This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File:                     dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier:          mzyvWrgjTjqayz3RV+o1Rj80XTB88JUzyAte/0lF+fk=
Subject key identifier:   7E:4B:F2:1E:28:36:2C:88:59:90:86:3A:96:21:B7:B6:5A:6D:4F:6F
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer:       /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial:       019C438FAF6CD4F852DC3BB59EE3939DC358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number:          0D2D
Signing time:             Mon 09 Feb 2026 18:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:15 +0000
Files and hashes:         1: CbxnjlJBX1CICFT1kGWKTEy-Z-0.roa (hash: a7S+YgDlHzYeUVzNU2fan5Qha2NudAAgRA43fxRQexg=)
                          2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: wAu8o87pOoG7jB4vxYWB6drUGsI8tW+MnTONvv24qqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:af:6c:d4:f8:52:dc:3b:b5:9e:e3:93:9d:c3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
        Validity
            Not Before: Feb  9 18:00:15 2026 GMT
            Not After : Feb 10 18:00:15 2026 GMT
        Subject: CN=7e4bf21e28362c885990863a9621b7b65a6d4f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:1a:b6:fe:52:a0:34:58:b5:3b:c7:67:54:
                    c7:63:b9:f6:02:4d:56:8a:6f:0b:08:dc:70:b8:2b:
                    e9:16:36:33:a8:81:62:35:02:85:c9:e4:62:41:21:
                    26:9c:73:c4:34:63:da:65:06:4f:93:a2:ad:4e:0d:
                    0a:44:bf:f5:2c:de:eb:cd:05:c2:cc:19:41:75:83:
                    51:7d:20:e9:48:de:7c:d5:e8:a0:fb:d2:2a:5d:d0:
                    35:de:cc:42:1d:8f:a6:b5:00:8e:dc:3e:f5:eb:54:
                    27:55:af:d0:42:d8:d0:b8:e6:31:c6:7b:aa:4e:79:
                    13:7d:9c:80:04:b0:6d:6a:84:41:d6:2d:04:28:9a:
                    1f:99:00:4d:71:3c:e4:f2:f4:03:b8:a8:1b:d4:96:
                    36:92:4c:c5:40:c7:9a:da:2c:21:86:16:da:76:19:
                    59:3b:4e:0f:7d:e5:92:41:48:16:b0:a6:3a:13:67:
                    e5:24:f4:20:94:f3:dd:b1:bd:71:03:dd:f8:41:b5:
                    ff:ca:88:c0:dd:61:0e:6e:26:e8:49:96:8b:ca:df:
                    b5:64:ae:e2:f6:24:b6:71:94:2e:a9:e2:97:81:2c:
                    83:26:e1:17:83:9d:a4:3e:1d:89:23:c0:da:fd:8f:
                    7a:b9:40:73:c2:40:00:03:cf:51:b6:03:2c:5c:ba:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4B:F2:1E:28:36:2C:88:59:90:86:3A:96:21:B7:B6:5A:6D:4F:6F
            X509v3 Authority Key Identifier:
                keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:c1:ce:11:d2:f4:14:b4:3b:e0:2c:c1:a7:cc:0b:f9:51:
         b6:8f:ef:78:f8:f2:4a:b9:59:dd:cb:e3:75:13:f3:27:57:64:
         b4:4d:ae:17:15:d9:5d:af:65:0e:3b:cb:02:20:76:d8:be:1b:
         06:5b:4b:56:f3:da:69:d3:03:29:70:79:ed:f8:4e:1c:2f:3d:
         0e:1a:c7:c6:c7:37:f3:9d:d4:88:7c:fe:a8:52:c1:10:f5:31:
         06:11:86:d6:6a:7c:2e:a2:ab:29:85:c1:a4:9f:01:0b:91:9f:
         9e:fd:c3:e9:e7:33:8c:dc:63:21:83:f1:5b:29:2e:69:16:66:
         83:9b:eb:7e:7d:34:8b:81:1a:97:e9:43:14:ca:6d:fe:d7:e7:
         d0:57:27:22:6b:7f:db:d5:41:4a:2f:d6:0b:08:15:c3:b4:f4:
         b5:c8:b0:04:ab:a5:fb:9c:07:d7:1a:46:ba:d8:fd:fb:c6:a2:
         9b:7a:57:30:3a:29:8c:40:32:8e:34:32:2e:a3:f7:c3:0b:d0:
         3f:62:a6:c5:65:4c:66:4d:c8:72:5a:eb:8d:7b:df:30:f6:88:
         1d:66:05:c2:1f:5b:06:f7:9b:18:56:e0:1e:0d:1f:8d:35:6d:
         06:d1:e2:93:a7:65:59:f5:10:10:cc:41:1e:2f:ec:51:36:1e:
         cc:6c:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:45 2026 by rpki-client