This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File:                     dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier:          X3lSLaxF8yZ/hvLfog4yNzVt2lrsyLlsUWwEcqRdWr4=
Subject key identifier:   62:1C:67:77:AA:18:84:39:57:19:7E:E2:A4:43:4C:ED:AB:4C:DE:35
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer:       /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial:       019C43901FA71C198D7CCD35FEF9A7646F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number:          17DF
Signing time:             Mon 09 Feb 2026 18:00:44 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:44 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:44 +0000
Files and hashes:         1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
                          2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: 0PgCTWy7CHWd5Yeu8Zgf6aBRrtU6g78X9EikwMbhEB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:1f:a7:1c:19:8d:7c:cd:35:fe:f9:a7:64:6f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
        Validity
            Not Before: Feb  9 18:00:44 2026 GMT
            Not After : Feb 10 18:00:44 2026 GMT
        Subject: CN=621c6777aa18843957197ee2a4434cedab4cde35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:14:9b:28:06:ae:b5:72:74:90:51:5d:51:
                    57:73:b2:f4:cc:16:60:ff:43:73:c4:f2:b6:27:9c:
                    ac:4b:f8:15:09:dd:8f:15:a1:2d:9d:da:d2:69:8e:
                    bb:37:ba:f8:b8:20:4f:d6:d3:9e:4b:de:7e:0e:74:
                    46:48:61:fa:98:8b:ef:b3:12:9b:5c:04:06:05:1e:
                    68:4e:96:a2:32:b2:ca:c9:2b:8a:67:26:ce:61:d8:
                    fb:2f:75:f1:63:58:6c:55:a6:e2:61:5e:fc:b7:46:
                    41:a0:dc:a9:f3:d3:3b:00:05:66:a9:5a:60:9c:91:
                    dd:6c:b3:a9:cb:34:8c:a3:ce:71:c3:07:f4:c6:fc:
                    b6:68:ed:a4:af:fe:7b:2e:f6:92:c9:c1:e3:97:72:
                    33:8a:54:92:a7:e2:44:60:59:78:90:3b:7c:34:61:
                    3d:4d:f9:61:99:df:17:2c:72:d2:aa:7f:50:e3:32:
                    22:91:09:3e:a1:24:f0:d4:df:8e:46:5a:fa:77:fb:
                    de:0f:76:80:f8:7a:75:80:48:9a:c9:ca:cf:1e:4d:
                    8d:cb:f3:98:bb:f0:fb:96:dd:b4:1c:33:5d:51:0c:
                    81:d4:7a:93:6c:8d:f4:29:13:09:f9:f1:a1:6f:da:
                    04:c4:f4:cf:5d:34:c3:ab:dc:54:e0:ec:9f:e2:fb:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1C:67:77:AA:18:84:39:57:19:7E:E2:A4:43:4C:ED:AB:4C:DE:35
            X509v3 Authority Key Identifier:
                keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:6a:34:3c:93:f6:8d:bb:21:9a:05:37:68:b5:13:30:75:
         49:be:e5:f5:e4:34:7c:40:68:a2:43:ae:eb:db:de:36:fd:13:
         7f:84:1f:0d:77:4f:e3:7c:27:e5:5e:34:ca:78:d5:5b:2d:93:
         e2:34:1d:0a:c6:c5:bc:4d:35:47:fc:00:78:4b:40:d0:54:e4:
         65:24:c8:f4:54:fe:38:66:f2:a3:18:73:fd:5b:b2:8b:ef:6f:
         b6:2b:2d:22:73:be:2c:b2:74:55:df:e7:86:a0:79:a6:4a:7b:
         bd:90:56:3f:9f:4d:d3:c6:55:79:44:a1:b2:7b:cc:c2:b0:d2:
         fa:ac:d8:a9:d7:5e:da:6f:f5:5b:c8:4d:f9:01:a5:25:d2:e1:
         21:4c:00:29:4b:a4:92:9c:bb:b7:57:1a:b2:fc:6d:29:8d:32:
         51:b3:20:c9:45:00:dd:c6:77:82:a2:db:10:30:53:49:89:f5:
         58:04:09:ea:aa:2e:ae:56:74:47:cb:28:7f:61:d0:11:a9:88:
         ed:89:6a:0d:a0:4b:cc:7c:c5:fd:ff:ee:57:1e:45:e4:e2:7a:
         db:cf:77:46:c3:55:dc:ac:9b:bf:b4:67:fe:13:3b:55:31:8d:
         14:37:ab:28:dd:b0:b5:b2:66:7c:91:79:c9:7d:fd:87:d0:c1:
         f5:1f:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:30 2026 by rpki-client