This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          AhTPSeDpExOx7m9aNPrNw2kJixPpSe7pEmmRD/qcU6c=
Subject key identifier:   D2:EC:D7:AF:DE:EB:39:73:E7:26:56:84:F8:E7:92:EE:DF:43:1D:AF
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       019C43FD874D9B9B8B97120357E4FB732758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          12B4
Signing time:             Mon 09 Feb 2026 20:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:14 +0000
Files and hashes:         1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
                          2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
                          3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: lSGAjg9qRzUE0g+BHzIjZO4/rxcl3ZHoOfKlJG1OFbk=)
                          4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:87:4d:9b:9b:8b:97:12:03:57:e4:fb:73:27:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Feb  9 20:00:14 2026 GMT
            Not After : Feb 10 20:00:14 2026 GMT
        Subject: CN=d2ecd7afdeeb3973e7265684f8e792eedf431daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:d4:20:0d:ca:9c:a4:c3:c1:50:7c:fd:1f:
                    63:81:db:f9:74:4f:b5:59:84:b5:ca:1f:25:a7:d2:
                    cb:e2:c5:77:fd:ce:69:9d:6c:d6:66:43:d2:73:32:
                    3b:c1:98:d6:36:64:54:c2:94:00:39:e3:64:03:f8:
                    ff:54:c3:4b:31:46:cc:8a:2a:16:ed:bc:b2:e7:28:
                    7c:73:b4:67:43:75:34:43:7a:cf:92:7b:25:b1:39:
                    a1:27:79:fc:65:70:38:09:3e:26:ff:a6:65:f9:13:
                    d0:32:1a:ef:f7:e4:53:e7:a9:00:fd:a0:a7:d2:f8:
                    56:62:c8:58:4b:06:11:e1:4f:31:2b:f6:20:1c:a1:
                    52:0c:15:9e:0e:73:ee:99:37:d2:c8:95:64:87:65:
                    07:71:0b:7e:65:5b:6d:2c:fe:08:49:f0:04:8b:94:
                    43:a9:6f:76:42:20:01:02:0f:02:48:7f:3c:a8:98:
                    e4:eb:fe:8c:bd:ea:c6:d7:95:38:9e:f4:f0:a6:7c:
                    f9:64:ca:17:c8:c9:62:c7:3e:10:32:a6:fc:4f:d7:
                    c7:6a:22:a1:b3:a8:9d:4b:c8:cb:a7:fc:9a:ef:24:
                    43:ec:49:c8:7e:5b:6b:22:12:54:25:ab:2c:1d:c4:
                    91:e6:1f:fe:bd:99:b8:e9:0b:8b:1b:44:fa:6d:1c:
                    26:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:D7:AF:DE:EB:39:73:E7:26:56:84:F8:E7:92:EE:DF:43:1D:AF
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:0c:e4:e6:76:87:33:99:48:8b:38:2a:f9:f9:e6:78:d2:
         62:2d:c0:25:fc:17:67:97:2c:c8:df:fe:59:c5:06:f8:ad:41:
         50:74:e7:d8:da:5e:9e:ce:8d:57:14:c2:39:04:79:95:60:2c:
         12:5d:e4:75:19:a3:cf:52:6d:3e:78:4e:c6:0e:3f:0a:39:8f:
         15:ad:da:42:dc:9c:54:bf:aa:43:7f:df:ba:f0:8d:58:96:69:
         d0:f6:7c:23:98:db:f6:cc:e2:eb:3c:16:01:73:3b:78:c8:b6:
         65:7e:bc:ef:5b:52:01:85:3b:8f:12:7e:a3:10:29:d8:9d:92:
         1a:7d:17:36:3d:62:a1:67:c6:fd:c7:75:cb:df:ab:1b:6e:0c:
         40:dc:a6:da:37:3e:b6:3e:68:f5:89:0e:39:df:f0:61:4b:74:
         26:61:66:25:7e:51:38:ec:3d:ab:9a:ca:28:16:db:a8:ea:f5:
         2b:67:4c:af:61:ef:1f:99:d5:2d:30:bd:47:47:78:7b:f4:77:
         92:2a:e9:87:14:64:97:12:b6:c7:8b:ad:78:02:d1:c4:88:87:
         b8:0e:df:1f:99:61:6a:c8:bc:85:cf:54:09:11:d2:76:02:db:
         d5:48:ec:17:6c:a6:8e:e1:66:fd:8a:bf:96:0e:38:37:f5:1e:
         09:c9:cb:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/YdNm5uLlxIDV+T7cydYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjYwMjA5MjAwMDE0WhcNMjYwMjEwMjAwMDE0WjAzMTEwLwYDVQQD
EyhkMmVjZDdhZmRlZWIzOTczZTcyNjU2ODRmOGU3OTJlZWRmNDMxZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiizUIA3KnKTDwVB8/R9jgdv5dE+1
WYS1yh8lp9LL4sV3/c5pnWzWZkPSczI7wZjWNmRUwpQAOeNkA/j/VMNLMUbMiioW
7byy5yh8c7RnQ3U0Q3rPknslsTmhJ3n8ZXA4CT4m/6Zl+RPQMhrv9+RT56kA/aCn
0vhWYshYSwYR4U8xK/YgHKFSDBWeDnPumTfSyJVkh2UHcQt+ZVttLP4ISfAEi5RD
qW92QiABAg8CSH88qJjk6/6MverG15U4nvTwpnz5ZMoXyMlixz4QMqb8T9fHaiKh
s6idS8jLp/ya7yRD7EnIfltrIhJUJassHcSR5h/+vZm46QuLG0T6bRwmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLs16/e6zlz5yZWhPjnku7fQx2vMB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvIM5OZ2
hzOZSIs4Kvn55njSYi3AJfwXZ5csyN/+WcUG+K1BUHTn2Npens6NVxTCOQR5lWAs
El3kdRmjz1JtPnhOxg4/CjmPFa3aQtycVL+qQ3/fuvCNWJZp0PZ8I5jb9szi6zwW
AXM7eMi2ZX6871tSAYU7jxJ+oxAp2J2SGn0XNj1ioWfG/cd1y9+rG24MQNym2jc+
tj5o9YkOOd/wYUt0JmFmJX5ROOw9q5rKKBbbqOr1K2dMr2HvH5nVLTC9R0d4e/R3
kirphxRklxK2x4uteALRxIiHuA7fH5lhasi8hc9UCRHSdgLb1UjsF2ymjuFm/Yq/
lg44N/UeCcnL/g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:36 2026 by rpki-client