This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          iG9dRYdv3UXf17+8ohIIGnA6cMWrV7mN/6cqcJCB51g=
Subject key identifier:   4B:8D:D5:FE:E2:5D:26:7E:9C:9B:FC:7C:BE:5E:B4:85:FD:53:74:5B
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019C427D11E32456227CB0BBF4E67CC58D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          0A37
Signing time:             Mon 09 Feb 2026 13:00:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:18 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: EJZO1XvhrG+Dyunuwt61qcoaHMP61yYvWKDioU1xyCE=)
                          2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:11:e3:24:56:22:7c:b0:bb:f4:e6:7c:c5:8d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Feb  9 13:00:18 2026 GMT
            Not After : Feb 10 13:00:18 2026 GMT
        Subject: CN=4b8dd5fee25d267e9c9bfc7cbe5eb485fd53745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:6e:9f:21:40:15:80:24:fa:96:67:8e:f6:
                    50:f3:7e:4c:d0:ad:4d:2e:50:04:b6:42:91:7e:83:
                    fc:16:84:f0:37:13:a3:ba:e9:46:97:32:c4:14:a3:
                    43:75:11:12:74:e7:86:1d:db:af:72:ee:2c:df:60:
                    70:7a:92:29:9f:b0:9b:fd:6a:e6:42:70:9b:f3:04:
                    40:51:b7:00:5f:04:4a:5d:79:b6:61:7a:75:ba:3b:
                    17:5e:68:d5:96:4d:f0:f9:35:18:dc:b9:0b:e0:88:
                    ee:c3:20:2a:60:56:81:73:c5:08:04:af:d8:2c:e3:
                    f7:0b:47:cb:5a:f4:da:19:8a:82:2d:f7:7c:1c:49:
                    12:78:00:5c:73:13:4d:21:6f:fb:47:b3:f0:a9:97:
                    dd:9c:b3:aa:44:db:7b:bd:97:3e:71:66:a3:2e:f8:
                    87:76:82:f2:6d:c8:44:17:24:22:ea:25:cc:e9:24:
                    0d:8e:69:ea:1f:32:50:58:00:4d:2d:9e:9a:0d:25:
                    51:48:fc:2b:a3:9e:8e:c2:2d:7c:7e:82:51:3f:8a:
                    26:b5:68:ba:89:76:3a:05:56:16:11:27:ec:1b:33:
                    22:27:39:70:69:e0:db:aa:94:dc:0e:9b:27:42:50:
                    44:80:d5:28:db:0e:fb:92:b3:76:dc:6b:60:f3:99:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:D5:FE:E2:5D:26:7E:9C:9B:FC:7C:BE:5E:B4:85:FD:53:74:5B
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:37:a2:92:ed:6f:92:1f:cd:58:05:e9:a9:93:a9:34:35:
         80:64:ef:4b:74:84:0a:3f:1f:24:8b:82:c8:1a:4a:6f:53:a5:
         3d:1c:30:cf:1c:c7:38:7c:ff:c2:72:04:17:ab:db:a6:7a:06:
         d1:7d:90:f4:98:af:92:0d:5d:6e:d7:41:fe:c5:54:18:9d:7d:
         4f:bf:c3:24:2d:e3:5a:8f:3f:62:8d:7f:56:e0:8c:e8:ef:ec:
         49:74:71:d0:96:82:fa:cd:1b:7c:8d:29:8a:13:59:67:18:7e:
         6a:72:13:df:f2:a5:bc:83:76:db:a7:45:29:c7:2f:b4:e6:44:
         66:ea:6a:b7:46:1c:36:f3:63:da:70:b4:c4:bb:2f:dd:17:13:
         da:ee:4a:be:61:82:b5:53:b3:ad:52:d6:3f:4d:85:b4:43:14:
         b6:60:26:66:3d:d5:16:4f:fb:fa:d1:26:fe:b2:54:e4:12:94:
         37:ee:54:41:0b:d8:97:48:97:01:43:6d:23:77:da:58:68:60:
         02:fc:14:4c:3b:a5:65:fb:60:7d:ea:b3:9d:1a:c2:c3:7f:c7:
         76:b2:54:17:8a:5a:d1:a2:6a:56:be:a7:be:c4:3d:72:6c:76:
         5a:c0:4e:80:1b:d7:aa:50:de:9b:6f:10:36:00:6d:fb:86:3e:
         ff:01:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:51 2026 by rpki-client