This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          LpL7SFh9SQql1Z1cl/4L2bIq6SJkOvtwdEQsnBSmJFI=
Subject key identifier:   C4:B4:C7:51:B3:2F:E7:0D:AD:30:0F:B6:0D:DF:DE:8B:90:CF:33:E7
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       019C4322353BE70603147961D94481B33A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          077A
Signing time:             Mon 09 Feb 2026 16:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:41 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: cRiV9Ju8ojZ7No+ZgU4kNE9GdZvZSfFvNG7XVKJmf0I=)
                          2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:35:3b:e7:06:03:14:79:61:d9:44:81:b3:3a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: Feb  9 16:00:41 2026 GMT
            Not After : Feb 10 16:00:41 2026 GMT
        Subject: CN=c4b4c751b32fe70dad300fb60ddfde8b90cf33e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8b:db:4f:cf:bb:c9:f4:f9:18:ef:d5:db:63:
                    af:06:f4:2b:ab:7c:5b:d1:17:f5:bd:7a:47:27:b1:
                    7d:8a:e9:aa:42:3a:2f:71:31:80:4b:00:b3:d6:1a:
                    a5:22:bd:c8:73:16:03:c9:7b:3a:33:82:39:5a:71:
                    8e:c6:11:2a:02:4f:89:1b:97:f7:f6:52:fa:e5:3e:
                    cf:8b:9a:1e:d4:95:d9:70:24:74:a2:f4:0d:11:f9:
                    85:72:b1:db:00:3d:a3:0c:06:38:ca:87:12:e6:36:
                    de:91:22:84:97:aa:b2:a6:22:b2:83:14:9c:b8:95:
                    13:3b:cc:1e:ce:89:c2:1d:c7:ae:c8:49:e1:2b:e6:
                    01:ef:cf:dc:c5:b0:c1:20:1c:4c:06:28:04:69:b2:
                    f1:d1:78:22:3d:67:ac:29:48:7d:51:1d:40:76:6a:
                    35:73:13:ec:db:b0:bb:d6:bf:56:9d:e3:d7:31:cd:
                    15:28:db:06:4e:43:ec:71:20:78:27:59:8d:d6:80:
                    ae:68:7a:54:e5:48:af:0e:5e:06:f0:3b:2c:d0:41:
                    3c:ca:91:25:c8:48:d8:58:52:b9:63:8b:85:0d:93:
                    41:17:8a:21:b7:23:c6:84:16:9e:57:9e:c3:10:09:
                    ba:0f:79:dd:c8:fa:86:f3:2b:99:a5:99:8f:ac:70:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B4:C7:51:B3:2F:E7:0D:AD:30:0F:B6:0D:DF:DE:8B:90:CF:33:E7
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:65:af:5c:bd:be:d0:d4:d9:1f:43:3c:1b:6b:a5:31:8b:
         cc:8a:e6:c0:2e:a2:db:95:a4:ba:3a:30:14:39:2b:7f:7f:25:
         a3:f5:f1:c5:26:3b:f5:77:aa:35:d3:e6:43:bc:22:fe:17:f5:
         86:91:e9:64:6e:63:42:55:cc:e9:e0:b1:b4:2b:87:7b:50:45:
         f9:cd:e1:43:77:2b:c9:c9:f0:13:6a:89:bd:12:d1:1f:da:2a:
         ac:2c:7f:d2:12:17:d3:6c:47:6e:5e:82:b2:e1:26:df:91:ae:
         ab:bb:9c:81:6a:21:f6:40:1b:f9:ac:38:d7:cb:c5:83:7a:0f:
         78:96:a4:0b:52:19:98:aa:5c:67:cb:67:88:b6:cc:c0:74:1a:
         9e:2b:ef:28:d7:57:a7:c6:83:c7:5a:2a:19:0b:d9:85:86:f7:
         97:2d:5e:3c:54:bc:0a:af:8e:b8:cd:06:19:76:e9:35:e0:b9:
         f2:47:86:24:83:30:d9:b6:b3:d1:67:ef:ed:2b:bc:9e:18:bd:
         9e:29:a5:1f:c4:7d:37:ed:76:14:97:fe:9a:7e:14:3d:9e:a5:
         5f:69:4d:a1:ae:bf:5b:20:40:4c:26:6b:78:64:31:a6:69:e2:
         d6:73:d1:0d:d6:8c:a3:48:76:40:53:66:af:a7:e8:94:8e:10:
         37:fe:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:37 2026 by rpki-client