This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File:                     dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier:          uX+JcGp13LMko6k+oawpKBTR/qn3D9dTVHbn12aFChE=
Subject key identifier:   4C:F3:AA:CD:C2:49:16:EF:C0:D5:B7:F4:51:7C:CA:65:FD:0F:2D:05
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer:       /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial:       019C438FAB5CD2542E0EFF79C93B2EB4AD35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number:          0BF6
Signing time:             Mon 09 Feb 2026 18:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:14 +0000
Files and hashes:         1: UiW9TcEusiItMBq7nV2nhZZMmD4.roa (hash: QFbJs2g7PxyJWfYn1SH51WxmFD2sPMhhQe/rD/6hstw=)
                          2: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: CoQ4te/Ht/jZcu5u1cP87LksZZi8u++xXIhm5OdIy+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:ab:5c:d2:54:2e:0e:ff:79:c9:3b:2e:b4:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
        Validity
            Not Before: Feb  9 18:00:14 2026 GMT
            Not After : Feb 10 18:00:14 2026 GMT
        Subject: CN=4cf3aacdc24916efc0d5b7f4517cca65fd0f2d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f8:d9:ed:76:f9:fc:24:ca:d0:68:7a:f9:41:
                    ca:22:0e:af:78:b6:89:c9:f7:2c:db:cf:3d:6e:05:
                    c0:ae:bc:b8:75:38:56:73:03:a5:6e:03:15:7a:2d:
                    24:60:de:4b:00:8f:ee:6b:8c:1d:ae:21:63:cc:13:
                    a4:bc:f6:eb:f5:91:49:28:4a:4f:84:04:e0:c5:4d:
                    6a:4c:85:36:51:1d:cc:fb:36:7d:ad:09:3e:40:a9:
                    ef:3b:db:73:1e:6b:47:ef:fe:c2:bd:c5:d8:78:7b:
                    b8:1e:9a:2b:60:e7:b0:6d:a4:90:e0:3c:5e:8b:63:
                    51:4b:ee:33:f5:69:7a:40:13:f4:ef:c3:ea:e5:58:
                    c7:8c:17:37:ff:61:92:01:5d:df:ee:02:d7:ab:5c:
                    0f:42:bf:d7:64:33:ca:81:2d:ad:43:4e:3d:50:53:
                    57:6a:11:ac:9f:2b:8a:76:ef:22:08:54:75:b0:80:
                    ba:28:9f:7c:b0:75:a6:d7:ee:7a:2a:fa:53:1a:33:
                    e0:e8:62:82:8c:b0:ca:e6:f9:83:ac:d1:8f:cb:e7:
                    4d:26:ee:95:53:ca:aa:12:11:77:c0:c1:4c:9c:32:
                    0b:48:ed:f7:9e:80:ee:2f:96:2e:2e:a4:5e:f6:6e:
                    28:8b:d8:7c:86:67:4d:c9:a4:7a:1c:8b:98:52:be:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F3:AA:CD:C2:49:16:EF:C0:D5:B7:F4:51:7C:CA:65:FD:0F:2D:05
            X509v3 Authority Key Identifier:
                keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:8b:0b:26:8f:be:3c:23:56:bf:92:58:42:17:b3:68:0d:
         f3:53:3b:28:a8:64:02:a1:6c:9c:fb:21:a6:a5:c3:84:e6:f9:
         14:97:55:c1:08:a3:b6:24:34:e7:16:5c:ac:a5:0d:99:e8:a1:
         76:7e:d3:cb:12:d5:d4:d9:e5:a2:ec:58:72:d5:df:65:ba:c7:
         44:dd:65:aa:e6:f4:7d:fa:34:32:52:b2:9a:f4:72:48:b5:de:
         69:85:21:37:4c:67:a4:07:ce:02:4f:22:26:ba:51:2c:a2:d2:
         44:bc:8a:c4:eb:7e:4d:1a:41:11:a5:52:01:45:f2:6d:e6:45:
         bd:de:7d:3a:fd:9c:2f:cf:86:75:9e:d1:f1:4f:c0:30:f3:84:
         51:4d:1d:0d:dc:50:c3:23:f0:30:ce:ac:70:12:4b:2b:04:36:
         ed:18:22:2a:eb:bf:5a:5b:ab:37:20:20:72:01:28:55:e1:47:
         d3:0e:21:43:5c:fd:f9:25:0c:b1:0b:26:a4:de:03:81:b3:8f:
         1d:5e:b2:44:7b:23:30:b2:c3:28:16:b8:6b:83:d0:b3:03:fb:
         d5:48:a4:84:9a:eb:81:1c:6c:c3:ca:35:9e:9b:f7:64:d4:e1:
         99:02:57:10:8c:68:65:15:d6:5d:78:a0:45:54:79:9d:7c:fd:
         76:1e:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:47 2026 by rpki-client