This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          hkhsP4pzSM6Cab/3h8XKW4lLp3218+Cpxr2VPNLA5Rs=
Subject key identifier:   8E:2C:27:B4:AC:EC:2B:AE:A7:B1:F5:1C:30:8E:69:08:06:3D:36:2A
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       019C43900734708BA0AD271AC8CCBAB2B2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          14C7
Signing time:             Mon 09 Feb 2026 18:00:38 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:38 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:38 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: HVYtBgkqONw22dRpjHugbBvW7qLjl673lRIAPUSkiE0=)
                          2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:07:34:70:8b:a0:ad:27:1a:c8:cc:ba:b2:b2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Feb  9 18:00:38 2026 GMT
            Not After : Feb 10 18:00:38 2026 GMT
        Subject: CN=8e2c27b4acec2baea7b1f51c308e6908063d362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:a6:2e:cf:e6:5b:85:f6:50:c5:20:7e:b3:
                    81:f3:a5:ca:56:db:4e:b9:e7:87:85:7e:a6:2e:00:
                    77:bc:67:1a:4a:a8:67:61:b0:df:db:e6:ed:77:f6:
                    f0:dc:5d:17:80:02:2b:c0:68:1f:17:8b:1e:59:5e:
                    71:88:6c:ee:bc:9b:e4:b5:cf:b7:12:bd:de:b5:b2:
                    05:ab:f3:00:61:3b:d5:cd:80:a3:73:d0:e7:81:ff:
                    39:d2:92:0b:de:62:c5:f7:95:af:23:96:e1:9e:76:
                    42:28:de:8a:5b:cb:c1:1a:61:a4:77:1c:2d:77:3f:
                    db:08:bb:c1:57:cd:c6:fc:88:33:92:b9:a1:f1:76:
                    ea:5c:3a:4d:c1:36:bd:1f:46:51:c7:a4:2d:2e:1e:
                    7c:e4:45:1c:14:7b:90:f7:63:6e:b6:82:96:96:d7:
                    bc:6c:42:59:1e:e5:f1:8b:3c:90:47:72:94:7a:23:
                    21:1f:e9:fc:7d:0e:35:d9:79:01:c6:a6:cb:27:3f:
                    85:44:44:bf:44:c8:a3:50:de:15:a9:f2:5a:20:3b:
                    e1:3b:26:89:a4:c6:3e:aa:26:91:ab:07:86:ce:3f:
                    8b:e6:b0:57:01:4c:76:57:5c:a7:d3:f7:32:2a:3d:
                    ca:46:29:6e:ae:90:5c:56:0b:d2:f9:3f:2c:b5:07:
                    2c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:27:B4:AC:EC:2B:AE:A7:B1:F5:1C:30:8E:69:08:06:3D:36:2A
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d8:6b:a3:7c:d8:f4:be:35:45:ac:31:03:1a:7a:75:94:0e:
         fa:c0:0e:72:d0:22:fd:20:c2:e0:67:39:50:e1:15:30:cc:49:
         ed:d2:e8:3b:89:1d:e9:2b:e7:8f:03:9d:ea:33:4d:a1:a7:11:
         17:15:02:0d:2c:61:30:13:35:bf:4e:4f:0e:ed:d3:aa:18:8d:
         fc:ad:d2:63:24:3c:60:2a:8c:4d:92:3a:00:d5:3b:a9:df:56:
         24:d2:00:1a:42:8d:c5:8e:fe:53:23:a3:72:98:d8:22:e9:c2:
         e2:92:58:3a:a1:b0:81:39:22:fa:d1:03:79:27:e7:04:6b:3f:
         cb:75:40:9f:ca:d8:db:b9:3b:49:ab:ad:f1:ad:32:24:73:7f:
         30:85:f0:7e:4e:b1:ba:de:be:1f:0f:9a:46:2c:44:a5:77:e6:
         28:95:6a:53:a8:51:29:ac:51:fd:86:2b:f0:66:c3:46:cb:d9:
         56:7d:ad:a9:ce:2a:4d:a2:ff:e7:d4:76:02:c2:cc:0c:36:c9:
         58:f7:6d:d0:e4:1e:07:fb:14:65:65:53:6e:04:88:2b:9c:56:
         c6:79:be:4e:29:8d:eb:69:5e:5b:18:87:44:e8:8f:0a:15:8d:
         26:61:7b:5f:34:98:17:a1:76:57:88:94:cf:85:40:d3:d4:e6:
         b8:a1:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:20 2026 by rpki-client