This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
File:                     dJm8fW4g9ytAmz-7qsGDSAyekNc.mft (raw, json)
Hash identifier:          VucKC5pAr7TsqhO9wtrydHjwPhJN21M9Vcu/5t6BZV8=
Subject key identifier:   9E:AA:4F:87:7A:22:49:5D:0B:46:33:0A:02:47:A4:51:D3:6A:6A:87
Authority key identifier: 74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7
Certificate issuer:       /CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
Certificate serial:       019C427D3EE40FBC9175FBAB8BB42060BDBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
Manifest number:          02C6
Signing time:             Mon 09 Feb 2026 13:00:30 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:30 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:30 +0000
Files and hashes:         1: dJm8fW4g9ytAmz-7qsGDSAyekNc.crl (hash: kGwwLca9raClxXfDwOChItXP3xrxxTeVja1PuSsVMJY=)
                          2: p4IcGr2Kbk3YpLFbWxqrp2GGq3I.roa (hash: zic93FYpv4JmN5qugD4sl1BP2AiTBmHYPCAXafwINy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:3e:e4:0f:bc:91:75:fb:ab:8b:b4:20:60:bd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7499bc7d6e20f72b409b3fbbaac183480c9e90d7
        Validity
            Not Before: Feb  9 13:00:30 2026 GMT
            Not After : Feb 10 13:00:30 2026 GMT
        Subject: CN=9eaa4f877a22495d0b46330a0247a451d36a6a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:88:ed:0a:c0:4e:1c:95:0c:52:f6:9f:7a:
                    cf:53:17:3f:b5:f1:ae:46:74:a5:99:ee:ec:42:bd:
                    5a:95:5c:53:a8:5d:e3:3b:4d:17:09:ec:bb:08:33:
                    45:4b:00:7f:69:ff:26:87:3f:fd:7a:33:99:ec:96:
                    62:d0:9b:29:f1:11:7f:c4:85:6f:70:3d:ce:b8:dc:
                    a4:79:c3:0c:24:f9:13:62:0c:d3:c1:36:7e:3a:7b:
                    0c:87:02:fa:c3:ee:9c:86:ef:66:4a:77:8e:84:41:
                    23:0d:37:51:17:84:e7:fb:de:d7:02:21:0e:2b:4f:
                    55:26:07:36:e1:8d:87:6a:26:7f:f5:59:f4:79:12:
                    01:8a:bf:c0:56:9a:5f:ec:58:02:56:5f:be:de:56:
                    aa:f9:d7:0f:17:9a:f8:a3:c6:fe:5c:e2:b6:45:ce:
                    5a:a8:f9:69:c1:1c:41:a6:9b:7f:d5:0c:14:1e:52:
                    78:d2:50:5c:40:08:04:47:90:9e:99:32:6c:c4:e6:
                    13:4e:54:69:c4:3e:91:28:17:d2:49:8a:f3:5a:a8:
                    23:86:e9:52:7d:18:24:5f:a3:fc:07:e6:bb:78:60:
                    08:d4:49:49:d5:43:24:d4:68:13:59:e8:d3:c0:4a:
                    7b:d0:19:99:31:7f:f0:7e:8e:52:b9:2c:78:cb:10:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:4F:87:7A:22:49:5D:0B:46:33:0A:02:47:A4:51:D3:6A:6A:87
            X509v3 Authority Key Identifier:
                keyid:74:99:BC:7D:6E:20:F7:2B:40:9B:3F:BB:AA:C1:83:48:0C:9E:90:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJm8fW4g9ytAmz-7qsGDSAyekNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c856db-e44c-46f3-9af3-c6dbb59afb4b/1/dJm8fW4g9ytAmz-7qsGDSAyekNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:33:dd:1f:6e:c4:9f:f8:38:00:15:7b:8c:ae:68:93:d7:
         13:49:85:54:c0:8a:86:0a:06:71:20:6d:a8:67:a3:7f:c5:03:
         7d:f3:70:57:95:82:ee:c4:18:8d:37:0b:38:e4:36:8b:7b:4f:
         50:f9:93:8f:7f:3e:69:65:0e:a3:e0:23:86:51:4e:fa:9e:af:
         37:ea:6a:b4:e4:f8:a0:07:63:a5:09:dc:69:c3:37:17:2c:0c:
         b7:4e:10:e8:2d:c4:4f:3e:92:f0:21:1f:2d:43:1a:5e:f1:6e:
         b2:b8:86:f5:19:e9:48:ff:b0:8f:bb:94:5d:fa:24:15:70:8d:
         77:38:57:e1:86:a2:5d:80:e1:42:87:38:94:38:b1:52:ed:30:
         41:d4:dd:4b:4c:9e:e3:26:39:4a:7b:f6:a9:a7:02:99:55:c5:
         d2:aa:bf:a4:ce:f9:f6:be:9c:d2:2c:b6:3c:39:73:22:78:56:
         29:f8:f1:3b:18:a2:b1:2e:0b:43:c9:75:54:8a:c6:79:ac:2f:
         c3:75:72:89:1d:d1:95:4d:61:dc:43:2b:35:93:98:ad:f7:1d:
         98:f3:4c:bf:31:77:ca:63:88:59:c8:f8:52:4e:da:ba:92:50:
         20:24:19:25:43:67:28:5f:55:7b:bf:48:ec:95:e1:93:a2:e7:
         47:6b:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:55 2026 by rpki-client