This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File:                     du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier:          N75wrU+t0KswgXjCTcGmVIZbErv6Nj5BUzSPe+hyT20=
Subject key identifier:   36:09:72:AF:D4:25:07:AB:FF:36:FE:04:8F:00:66:49:3F:7D:F7:99
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer:       /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial:       019C427DAF872DB4033F80E92180FCA366C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number:          1368
Signing time:             Mon 09 Feb 2026 13:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:59 +0000
Files and hashes:         1: _d8Zo_g7rmhKukVc2_yC6OHo_f8.roa (hash: W4kBrQ5vSikj88DUpuXxRFyq1wVLUOltrf0M4pqOt50=)
                          2: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: oJfV+HgnWFxEeJeFwVoOe6AbqNOSWJARtCDGEU4aRMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:af:87:2d:b4:03:3f:80:e9:21:80:fc:a3:66:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
        Validity
            Not Before: Feb  9 13:00:59 2026 GMT
            Not After : Feb 10 13:00:59 2026 GMT
        Subject: CN=360972afd42507abff36fe048f0066493f7df799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:dd:34:26:d8:a8:bd:5d:69:d4:b1:35:de:
                    45:2c:e6:01:84:75:e2:10:49:05:e4:d1:f5:5e:26:
                    e2:9c:60:e8:d6:36:cd:03:62:f6:b1:34:8a:31:97:
                    e0:24:c6:64:7a:8b:b2:08:6c:c4:8a:84:f4:45:82:
                    4d:0b:b8:0b:41:03:17:98:24:f3:31:c8:7f:35:e5:
                    fa:61:51:a9:43:0b:0d:29:af:b1:58:45:5a:3c:b6:
                    0b:fe:9e:81:93:21:cd:aa:78:49:a9:a5:e8:ef:14:
                    56:cb:60:f3:73:1c:2a:4f:43:e7:b9:91:ef:d2:b8:
                    d6:39:0c:90:9a:8d:d1:6e:97:1e:f3:f6:a5:81:a1:
                    08:5a:10:f9:c4:e9:da:10:b1:ce:63:c8:bb:68:46:
                    67:ca:b9:9b:aa:99:cd:93:21:3a:af:f2:30:99:61:
                    19:f0:bb:f1:f5:b3:d0:ae:35:d8:89:15:d6:e5:df:
                    bd:02:14:54:5f:d4:a6:b8:c3:20:b0:b6:92:ef:fc:
                    3c:2a:cf:a9:8c:6d:57:de:c8:31:fa:92:b2:f8:1c:
                    59:3e:18:3b:e9:2b:ea:76:49:6d:48:35:62:5a:6d:
                    00:0b:06:f1:3c:f4:23:d0:86:d6:d1:25:a7:7d:2f:
                    69:ea:f1:20:49:a3:cb:c2:0d:f8:29:43:e4:23:05:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:72:AF:D4:25:07:AB:FF:36:FE:04:8F:00:66:49:3F:7D:F7:99
            X509v3 Authority Key Identifier:
                keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:c5:44:a4:40:2f:10:a6:b2:02:6d:0a:70:e4:7c:02:c9:
         b9:4c:47:9f:5c:69:39:76:18:51:6a:e9:f4:17:ca:1d:0b:66:
         22:bd:06:be:13:eb:14:58:41:c7:56:aa:ad:e1:5d:b8:87:16:
         d6:d6:5c:f8:f8:a3:20:a8:77:8d:b6:c7:03:7a:d9:07:a8:ad:
         2b:17:14:5a:55:53:c8:27:eb:46:e1:a0:80:fa:8d:9b:1b:de:
         dd:be:22:87:7c:44:b6:b5:7f:81:c1:2a:a3:90:dd:61:31:8d:
         47:23:fa:e8:dd:b4:21:7c:f7:b9:9c:54:0e:0e:fd:6b:5f:83:
         4f:59:42:e1:9f:e7:05:09:19:b4:5d:04:39:3a:2b:8a:72:ef:
         43:d7:cc:45:6a:c5:89:04:b9:fd:4c:20:15:e6:55:de:df:c2:
         ac:7f:d9:1d:85:a1:04:89:fc:1d:52:c0:70:9e:61:3b:c9:bd:
         1e:23:93:ab:6e:60:bb:d6:89:75:54:9d:df:16:7f:d1:87:65:
         f9:c1:18:3b:ee:06:07:23:e5:2e:b5:81:a5:3d:68:ca:3c:88:
         f6:d6:51:17:61:b6:98:15:5c:ce:90:ed:f2:ac:3a:9b:7f:69:
         cc:95:89:11:a7:cf:07:29:d2:6f:32:33:37:5f:90:b9:65:1e:
         07:0b:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:54 2026 by rpki-client