This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          +zI4DV7Ypu/oepVPqg0WV11o5AdTlTyRo04EGcOZljI=
Subject key identifier:   21:D9:91:BA:98:09:12:72:3D:C2:1C:21:12:0C:3E:AF:82:44:E0:AB
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       019C43FDC24B4A8287F59AFF42E576075F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 20:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:29 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: wriM1LFl5ThRr0lsj0eqAflzGMuqt1w5UAt/nCD6yH8=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:c2:4b:4a:82:87:f5:9a:ff:42:e5:76:07:5f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Feb  9 20:00:29 2026 GMT
            Not After : Feb 10 20:00:29 2026 GMT
        Subject: CN=21d991ba980912723dc21c21120c3eaf8244e0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:b9:18:fd:43:b8:b3:ed:09:7a:eb:c0:be:
                    8c:0c:e2:dc:cb:6b:79:2c:04:a1:89:e1:f8:08:7a:
                    19:59:9b:f7:2d:f2:67:12:b5:71:04:ae:9d:cb:a1:
                    f2:36:1e:55:eb:80:35:1c:6f:6a:7e:a9:f8:95:df:
                    5e:b1:76:a2:ac:54:7f:c0:45:cc:49:90:1e:c0:c2:
                    17:98:d6:e7:d3:47:c5:94:87:cd:bd:65:a0:45:18:
                    96:61:7e:02:37:3d:5f:03:c4:9c:e3:25:f7:3d:71:
                    63:86:36:74:2f:26:8c:28:3c:15:98:2b:0b:9d:6f:
                    cc:dc:da:81:06:69:58:3f:50:03:4d:41:ab:c8:7f:
                    2b:28:02:3c:fb:b3:bf:88:c8:17:7f:bf:7c:75:2c:
                    9c:52:40:04:f5:0b:e2:a8:1f:f5:70:12:ac:36:f4:
                    3c:03:d7:bf:c1:19:70:4f:57:57:ce:0e:79:01:71:
                    4b:d6:16:c3:24:08:e4:29:46:00:97:0c:e7:25:15:
                    18:0d:ad:0a:be:fb:6d:70:91:6c:ad:ba:53:a6:08:
                    0b:9e:32:9b:fd:ac:1b:28:48:47:29:8d:9a:dd:c7:
                    d6:35:98:1c:b2:83:a3:a5:38:4f:30:b1:36:05:df:
                    c5:1f:79:22:12:89:51:d9:3f:06:1b:1f:fe:93:ef:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:91:BA:98:09:12:72:3D:C2:1C:21:12:0C:3E:AF:82:44:E0:AB
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:94:43:a5:1f:b7:7e:b6:f1:b7:91:bb:c7:de:84:ce:7e:
         28:2b:0b:44:78:1f:1e:e5:d7:00:df:d3:05:7d:4c:e3:1f:89:
         b1:26:e7:b6:2e:df:21:42:b8:e9:ba:4a:10:c2:6f:fe:1c:cf:
         9e:fa:c7:12:26:3e:97:47:7e:28:10:02:be:6e:95:44:b7:a8:
         47:d7:51:26:6c:fc:9e:e7:be:f8:c0:49:2f:fd:c2:21:a3:23:
         f2:06:0c:45:ad:86:b1:d3:4e:6b:c9:a6:b6:27:b5:5a:a9:e0:
         e3:08:1c:54:a3:15:a7:e7:44:c3:8f:99:be:3e:4d:11:62:88:
         bc:ea:7f:bb:e4:f3:03:a9:90:da:d5:ed:c1:df:21:41:a3:2a:
         19:eb:6a:46:0d:60:f7:b1:42:30:4e:18:4f:88:01:c7:c0:3b:
         42:9f:dc:f9:a5:c1:78:e1:c5:17:86:c1:a4:09:4c:68:2b:bc:
         34:8c:78:f3:75:27:f9:9a:36:aa:0a:0e:df:c1:98:b5:f1:e4:
         19:5b:be:82:7a:66:1f:6b:d7:b4:eb:38:91:67:b7:4d:3b:1f:
         f6:11:ce:85:6b:1e:d1:a7:4d:ab:fd:e8:47:53:57:4e:36:02:
         77:ee:19:f1:6f:31:ac:c5:71:2c:8b:0d:fa:31:b4:c7:c4:e9:
         d4:87:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:26 2026 by rpki-client