This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File:                     DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier:          E9MWdoEt5ZVkQ5p0Df6J8VsgDuhs0j/4gc/s1GFvyCg=
Subject key identifier:   AB:7F:3F:1B:EC:70:D0:AD:1D:56:01:33:04:0D:7B:E0:17:9C:69:EA
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer:       /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial:       019C43225451C2451FE83B70ACFEAA0B4966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 16:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:49 +0000
Files and hashes:         1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: +Xx6qCz4qH45Y+YHn+L0h1cGO7nGl4wZJH+PUGcBfmQ=)
                          2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:54:51:c2:45:1f:e8:3b:70:ac:fe:aa:0b:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
        Validity
            Not Before: Feb  9 16:00:49 2026 GMT
            Not After : Feb 10 16:00:49 2026 GMT
        Subject: CN=ab7f3f1bec70d0ad1d560133040d7be0179c69ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:ee:82:3e:bb:2f:46:ff:38:2a:08:c8:2c:
                    1b:50:26:83:03:36:4c:77:27:7a:26:da:97:63:14:
                    be:38:24:e9:9e:88:69:61:9e:35:31:bd:f5:ea:0f:
                    c5:f6:26:5e:a6:3e:07:07:51:29:eb:d2:04:c5:95:
                    23:af:f6:ba:f3:0a:a5:2b:87:5c:c0:94:e4:88:f9:
                    30:83:62:40:56:3c:de:74:df:36:c6:f2:77:87:8a:
                    a9:55:45:16:b1:10:21:68:0d:a5:6f:8d:aa:45:65:
                    21:8a:5f:05:f1:0d:a2:88:ca:59:c4:ee:36:b8:b7:
                    54:67:26:67:1c:b6:70:03:d8:17:8c:bf:e0:9f:66:
                    8e:6d:c2:89:6a:4c:8f:96:85:09:be:c5:41:da:bd:
                    fe:f7:17:3f:ca:a5:f7:5e:97:30:52:6f:2c:97:16:
                    62:9c:b2:f2:1b:73:39:3a:47:18:83:64:4a:1c:27:
                    cc:75:4d:e0:f6:ad:5b:f9:a9:6c:d9:46:24:be:dc:
                    56:91:cb:d9:86:24:10:72:4e:f6:79:f9:ec:c4:45:
                    17:b8:d6:1c:22:d3:36:79:59:58:f7:d0:25:4a:5a:
                    6e:0e:4d:ec:a1:07:d7:c2:6d:46:d7:c9:82:c6:1e:
                    55:c8:36:c1:7b:0f:40:74:39:15:5e:20:df:2a:0d:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7F:3F:1B:EC:70:D0:AD:1D:56:01:33:04:0D:7B:E0:17:9C:69:EA
            X509v3 Authority Key Identifier:
                keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:45:11:c9:de:5a:f7:c6:53:03:98:c5:2d:96:17:69:1c:
         57:71:63:ec:5b:8e:66:10:fa:29:b7:94:7a:fc:a6:f7:56:bb:
         3d:a9:72:fb:eb:f5:b2:7f:30:8c:54:45:53:61:e9:a1:14:07:
         60:2b:f8:e3:34:73:19:65:db:b0:4c:ac:cb:0f:ba:ee:e8:e2:
         8d:43:db:30:fd:d3:90:0d:c6:50:d7:1d:72:f3:72:f6:99:4f:
         af:f4:a9:c0:21:b3:d6:88:d8:c5:2a:1f:e6:49:d9:5a:9b:57:
         e2:df:92:49:5e:d9:d7:7a:e1:a1:a1:8a:37:9f:6a:1c:a6:16:
         45:1d:39:74:a1:f3:b8:b2:9d:98:68:66:a7:93:61:8f:95:be:
         46:97:03:f6:b5:ef:3d:47:72:54:62:9f:6c:0f:37:ca:f0:70:
         ad:3f:39:86:50:ef:6b:41:75:76:e0:cd:b7:34:fb:59:30:1d:
         78:cf:4e:19:2a:00:44:a9:eb:a5:85:53:04:fe:a8:f8:72:39:
         67:4f:d0:45:ef:2f:30:d7:71:fe:af:46:67:a6:17:af:25:64:
         87:16:b9:21:b2:18:04:8e:0c:f7:11:2d:6a:00:9a:36:8b:a9:
         9e:42:4d:9d:5e:c0:e4:3b:61:ff:a1:e5:0f:6e:09:14:58:5b:
         f2:ad:52:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIlRRwkUf6DtwrP6qC0lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYzgxMjg0OTFkYjEzMmNjZmNkODJhZGU3MDBkZWIzMDZi
MjE2MWEwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD
EyhhYjdmM2YxYmVjNzBkMGFkMWQ1NjAxMzMwNDBkN2JlMDE3OWM2OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtjugj67L0b/OCoIyCwbUCaDAzZM
dyd6JtqXYxS+OCTpnohpYZ41Mb316g/F9iZepj4HB1Ep69IExZUjr/a68wqlK4dc
wJTkiPkwg2JAVjzedN82xvJ3h4qpVUUWsRAhaA2lb42qRWUhil8F8Q2iiMpZxO42
uLdUZyZnHLZwA9gXjL/gn2aObcKJakyPloUJvsVB2r3+9xc/yqX3XpcwUm8slxZi
nLLyG3M5OkcYg2RKHCfMdU3g9q1b+als2UYkvtxWkcvZhiQQck72efnsxEUXuNYc
ItM2eVlY99AlSlpuDk3soQfXwm1G18mCxh5VyDbBew9AdDkVXiDfKg2OoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt/PxvscNCtHVYBMwQNe+AXnGnqMB8GA1UdIwQY
MBaAFAzIEoSR2xMsz82CrecA3rMGshYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAt
ZDU5MTA4YjU3MjE0LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYzNmNTMtMWJhYi00ZDMyLTgzODAtZDU5MTA4YjU3MjE0
LzEvRE1nU2hKSGJFeXpQellLdDV3RGVzd2F5RmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzJFEcne
WvfGUwOYxS2WF2kcV3Fj7FuOZhD6KbeUevym91a7Paly++v1sn8wjFRFU2HpoRQH
YCv44zRzGWXbsEysyw+67ujijUPbMP3TkA3GUNcdcvNy9plPr/SpwCGz1ojYxSof
5knZWptX4t+SSV7Z13rhoaGKN59qHKYWRR05dKHzuLKdmGhmp5Nhj5W+RpcD9rXv
PUdyVGKfbA83yvBwrT85hlDva0F1duDNtzT7WTAdeM9OGSoARKnrpYVTBP6o+HI5
Z0/QRe8vMNdx/q9GZ6YXryVkhxa5IbIYBI4M9xEtagCaNoupnkJNnV7A5Dth/6Hl
D24JFFhb8q1SAw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:32 2026 by rpki-client