This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File:                     dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier:          K3ZYMRa30hxsVw4IQfk2PlW/pFMh9p1NzbcsSqUSVs0=
Subject key identifier:   C9:2A:1A:1E:79:2F:77:76:56:37:DD:A9:29:B1:E7:B5:3E:30:26:2B
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer:       /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial:       019C41A16F02B9D502BD4EC2C499E24A60AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number:          1394
Signing time:             Mon 09 Feb 2026 09:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:24 +0000
Files and hashes:         1: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: 52dJan3iSDTuulojVFho2XDty94Z3G7r7QNq0TS61ZI=)
                          2: pyuMnNg45Imlk2H0jl_EMiwNCJY.roa (hash: Du2wmMU/s9sp+p6yThJQ53vWQyfYeVO+yB5tdkmnkw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:6f:02:b9:d5:02:bd:4e:c2:c4:99:e2:4a:60:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
        Validity
            Not Before: Feb  9 09:00:24 2026 GMT
            Not After : Feb 10 09:00:24 2026 GMT
        Subject: CN=c92a1a1e792f77765637dda929b1e7b53e30262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:25:58:83:68:3b:64:20:61:7e:0c:7e:6b:
                    d3:67:f3:bf:69:9a:3f:db:34:a4:97:05:86:74:60:
                    5e:da:77:a7:06:7c:79:05:da:5a:ec:25:ee:7f:f3:
                    79:78:68:ea:10:37:60:5b:b2:bd:cf:02:16:dd:e9:
                    b4:d6:c5:40:96:6b:de:8e:db:56:71:8c:26:f3:10:
                    bf:cf:d6:fa:24:af:4f:52:d4:d4:12:b8:b0:13:4f:
                    25:df:60:82:b8:b5:51:eb:11:19:0a:67:ec:24:f7:
                    46:ea:2f:b2:bb:4d:a4:a1:9a:8f:6d:58:40:ec:76:
                    5c:13:93:4c:28:50:4a:6b:02:3c:35:a8:92:18:d8:
                    48:8f:62:08:f6:a4:15:d0:f6:0a:55:2f:b6:8e:16:
                    90:bf:66:da:2f:08:95:e2:de:b0:39:42:c7:df:10:
                    40:84:dd:f7:f2:c2:83:3c:ce:91:83:d3:83:00:8b:
                    bb:07:07:9c:9c:d9:19:bd:07:56:b1:de:ca:70:10:
                    fb:3b:50:c4:c1:84:6f:86:1b:70:95:99:9d:6b:ff:
                    80:84:a8:ef:af:97:a2:ea:72:79:39:16:38:13:26:
                    59:28:f3:ba:f9:f7:1a:e5:03:47:8c:c2:8e:f4:64:
                    d8:55:ed:a4:72:e1:cd:e9:b3:c3:a6:88:00:0e:39:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:1A:1E:79:2F:77:76:56:37:DD:A9:29:B1:E7:B5:3E:30:26:2B
            X509v3 Authority Key Identifier:
                keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:bf:e9:13:f3:da:4d:3b:79:d7:4e:96:01:10:63:f4:43:
         a0:5f:6b:fc:b6:7d:f9:01:fe:39:49:a4:3d:ab:a5:e7:c2:17:
         94:6c:ab:b7:7f:7c:90:16:8d:de:e4:60:a8:44:e0:1a:b5:02:
         f3:59:30:5e:cc:e9:1f:f6:3b:3b:90:62:10:db:4e:d3:a4:aa:
         f3:23:f4:d5:51:74:a9:3b:f5:c5:b6:6c:ea:89:ae:c3:50:49:
         a6:85:7d:1d:2d:fe:ad:63:55:55:a3:89:c9:2a:c8:83:e4:aa:
         bf:e7:75:d1:e5:48:8c:49:0c:25:e6:2e:90:df:5c:7f:6d:d3:
         fd:57:be:43:35:b8:aa:51:a8:f3:e2:8d:2a:2e:60:a3:32:e5:
         04:f4:73:99:9d:ac:d2:ce:6a:36:c7:0c:fb:73:df:0a:c8:e5:
         e3:71:05:c6:70:4d:cb:8c:d5:37:b9:32:79:d2:ec:8e:53:c6:
         d9:de:8b:d4:df:d3:c0:67:0d:01:02:5e:fb:b4:69:15:da:60:
         a0:7d:1c:35:0b:8a:4f:00:26:04:49:83:b6:11:34:0b:4e:3c:
         1c:b2:f2:d3:9a:9b:83:b8:bb:5f:8c:08:b3:ed:05:f1:20:fe:
         9e:a6:06:3d:79:80:8b:b5:1d:9d:89:df:dc:41:59:f7:4a:c1:
         c6:93:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:25 2026 by rpki-client