signing time:             Mon 09 Feb 2026 08:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:53 +0000
Files and hashes:         1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
                          2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: Fu96loVeQ/hIL67s456i6wzoJzNuaBAowPQUHLM8VfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6a:f3:8d:67:73:a7:56:b2:65:ac:2f:d6:ed:bf:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
        Validity
            Not Before: Feb  9 08:00:53 2026 GMT
            Not After : Feb 10 08:00:53 2026 GMT
        Subject: CN=92ce9f97920c36138a734762c269d09f2a269626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:3e:f6:2d:71:fe:6d:9a:ee:6c:ff:89:16:
                    d1:fb:9f:00:15:93:39:9f:d1:3c:ce:67:48:28:c0:
                    23:94:73:b6:2b:51:a4:b9:d4:c9:2e:1d:ae:e2:e3:
                    f1:25:32:5c:f1:1f:08:a6:91:9b:bf:62:b3:b0:ee:
                    b1:cd:bb:1e:87:38:7b:60:3a:0c:b3:44:f4:17:03:
                    b7:6c:d1:c1:71:cf:06:7e:7e:b9:62:5d:40:43:75:
                    ec:99:da:c4:9c:d0:43:85:10:85:18:82:a9:23:9f:
                    39:e1:65:8d:33:26:bb:ff:f2:e9:d6:c5:49:6f:77:
                    9b:48:88:9c:23:50:ac:db:c4:3f:68:3e:4c:4b:99:
                    a0:25:d1:05:f9:48:3a:ad:0a:ad:8c:c3:fc:d0:cf:
                    3e:b2:e0:73:97:55:4c:98:80:4b:60:01:4c:17:e6:
                    d8:7f:cf:41:40:ae:71:50:6f:d7:0c:97:d2:7e:79:
                    72:57:44:11:3c:a2:a3:87:7e:7d:81:92:2d:7a:06:
                    8e:81:08:07:0b:9f:30:a8:3b:84:cf:ba:df:ea:df:
                    e7:ba:64:f5:8e:20:05:78:cd:6f:4b:6d:2e:94:25:
                    61:ed:e7:3d:a8:10:a6:11:85:b4:df:25:c1:b6:31:
                    1f:30:c3:8b:95:0a:cf:3f:cb:a7:11:e8:1a:6d:d6:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CE:9F:97:92:0C:36:13:8A:73:47:62:C2:69:D0:9F:2A:26:96:26
            X509v3 Authority Key Identifier:
                keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:20:f1:de:4a:d2:c1:9a:36:ea:ff:39:81:50:fa:e4:22:aa:
         ce:50:58:d1:fb:26:e4:4b:04:b8:41:5a:fd:60:38:34:b5:8f:
         61:55:e2:f3:a7:fe:76:38:07:38:d4:c6:75:04:d7:40:64:d1:
         9f:05:6c:44:a1:fc:b4:75:95:0c:68:3c:c2:3b:77:50:1d:c1:
         2c:09:b1:ff:75:77:7e:21:12:13:94:c4:15:43:81:bd:b6:f2:
         f8:6a:96:be:b9:63:1b:c3:94:56:8a:51:61:f3:5d:4c:00:f0:
         70:71:97:3f:b2:9e:de:7c:ce:14:cd:d7:af:f7:35:e3:fd:f9:
         2a:ac:a3:64:62:88:33:28:93:91:6d:09:42:54:e9:f5:47:29:
         05:77:ad:4f:da:b3:71:2c:69:9e:97:59:f3:d2:a8:c4:c6:37:
         66:10:b0:cf:64:ea:29:1f:e8:a5:cd:ee:b2:bf:7a:be:76:a6:
         ac:8d:3a:24:2b:d7:de:3f:2f:9c:db:5c:6c:34:97:8b:b8:a8:
         6a:7d:e7:0e:91:18:91:ae:74:23:d0:6d:29:2c:a5:cc:30:f2:
         6b:66:00:48:69:97:3e:46:9b:e3:3a:e8:1c:47:16:10:8b:59:
         99:db:a4:21:64:fe:28:9f:42:27:03:5a:71:e2:b2:4b:93:cc:
         d2:5b:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:40 2026 by rpki-client