This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File:                     dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier:          k/0JX5/C0OjZAtg4newSwOKHw//iPP43sm0nNPBBfXs=
Subject key identifier:   8F:69:2E:D4:CE:40:9F:F0:F5:2D:9E:F8:B2:FB:E4:16:48:F5:EE:A1
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer:       /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial:       019C43227005EA2B1EE22703B5430E6093E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number:          0A82
Signing time:             Mon 09 Feb 2026 16:00:56 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:56 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:56 +0000
Files and hashes:         1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: o4PCQ4+JSo7kLT6fhUO+Ct5HqGyTffKyyvB5Mzstzc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:70:05:ea:2b:1e:e2:27:03:b5:43:0e:60:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
        Validity
            Not Before: Feb  9 16:00:56 2026 GMT
            Not After : Feb 10 16:00:56 2026 GMT
        Subject: CN=8f692ed4ce409ff0f52d9ef8b2fbe41648f5eea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:3a:97:eb:fa:2f:22:49:a5:e0:e5:11:cd:
                    bb:94:3e:f7:e0:78:ab:56:e9:e8:05:78:ea:6c:22:
                    56:d2:04:28:0d:45:55:e9:24:04:db:01:01:7f:63:
                    f8:c2:77:48:39:9d:b5:7b:ee:0b:ee:8e:1c:18:81:
                    0f:ca:1e:2e:03:5b:5b:c1:bd:30:64:2a:7d:6c:88:
                    98:4d:52:9c:d4:56:b7:18:b5:c8:5b:6d:ba:df:16:
                    f6:39:ba:2c:32:01:65:a9:9c:59:04:e7:f8:6f:1a:
                    48:b2:9c:6a:8f:1f:da:6d:15:53:a6:c7:2a:6f:3d:
                    c7:6b:d8:16:53:be:3c:df:17:3e:e8:53:27:b1:60:
                    7b:02:35:d7:39:7c:3d:38:64:f9:3f:9e:5b:a9:1f:
                    12:d3:4d:e3:f4:e3:a5:0e:a1:84:1b:c1:8f:a9:4e:
                    f6:5c:63:ce:5c:77:88:b4:87:72:a6:90:f7:27:af:
                    5c:29:38:39:71:e3:94:8a:42:13:26:61:30:61:97:
                    22:c5:c2:69:b8:f0:26:e1:24:08:d2:81:fa:ca:c5:
                    d5:90:97:86:33:82:ac:42:d2:28:20:fc:dd:a9:b0:
                    fd:9c:41:ba:88:aa:76:ee:ca:d8:cf:38:f1:1b:b7:
                    34:bd:8d:f9:f5:65:18:a8:ba:69:e8:c5:8a:bb:b6:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:2E:D4:CE:40:9F:F0:F5:2D:9E:F8:B2:FB:E4:16:48:F5:EE:A1
            X509v3 Authority Key Identifier:
                keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:67:b2:96:72:a4:66:f4:4a:1c:a8:62:c0:da:57:88:ea:ac:
         6a:13:e0:d1:0e:1f:ca:ef:db:55:92:91:63:ab:55:3a:d8:49:
         ae:9d:78:af:63:e3:31:ab:68:5c:01:e0:b2:e9:53:6e:97:1b:
         60:e5:56:82:ca:17:11:20:ba:66:01:0b:3e:b1:9c:d5:4a:b3:
         f8:5e:c4:63:26:84:da:28:d6:4e:8b:30:ac:28:11:84:82:04:
         ee:d1:a3:80:db:ab:b9:1d:5c:96:d8:bd:2d:5c:32:3d:00:fa:
         b0:9c:08:3d:a5:30:21:b7:e9:3f:eb:c0:10:40:f9:63:31:f9:
         48:5c:21:b7:0c:c9:e0:4e:ea:ab:07:de:99:c8:7b:9e:6b:1e:
         33:36:ea:d8:38:dd:42:84:45:7b:3d:87:51:27:93:4c:3b:73:
         ef:aa:1e:b7:ae:fd:b6:e1:5b:0b:06:f6:54:61:56:bb:66:22:
         16:79:9c:fc:84:58:71:f9:16:fd:af:4e:72:c7:5d:2a:e2:aa:
         b4:02:99:33:66:7e:67:65:b4:d9:15:c7:7b:00:55:39:47:e7:
         0a:a4:c7:50:c4:c7:c2:2e:a6:27:2a:0b:b1:88:04:6e:b2:0f:
         28:ba:e7:31:72:1c:ff:2d:b7:b3:f8:73:7c:37:f3:46:ad:e3:
         09:56:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:09 2026 by rpki-client