This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File:                     dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier:          Vre0orHUCdt4yiSoPayqJKm300aOcGQhUuF8ChO+keo=
Subject key identifier:   D0:52:BD:26:E5:B2:D3:F8:46:53:A8:C2:7C:4E:F9:46:42:9E:4F:C0
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer:       /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial:       019C420F6589E4606039A81E22E8343FD828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number:          0EDF
Signing time:             Mon 09 Feb 2026 11:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:31 +0000
Files and hashes:         1: 1FM0mS9YXhi36usAZssgSObubSE.roa (hash: ysx1WmEvblZeb6urFi3lM12je+ZT08ADvjlZD9WQj60=)
                          2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: ntL7zrpbX8fDmnDVnGGhNIzWO9VmnrGErJUb9U3ThDE=)
                          3: tsnnwKx9h0Bq1OKLzU0QXupmagY.roa (hash: osDK5z+9VSYaQfFUqf/4Hk4+z2z6ZK/YmHN1eV6XoFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:65:89:e4:60:60:39:a8:1e:22:e8:34:3f:d8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
        Validity
            Not Before: Feb  9 11:00:31 2026 GMT
            Not After : Feb 10 11:00:31 2026 GMT
        Subject: CN=d052bd26e5b2d3f84653a8c27c4ef946429e4fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:8d:da:3d:11:d0:c1:69:e1:01:4d:42:e1:
                    26:d7:54:70:a6:e1:e0:7b:60:1d:f1:43:4e:2f:2e:
                    bf:ef:03:47:e6:02:a2:ce:77:8c:2d:d9:c3:c0:84:
                    f4:2a:5d:a2:94:25:f8:d2:ad:a5:49:05:e4:02:e8:
                    9e:e8:3d:94:27:30:f9:e2:a2:93:08:f6:32:71:f8:
                    9b:ac:11:0f:28:c2:1a:41:17:dd:74:0a:e8:72:db:
                    93:b9:15:7a:bc:45:ad:c7:09:59:ac:3d:ae:c4:cf:
                    42:5e:30:b9:b0:1f:5f:bb:80:c5:21:c3:bd:70:5d:
                    59:da:69:29:f7:4d:02:ae:98:31:1f:d1:14:23:42:
                    b1:18:6e:72:2a:df:42:cb:ae:82:bd:b6:fb:d6:47:
                    04:0a:70:47:02:20:25:4c:0d:9f:74:5b:7c:db:c8:
                    48:f8:cf:e9:8a:28:ce:84:6e:cc:1a:09:0f:ad:ec:
                    c3:d6:a0:04:64:fd:20:3f:6a:55:df:65:3e:94:4c:
                    2e:25:a2:bf:f3:a7:ca:b1:ac:8d:1d:7b:f8:06:2c:
                    84:93:a8:2d:66:f5:25:b5:61:93:8c:5a:88:7c:c2:
                    cd:f3:b4:bd:2e:a7:aa:cc:5b:d7:ed:9a:d0:c9:2b:
                    65:22:2a:f7:96:c1:f5:4e:6d:5f:01:96:f6:92:0a:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:52:BD:26:E5:B2:D3:F8:46:53:A8:C2:7C:4E:F9:46:42:9E:4F:C0
            X509v3 Authority Key Identifier:
                keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:f2:fd:9f:37:d2:d5:13:66:f2:e5:c7:70:72:75:ea:3e:
         85:52:34:91:98:e9:c5:67:6c:fc:94:1d:68:10:b3:48:dd:99:
         3e:a4:d3:45:f7:b7:93:ae:39:cb:8a:22:93:c3:7c:10:0e:f5:
         64:aa:40:c5:fd:71:f1:54:9a:ff:e2:76:09:29:e8:e5:7a:44:
         5b:ae:00:82:4f:82:42:43:2d:d9:df:c9:4d:c4:3e:7b:94:bc:
         e6:2b:d4:af:ea:52:c8:e0:84:c5:09:e3:bb:a4:f8:a5:d8:c9:
         67:0c:e5:f5:cb:30:bf:ef:5c:93:d6:60:47:36:c8:d2:4f:8a:
         47:19:f7:af:94:cf:d4:90:e7:1b:66:1e:25:d0:d1:ab:e2:63:
         9c:54:d7:84:be:1d:0e:86:c0:5a:f1:ff:ab:68:20:42:28:78:
         72:f2:52:48:16:d0:a3:be:c0:1a:26:a0:80:48:2f:32:6b:86:
         5f:30:b3:03:31:22:d1:5d:f3:42:42:bd:3b:27:86:66:b0:b3:
         d5:45:1e:cd:48:ad:5b:86:59:a0:63:4d:f1:88:c7:ba:05:b0:
         af:4e:2f:dc:02:be:72:e3:9e:32:52:11:4d:e5:c6:ff:05:4e:
         83:19:d9:88:13:fc:11:3f:ec:6f:8a:98:2d:7a:b0:85:f2:28:
         40:84:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:45 2026 by rpki-client