This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File:                     DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier:          vnOG30DuhV1eZsJfUfRl9SBrAgsnAerbpzEH208RUFI=
Subject key identifier:   BC:06:6C:0B:B4:53:AE:01:B8:B2:7C:CF:CC:A7:70:13:5C:AA:A1:32
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer:       /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial:       019C427D4AF665EEACEC1997826DB5764B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number:          0A27
Signing time:             Mon 09 Feb 2026 13:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:33 +0000
Files and hashes:         1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: 01Esb9wsfa+Mzb/gqdXW4Xzk76DOuzYrA5dmvlSkTzQ=)
                          2: MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa (hash: lAuDt32my/LiTnY20vjzp72xOaSWLrQI57qUNwtWtUY=)
                          3: _TpEXpR390l-2zZdIjknvF0TXis.roa (hash: zzI1yvFkNgMBwF/wH9+ZIjX5kjZLbJeeCbYHypeGMZI=)
                          4: rjjSoAat_n07PoQnlpP54238J18.roa (hash: 8lMbg8iLAkX/M5jc8c3TgyGl0DahY6oK1llhi2qDKko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:4a:f6:65:ee:ac:ec:19:97:82:6d:b5:76:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
        Validity
            Not Before: Feb  9 13:00:33 2026 GMT
            Not After : Feb 10 13:00:33 2026 GMT
        Subject: CN=bc066c0bb453ae01b8b27ccfcca770135caaa132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:01:0b:ea:1b:05:73:2e:28:8c:88:56:fb:
                    3e:06:39:41:48:02:06:f1:33:d0:8e:88:d7:8c:a3:
                    16:0d:41:38:2a:23:b6:0a:3a:44:ac:ba:b7:16:2a:
                    0a:3d:e3:07:e8:79:6e:78:5a:50:21:99:97:25:77:
                    fe:df:af:77:6f:ee:7f:6e:a3:6d:31:a1:37:da:5c:
                    2d:77:c7:ff:0c:42:77:61:29:fa:38:ac:48:fe:8d:
                    a7:3d:b2:d4:3b:b5:71:a8:c9:02:87:a7:ef:2d:9c:
                    fd:fb:f7:96:cc:5d:5a:86:d4:d9:5f:77:79:33:54:
                    54:40:55:86:18:ae:14:f6:84:c2:6a:34:22:a9:79:
                    08:7e:e9:4b:bb:02:5c:89:1c:d1:d7:7b:64:21:14:
                    1d:31:5e:63:4e:5a:14:0b:e2:a2:50:36:d2:3e:30:
                    7a:6d:45:da:61:c6:61:56:56:0c:30:65:10:0d:92:
                    25:e2:73:49:60:18:4b:66:8f:41:e6:90:71:93:a8:
                    9b:73:6d:eb:f2:c1:01:d6:69:ea:fc:54:32:ca:50:
                    87:60:64:59:95:f6:5b:fa:5e:8c:67:41:ae:a0:c6:
                    f3:c7:d5:d0:db:67:de:5c:04:42:d0:55:bb:0e:c0:
                    fa:cd:58:e6:37:43:e8:fb:5f:f3:19:93:91:0f:62:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:06:6C:0B:B4:53:AE:01:B8:B2:7C:CF:CC:A7:70:13:5C:AA:A1:32
            X509v3 Authority Key Identifier:
                keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:4a:c8:17:f0:d3:3d:36:dd:08:a0:d9:92:25:43:39:cc:
         78:91:38:92:f7:6e:cc:30:fc:33:00:4b:96:d8:bb:09:2d:2e:
         56:d4:fe:b4:a7:2e:08:f2:1c:13:22:2b:e8:af:38:d7:5e:6c:
         96:bb:e1:6c:cb:5b:6b:60:f2:28:db:ba:7c:85:96:5a:e7:59:
         40:7b:14:ae:0a:08:76:80:06:42:90:e2:cf:85:92:6c:f9:18:
         57:c3:4f:7a:91:75:e7:61:4b:88:52:94:df:c2:be:34:cd:de:
         a7:4b:fb:51:9a:f8:e2:e9:e3:07:13:14:54:89:4a:b4:ec:b0:
         3f:2d:b7:c3:06:56:43:bd:2d:76:19:41:98:8e:f0:ee:d8:2e:
         b6:6a:20:95:07:4a:c4:a5:1d:97:83:cd:b8:0a:e0:0f:2d:de:
         85:89:cc:31:90:25:27:dc:2f:34:bb:f9:f2:2f:12:c1:0d:b7:
         f8:23:e2:3c:3b:b1:1f:b3:ef:f0:20:a2:1d:fc:31:c0:d7:dc:
         d7:8c:e4:a8:a3:74:20:bb:dc:39:7b:0d:eb:06:ee:04:fb:5c:
         58:4b:23:d1:fd:a7:e6:c8:4f:a8:58:c4:03:0f:03:52:96:53:
         1d:19:8f:21:46:6f:0b:37:15:5c:7a:49:49:fb:63:05:36:b9:
         be:f6:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:40 2026 by rpki-client