This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          BHaj2bi0ZoqHRyHGBQeIVQqVdroLgGtVcnDyR+3kHx8=
Subject key identifier:   45:B1:FB:65:6C:C6:0E:4D:AB:DC:1B:49:D9:1B:6F:6F:97:AC:AD:CB
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       019C41D83B2D8495750981E97DC8666C802F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0E10
Signing time:             Mon 09 Feb 2026 10:00:15 +0000
Manifest this update:     Mon 09 Feb 2026 10:00:15 +0000
Manifest next update:     Tue 10 Feb 2026 10:00:15 +0000
Files and hashes:         1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: KdQ1skiQylYBwzPEqntfm8MuEO+P1zhg+9pKLbDuzXQ=)
                          2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:d8:3b:2d:84:95:75:09:81:e9:7d:c8:66:6c:80:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Feb  9 10:00:15 2026 GMT
            Not After : Feb 10 10:00:15 2026 GMT
        Subject: CN=45b1fb656cc60e4dabdc1b49d91b6f6f97acadcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ef:f5:aa:66:f9:f5:75:55:5a:cb:f1:b9:93:
                    fa:85:b0:f9:80:a3:31:0b:4d:33:25:44:88:aa:64:
                    d8:99:f1:bc:cc:a0:f3:5d:33:c6:48:de:f6:f3:1b:
                    c9:4a:c0:05:a7:3c:a2:03:ce:1d:8f:0f:6e:0c:01:
                    20:d9:d7:fb:a7:7f:52:31:71:80:0c:8b:d4:54:34:
                    e7:a1:8a:f5:84:8e:2e:f4:8a:56:18:f8:ef:38:49:
                    3b:de:3f:4b:70:e5:f4:fe:b6:bb:0a:d3:0f:82:61:
                    cb:cb:7a:cd:37:04:28:cd:37:51:d7:b9:ab:63:d9:
                    0d:4e:92:a4:37:88:48:d3:1a:93:69:3a:43:ec:7c:
                    b0:57:15:d8:e7:4d:18:6a:1c:0e:03:0c:d4:e6:7b:
                    3f:ee:f9:1f:da:bc:a8:f1:88:25:c8:e8:05:63:18:
                    96:9b:12:ca:06:37:29:7c:bb:02:03:d7:67:9e:85:
                    73:67:a8:ee:29:8c:10:04:03:fa:c1:5b:10:75:92:
                    f4:c8:8e:1c:c5:d6:6a:c1:62:86:a9:f2:68:ce:2b:
                    53:7e:15:8b:70:35:f1:9b:6e:bd:33:43:b3:10:f9:
                    1f:7a:c6:cd:ad:69:9c:c7:a9:b2:a5:1a:29:dc:aa:
                    bb:e9:53:f1:9e:27:f7:50:6b:fe:49:f5:6a:68:9f:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:FB:65:6C:C6:0E:4D:AB:DC:1B:49:D9:1B:6F:6F:97:AC:AD:CB
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:95:27:ee:58:75:c4:13:d3:2b:c0:b8:bd:80:fe:92:95:
         c4:c8:41:31:d0:e6:2c:80:dc:e8:7d:93:07:65:c0:18:ac:5d:
         5f:58:94:06:d8:28:56:20:0a:21:8f:d9:b7:52:9f:23:7b:4d:
         5f:e6:de:5a:e3:ca:52:97:20:ef:b6:60:ba:3f:44:39:7c:32:
         7c:f4:6e:38:19:00:43:cf:d0:df:73:9a:00:7f:80:8f:40:f7:
         f1:4f:dc:31:77:32:b2:c0:18:a2:50:df:a6:59:ae:ea:ec:39:
         b3:81:c0:86:6e:9a:31:32:91:d1:b9:f4:8b:2d:0b:3e:bd:54:
         3b:c4:8b:40:e6:52:08:5e:75:b3:c9:dc:ac:90:cb:46:fe:51:
         83:78:be:15:36:30:60:55:8a:c9:27:87:52:7d:dc:99:67:54:
         d2:6e:46:c1:43:bf:26:2d:70:cc:c4:e6:58:7c:8d:ba:b1:7f:
         1c:0e:8c:10:d9:18:47:3e:b9:35:af:44:d5:a1:b5:96:16:85:
         52:2d:67:f3:34:e0:f5:4d:21:80:ef:18:28:25:d3:ad:a7:ff:
         72:9f:e1:7f:d2:ee:02:60:4b:0c:a7:b6:19:ba:6a:02:58:c7:
         f9:8c:71:49:91:54:de:c8:5c:40:58:ed:c4:09:4e:b1:66:b7:
         ad:7b:09:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2DsthJV1CYHpfchmbIAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1
MjJjN2YwHhcNMjYwMjA5MTAwMDE1WhcNMjYwMjEwMTAwMDE1WjAzMTEwLwYDVQQD
Eyg0NWIxZmI2NTZjYzYwZTRkYWJkYzFiNDlkOTFiNmY2Zjk3YWNhZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e/1qmb59XVVWsvxuZP6hbD5gKMx
C00zJUSIqmTYmfG8zKDzXTPGSN728xvJSsAFpzyiA84djw9uDAEg2df7p39SMXGA
DIvUVDTnoYr1hI4u9IpWGPjvOEk73j9LcOX0/ra7CtMPgmHLy3rNNwQozTdR17mr
Y9kNTpKkN4hI0xqTaTpD7HywVxXY500YahwOAwzU5ns/7vkf2ryo8YglyOgFYxiW
mxLKBjcpfLsCA9dnnoVzZ6juKYwQBAP6wVsQdZL0yI4cxdZqwWKGqfJozitTfhWL
cDXxm269M0OzEPkfesbNrWmcx6mypRop3Kq76VPxnif3UGv+SfVqaJ/9PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWx+2Vsxg5Nq9wbSdkbb2+XrK3LMB8GA1UdIwQY
MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt
ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz
LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsiVJ+5Y
dcQT0yvAuL2A/pKVxMhBMdDmLIDc6H2TB2XAGKxdX1iUBtgoViAKIY/Zt1KfI3tN
X+beWuPKUpcg77Zguj9EOXwyfPRuOBkAQ8/Q33OaAH+Aj0D38U/cMXcyssAYolDf
plmu6uw5s4HAhm6aMTKR0bn0iy0LPr1UO8SLQOZSCF51s8ncrJDLRv5Rg3i+FTYw
YFWKySeHUn3cmWdU0m5GwUO/Ji1wzMTmWHyNurF/HA6MENkYRz65Na9E1aG1lhaF
Ui1n8zTg9U0hgO8YKCXTraf/cp/hf9LuAmBLDKe2GbpqAljH+YxxSZFU3shcQFjt
xAlOsWa3rXsJLA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:53 2026 by rpki-client