This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File:                     rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier:          InjO94AUr7ydJJZe0jIPP1bDh0siKQA5q0KydsGJij4=
Subject key identifier:   30:D1:0B:AE:A9:27:D8:EB:EA:E1:CE:E4:33:82:AD:BA:26:2C:B9:0C
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer:       /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial:       019C4CCA07FA022FF882564D75F5543B9884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number:          0D4D
Signing time:             Wed 11 Feb 2026 13:00:34 +0000
Manifest this update:     Wed 11 Feb 2026 13:00:34 +0000
Manifest next update:     Thu 12 Feb 2026 13:00:34 +0000
Files and hashes:         1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=)
                          2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=)
                          3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=)
                          4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=)
                          5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=)
                          6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=)
                          7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=)
                          8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=)
                          9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=)
                          10: a71loKb002beeu3NMgeo4_rsWxQ.roa (hash: 5opUCJlO31ducmOW5I+SCqLYIdXJCf8s+Rf/KTfLWQE=)
                          11: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=)
                          12: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=)
                          13: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=)
                          14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: YOC4IL4PN9US7h+s5/v7crSaJNi90+jgUUNIEePzt/s=)
                          15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=)
                          16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:ca:07:fa:02:2f:f8:82:56:4d:75:f5:54:3b:98:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
        Validity
            Not Before: Feb 11 13:00:34 2026 GMT
            Not After : Feb 12 13:00:34 2026 GMT
        Subject: CN=30d10baea927d8ebeae1cee43382adba262cb90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:5e:d2:c3:cf:61:c2:49:81:81:2a:e6:bf:
                    d1:b8:c0:84:83:d3:4a:66:3c:55:a5:5f:0f:fe:c8:
                    54:9d:b5:06:a1:25:d6:40:be:d1:81:02:d7:83:77:
                    c0:1e:27:e4:90:71:a8:3f:87:03:b6:7e:c8:73:f4:
                    63:b7:5d:34:3a:a3:ca:98:af:65:30:68:17:b6:b2:
                    f1:0a:ca:e5:5d:3a:0d:af:bd:46:e7:88:95:16:cd:
                    60:c5:33:86:d5:27:e6:c0:72:f5:18:dc:9c:d7:17:
                    48:cc:06:1e:66:5b:5a:66:df:37:93:4e:8f:b3:99:
                    5f:2a:37:fa:6d:c8:f5:4f:cc:5d:e3:83:3c:9f:c7:
                    23:e5:76:87:8a:1a:5c:e0:e5:85:5a:dd:87:1c:b3:
                    a8:21:42:f4:0f:83:14:2c:5d:56:84:42:fb:8b:58:
                    0b:d6:74:bc:3a:b6:0c:70:6f:fc:d8:16:f6:be:89:
                    96:e4:31:8b:85:7a:3e:ec:82:97:2c:69:d7:38:85:
                    d3:2c:35:f2:ca:af:5d:77:8a:f8:aa:fd:de:a9:d7:
                    dd:06:dc:0e:53:f4:4c:79:ce:3c:a6:fe:4a:9a:b8:
                    ed:b1:68:ea:b4:33:33:e8:b6:8c:5b:3e:07:2f:62:
                    6e:20:ed:9e:d9:71:1e:ba:68:c0:68:67:43:1b:1d:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:0B:AE:A9:27:D8:EB:EA:E1:CE:E4:33:82:AD:BA:26:2C:B9:0C
            X509v3 Authority Key Identifier:
                keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:f6:e3:96:00:07:37:25:a1:ed:29:21:ed:d2:cd:b7:f5:
         29:c1:40:ae:4b:e1:dc:e5:b1:9d:74:4f:c6:13:d2:26:6d:a1:
         a9:1b:3f:ae:4c:5c:d9:91:5e:a6:74:76:eb:d5:d1:eb:c8:c1:
         76:1c:bc:1a:03:f5:3b:3c:2d:1b:f7:d8:89:80:5a:75:a6:39:
         66:bd:ba:2d:45:41:22:42:4d:5a:72:82:d8:1b:10:d3:62:f0:
         e3:24:51:0c:f1:61:f4:b8:a2:2e:bb:16:36:d6:d2:af:be:d4:
         6e:ff:57:aa:50:40:34:34:ff:4f:0b:3c:55:32:a1:71:80:8f:
         ba:38:8d:e0:93:aa:d7:38:71:4c:78:c1:37:0b:f3:bf:e7:59:
         aa:60:c0:af:ef:a9:34:9d:11:7b:59:fe:76:c3:19:c3:21:4a:
         b9:0b:43:ca:4b:cd:9b:6d:51:d8:5e:69:2c:67:64:5c:57:4f:
         04:4b:8f:d8:79:42:16:44:48:02:07:3b:75:4a:7f:d7:69:32:
         9a:8a:02:b1:0b:17:8b:9f:a9:af:d8:48:1f:83:3f:93:f3:5b:
         f5:52:a1:ac:0a:f8:34:81:2d:5f:07:7c:c4:eb:bc:3a:50:d4:
         53:11:bf:47:83:57:d9:cc:ff:26:6f:8d:a3:db:a5:be:8e:94:
         fe:54:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 18:51:19 2026 by rpki-client