This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File:                     doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier:          TKajxQQ5xScyWX42w2vu22lYt9Laf+PTy0UcPHWqdtA=
Subject key identifier:   62:C7:C0:B3:C2:31:60:28:A9:06:60:D5:82:BA:B1:B8:0A:84:2B:40
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer:       /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial:       019C420F75D099CA11A5104F7B9FCBDEE43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 11:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:35 +0000
Files and hashes:         1: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: 2xdadaw8sa1UDWFl1/kLldoyGXiDl30CunFjuz2igWw=)
                          2: qyikk7bS12oqKnZ6ZpePEhFi5EA.roa (hash: iJ4m2Ce6hYzteRUMXY0l32a188WmXjWtAniRs3aLn1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:75:d0:99:ca:11:a5:10:4f:7b:9f:cb:de:e4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
        Validity
            Not Before: Feb  9 11:00:35 2026 GMT
            Not After : Feb 10 11:00:35 2026 GMT
        Subject: CN=62c7c0b3c2316028a90660d582bab1b80a842b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:4d:fb:92:86:37:ef:74:ec:ef:87:16:0a:
                    16:02:b6:4a:47:7b:dc:47:82:8b:03:b2:25:16:45:
                    67:a5:a3:9c:3b:c3:36:44:e6:fb:36:14:5b:07:2b:
                    db:d7:c8:19:aa:70:0e:ad:e7:0a:1d:bc:14:e9:66:
                    0c:ea:a4:3d:be:97:6f:01:e0:ed:a1:b2:de:ac:b8:
                    09:41:e3:b3:11:ed:ba:71:75:96:56:2a:e3:10:72:
                    eb:ab:cb:6e:57:16:75:91:d2:18:a1:6b:86:4f:80:
                    b6:7b:15:1f:b3:e4:da:ec:d6:48:36:58:6d:89:8f:
                    53:25:20:13:fe:de:33:38:27:b5:d8:24:f4:78:72:
                    d1:6a:02:e1:e2:3e:ca:f7:f4:5f:78:9f:73:e3:63:
                    b2:16:d8:22:f5:53:f6:b7:17:10:0b:c6:89:5b:91:
                    99:17:a6:26:5e:2c:6e:e0:2a:89:8e:50:29:41:ae:
                    a7:6a:bc:dc:3c:fd:97:97:81:6b:23:a9:a1:7d:8e:
                    45:01:56:ea:c5:9a:02:b9:a1:8c:90:a2:2d:75:b3:
                    1f:11:1b:53:7a:f6:e9:bd:14:53:0f:4d:08:4a:51:
                    1b:fe:2f:8a:a2:9e:7c:b6:6e:34:80:a1:2f:e9:e6:
                    22:a4:ff:e9:70:fa:6d:36:7a:da:74:88:58:35:a2:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:C0:B3:C2:31:60:28:A9:06:60:D5:82:BA:B1:B8:0A:84:2B:40
            X509v3 Authority Key Identifier:
                keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:8b:61:b6:af:9a:ff:6f:dd:7a:ba:be:e2:a6:77:ce:dc:
         c1:20:96:92:88:8f:9a:e6:e1:2e:25:d0:dc:ed:c5:8a:0a:50:
         44:fe:7f:f4:67:1b:e6:04:b0:c5:d6:d7:5f:81:ce:57:d8:5d:
         98:23:7d:c4:42:8a:3f:be:d6:e9:20:45:d2:a9:d5:13:0d:d4:
         1a:d8:47:a2:b8:51:f2:ff:1f:ba:19:40:a5:af:06:1f:dc:ae:
         5b:ea:2b:9f:88:31:29:67:c2:7a:87:90:4c:46:13:64:49:94:
         cf:a5:fd:b7:bd:1a:c3:c7:e1:23:6e:13:5d:fc:19:09:cf:62:
         3a:93:ae:0f:3d:86:40:98:bf:01:ae:b9:05:4c:c7:12:1e:08:
         0e:07:21:0b:f2:67:d9:1d:ff:8f:da:a6:9d:77:f8:64:ac:a0:
         bc:d6:fa:17:4f:e4:f9:61:aa:ac:0d:d6:aa:6d:29:9a:3f:f3:
         75:d3:68:ae:de:9f:ba:6e:50:3f:0e:b8:67:a8:46:f9:e9:5f:
         78:07:06:52:c7:b5:44:99:81:d2:ad:45:ab:25:58:35:7c:e6:
         55:63:dc:ce:eb:aa:c1:92:8f:51:70:ee:59:3b:e9:bf:42:9a:
         df:0f:d4:08:d9:77:dc:99:d5:20:30:0a:ce:31:35:44:1b:9b:
         a1:68:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:06 2026 by rpki-client