This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          StEyehm7TWOqWaC1bOeWQOOWXiZvwhvQIRzqV6datY0=
Subject key identifier:   72:2C:8F:18:5A:EB:2E:B8:97:B7:BF:D1:B5:22:85:B7:CA:A2:3F:1B
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       019C42EB931A0DA569644D678E92C46A3A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          17E9
Signing time:             Mon 09 Feb 2026 15:01:00 +0000
Manifest this update:     Mon 09 Feb 2026 15:01:00 +0000
Manifest next update:     Tue 10 Feb 2026 15:01:00 +0000
Files and hashes:         1: 7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa (hash: EHK3o5AqxXjYT44qxa9/0h4L/zP53EV+yGtFIqeqjtQ=)
                          2: OthlpIKW7hUIchBLbCot_5hIJko.roa (hash: vgUvfjH6wz4Qgqu/AYNZpzmqdwBY5xgOzUsX2ey8d1U=)
                          3: YJIaGge0m8Fq2pmvZ3J6_uneU8w.roa (hash: cDj4e1NjDBzdB++QzO9SaAqUD+/Zcuxx5HvIK8XoGME=)
                          4: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: Y8/Fh99pJhFX8LJ42/qjItjJi3k2/f0d3SiYYknl4vE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:93:1a:0d:a5:69:64:4d:67:8e:92:c4:6a:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Feb  9 15:01:00 2026 GMT
            Not After : Feb 10 15:01:00 2026 GMT
        Subject: CN=722c8f185aeb2eb897b7bfd1b52285b7caa23f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:38:e8:16:50:54:94:39:af:7b:52:7c:b7:
                    fa:bb:2f:58:f7:a2:b3:19:e5:08:9c:00:d7:30:53:
                    c1:c4:fd:c6:bf:de:2d:cb:10:4a:f9:49:01:47:dc:
                    4c:8f:54:78:42:53:13:c5:88:b4:3a:9b:27:81:a9:
                    88:b1:dd:e2:4d:0a:f6:00:42:13:02:30:cd:ab:89:
                    60:64:3b:94:68:66:44:81:11:dd:49:0c:f4:a3:42:
                    ed:66:bf:c7:76:c9:80:fe:de:12:10:78:ed:02:26:
                    7b:22:34:0d:dc:12:84:f6:13:b2:cc:e1:96:c5:bd:
                    3b:0a:1a:90:3c:15:7e:9f:f9:25:b5:4e:6c:f2:f9:
                    c6:3e:61:b3:30:36:39:6d:9f:56:5e:30:66:c4:e3:
                    4b:63:95:4b:f7:89:5b:2c:92:b5:25:80:ee:83:a9:
                    ba:81:7f:08:8b:56:98:1f:13:1b:23:d1:f8:42:89:
                    e1:3e:18:95:92:b2:79:1e:08:f7:ec:23:4b:79:cb:
                    5b:42:ff:15:1a:51:95:df:ff:36:ab:dc:fc:1a:3c:
                    9e:86:cb:b3:fa:ca:62:53:81:8c:c1:a9:2b:23:5c:
                    74:ba:81:e5:5c:6e:49:6e:dd:2a:5f:69:97:24:c7:
                    22:fd:8e:06:6c:42:e2:5f:0e:4a:38:df:89:2e:f2:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:8F:18:5A:EB:2E:B8:97:B7:BF:D1:B5:22:85:B7:CA:A2:3F:1B
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:08:c9:64:0b:09:33:c9:7b:09:2d:3e:94:c2:36:ad:08:
         ff:0a:d8:ff:84:4c:e8:d7:b9:fe:82:fe:7c:79:5c:e3:0e:3e:
         da:bb:5c:4b:9b:0c:70:f6:b2:9f:63:77:df:04:1e:10:c8:9c:
         2a:bd:b0:ce:70:97:c8:91:05:6b:82:81:1b:cd:b3:04:31:ca:
         74:85:75:54:02:fe:79:e5:c7:9d:7e:ca:c8:e5:8b:20:80:2b:
         ea:9d:38:93:91:c3:20:38:23:43:0d:b7:29:77:a1:e3:67:30:
         e8:f0:43:12:09:d9:35:c9:e5:71:a8:60:20:3d:df:85:87:57:
         40:3d:d9:aa:0c:94:4f:a4:d0:d8:a3:b7:00:b4:cb:b5:35:8f:
         30:9b:1e:0d:b2:96:94:b1:d6:e3:f8:a0:29:a7:82:0a:1d:42:
         93:7a:1f:17:ec:3a:a1:41:5f:af:13:57:be:bb:21:dc:f7:a6:
         0e:1f:85:bf:e2:dd:17:cb:96:bb:a0:1d:17:de:e4:5f:93:46:
         12:f4:6a:8a:71:20:f4:43:a5:1c:64:52:76:2d:bc:7a:18:ff:
         41:aa:c7:32:92:fd:31:84:01:67:60:b2:41:35:b5:31:aa:9f:
         4f:d3:5e:f8:06:78:b3:2c:29:c3:17:0b:4a:5f:18:f1:18:08:
         dc:9a:23:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC65MaDaVpZE1njpLEajo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1
ZDM0N2MwHhcNMjYwMjA5MTUwMTAwWhcNMjYwMjEwMTUwMTAwWjAzMTEwLwYDVQQD
Eyg3MjJjOGYxODVhZWIyZWI4OTdiN2JmZDFiNTIyODViN2NhYTIzZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJQ46BZQVJQ5r3tSfLf6uy9Y96Kz
GeUInADXMFPBxP3Gv94tyxBK+UkBR9xMj1R4QlMTxYi0OpsngamIsd3iTQr2AEIT
AjDNq4lgZDuUaGZEgRHdSQz0o0LtZr/HdsmA/t4SEHjtAiZ7IjQN3BKE9hOyzOGW
xb07ChqQPBV+n/kltU5s8vnGPmGzMDY5bZ9WXjBmxONLY5VL94lbLJK1JYDug6m6
gX8Ii1aYHxMbI9H4QonhPhiVkrJ5Hgj37CNLectbQv8VGlGV3/82q9z8Gjyehsuz
+spiU4GMwakrI1x0uoHlXG5Jbt0qX2mXJMci/Y4GbELiXw5KON+JLvLRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIsjxha6y64l7e/0bUihbfKoj8bMB8GA1UdIwQY
MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt
NGUzZjRkNjhmNjgyLzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy
LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC0IyWQL
CTPJewktPpTCNq0I/wrY/4RM6Ne5/oL+fHlc4w4+2rtcS5sMcPayn2N33wQeEMic
Kr2wznCXyJEFa4KBG82zBDHKdIV1VAL+eeXHnX7KyOWLIIAr6p04k5HDIDgjQw23
KXeh42cw6PBDEgnZNcnlcahgID3fhYdXQD3ZqgyUT6TQ2KO3ALTLtTWPMJseDbKW
lLHW4/igKaeCCh1Ck3ofF+w6oUFfrxNXvrsh3PemDh+Fv+LdF8uWu6AdF97kX5NG
EvRqinEg9EOlHGRSdi28ehj/QarHMpL9MYQBZ2CyQTW1MaqfT9Ne+AZ4sywpwxcL
Sl8Y8RgI3JojGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:57:39 2026 by rpki-client