This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          R3QKKJIA0EeeNUHm8hHGfbg7rGWsPfrwaS49hpZo36E=
Subject key identifier:   DD:43:54:29:6D:04:B0:C6:DA:E5:AD:00:76:7D:7E:36:16:1E:F2:C0
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019C420F1EC1A612C52C740716426D2AB86E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          02C4
Signing time:             Mon 09 Feb 2026 11:00:12 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:12 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:12 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: m3dqu/dZ85IBhWhtCaWWam03TrdYkC32lPGgVuDNRpM=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:1e:c1:a6:12:c5:2c:74:07:16:42:6d:2a:b8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Feb  9 11:00:12 2026 GMT
            Not After : Feb 10 11:00:12 2026 GMT
        Subject: CN=dd4354296d04b0c6dae5ad00767d7e36161ef2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:21:ba:aa:83:ed:d1:58:01:5b:23:70:09:
                    68:55:c2:cf:49:0c:fa:da:79:c0:3b:c4:b6:f8:72:
                    c2:2c:d0:3c:4c:4f:10:f7:d1:56:f4:d8:ad:72:50:
                    b2:4b:ef:f0:b1:2a:06:11:61:f1:1e:81:88:58:df:
                    4b:ed:07:91:b8:e3:e5:64:96:58:c5:78:bb:13:20:
                    bc:9c:6d:81:22:57:73:cf:a7:d8:96:db:30:ae:a5:
                    9e:12:38:05:67:0a:9f:b3:2a:ed:c8:70:f3:9c:50:
                    80:26:f0:2c:fd:ae:db:b5:45:a0:9c:8b:f8:d7:92:
                    22:fe:66:49:20:69:cb:f7:3d:63:a7:94:1d:36:26:
                    fe:67:3e:69:04:fb:33:02:57:7c:b8:68:1c:15:e5:
                    2d:9a:9b:7a:d3:b0:20:df:b7:f6:fc:bc:3f:93:66:
                    50:7c:60:ac:04:54:bb:8d:1c:0c:31:6e:90:14:ad:
                    c9:31:b0:76:6d:2c:e5:41:f1:11:d2:98:df:86:82:
                    79:66:e2:5e:5e:ca:3d:d4:5c:cc:50:36:d7:25:d1:
                    31:5c:3e:ec:7e:20:5d:3f:2b:53:56:b6:14:b7:0b:
                    6b:7a:84:18:1c:a3:cc:5c:0f:af:dc:2e:e9:d7:9b:
                    6d:f2:21:d0:7d:1b:c1:0c:1f:5e:9f:a2:60:82:55:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:54:29:6D:04:B0:C6:DA:E5:AD:00:76:7D:7E:36:16:1E:F2:C0
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:e7:ca:dc:e5:8f:d6:5a:8f:b6:33:04:bc:b6:c1:f4:0e:
         81:ab:87:b4:45:4a:b8:ea:bc:42:01:a7:76:69:4b:a7:47:ce:
         12:e4:03:ca:b5:38:ac:9a:fe:6f:81:79:d0:7e:79:1e:5a:ac:
         63:05:dc:8d:7b:00:07:74:b3:e4:a0:e9:c4:ec:1a:c2:14:0c:
         4f:8f:7e:27:9d:aa:b5:50:bb:21:3c:8b:ad:82:9d:5c:e6:57:
         cc:75:11:53:5c:da:fc:25:78:72:d7:45:db:fd:b5:fb:f4:c9:
         f3:6c:ac:08:4a:e0:3a:ca:79:e7:df:81:42:0b:ad:f2:cd:f2:
         ae:21:1c:c5:68:cd:1d:c6:39:fa:21:bb:5e:39:1a:2a:42:cc:
         37:cf:5c:ba:0a:4a:8c:31:b6:b4:61:ce:dc:48:2c:f3:bb:2e:
         b3:b6:1d:1c:64:13:93:a4:87:f9:57:e2:86:a8:bd:0a:c3:cf:
         cf:cc:38:f5:73:f0:0b:db:e1:4a:5e:6f:c4:63:60:6e:85:0b:
         a4:2b:7c:2d:ff:f2:ad:6d:23:94:24:7b:a2:32:40:bc:f8:d8:
         e5:05:0b:20:db:09:e7:c1:97:58:29:87:75:a1:01:f3:3e:46:
         40:c6:c1:dc:41:7c:c1:be:b0:72:10:b7:f9:7c:27:d8:b7:27:
         97:a5:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:44 2026 by rpki-client