This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
File:                     DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json)
Hash identifier:          jFlFdtMw7XLm7xq9EF3N1ThsQprOu5e1LXbbPtfFbiw=
Subject key identifier:   9F:93:D1:7A:7F:A8:B4:C6:21:BF:E2:A7:46:8F:7D:77:9B:E6:B0:94
Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90
Certificate issuer:       /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
Certificate serial:       019C416B047E2BC6794CD9658579524AED55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
Manifest number:          01D5
Signing time:             Mon 09 Feb 2026 08:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 08:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 08:00:58 +0000
Files and hashes:         1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: X/ZkHWASXjq2VNli0t4IhWcli131/e3pazQ6Ec9FHb4=)
                          2: OUFJxy-s9TAVicg_TPyt24njjok.roa (hash: CcCuuymnsKxCH+FKsnrcE8VI1Z4HjrKesHC84Px54Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:6b:04:7e:2b:c6:79:4c:d9:65:85:79:52:4a:ed:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390
        Validity
            Not Before: Feb  9 08:00:58 2026 GMT
            Not After : Feb 10 08:00:58 2026 GMT
        Subject: CN=9f93d17a7fa8b4c621bfe2a7468f7d779be6b094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:bc:a8:af:7d:7f:77:33:0e:f1:04:61:dc:
                    26:23:90:34:08:18:24:10:c5:d7:63:24:0d:d7:42:
                    e5:88:69:b4:a2:2d:6c:a6:d6:e2:7d:69:76:30:ab:
                    71:6d:25:dc:85:ad:98:89:14:0f:dc:46:db:6a:0e:
                    80:74:8c:c0:b0:eb:bc:47:7c:25:23:48:2f:e5:2c:
                    be:cd:f0:b2:77:b5:1a:a1:75:5d:0e:62:57:2f:ad:
                    d2:5b:8c:b3:70:c5:7a:d1:bf:22:98:e6:47:16:c9:
                    bd:cf:df:02:e3:4e:c0:2d:1e:19:04:c6:13:65:c9:
                    08:fd:bb:d1:a0:f8:df:57:d2:7f:c1:7f:87:61:7d:
                    7c:87:44:f9:78:cf:08:12:bb:d0:fa:e5:12:9d:f3:
                    39:a3:49:aa:e0:72:58:95:b2:86:35:b7:d1:29:5f:
                    c7:be:56:c9:a4:94:66:ef:4c:a9:8c:6c:84:fc:25:
                    03:e7:c6:f5:c7:67:3f:94:6b:39:6c:b3:2a:8d:d6:
                    f9:29:0d:ed:68:2c:aa:86:93:02:c1:62:55:8b:33:
                    47:04:3c:e3:43:07:29:03:59:e0:43:c3:fd:3d:b6:
                    6b:65:9c:63:5f:11:a5:e8:81:01:c5:38:76:06:fc:
                    51:96:71:58:37:27:58:d4:26:e2:9b:9c:d9:0d:31:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:D1:7A:7F:A8:B4:C6:21:BF:E2:A7:46:8F:7D:77:9B:E6:B0:94
            X509v3 Authority Key Identifier:
                keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:37:78:24:f2:77:59:be:33:84:bb:d4:82:71:56:55:a3:a0:
         2d:da:56:38:7f:1b:51:9f:2b:04:10:52:eb:5b:28:ba:33:bb:
         cb:49:9a:c7:d1:62:52:c0:12:ad:17:29:99:49:ac:dd:c1:47:
         06:e3:10:e9:c3:62:3e:bd:14:ea:55:10:16:e3:e8:a8:03:7e:
         91:dc:ad:22:3e:8b:80:43:f5:aa:9d:26:46:0b:1a:29:38:f8:
         f4:79:04:c6:03:25:b1:13:d0:06:8f:93:19:56:e3:43:31:f6:
         36:cc:03:eb:21:0a:84:c1:ef:66:9b:17:df:12:69:e5:c4:7c:
         38:76:53:b0:61:c2:a0:03:d4:60:23:ae:e5:b3:b0:75:dd:26:
         8c:c9:03:85:80:8f:dc:18:06:f7:20:35:06:6b:18:c7:b6:55:
         37:7f:44:ef:a3:b9:66:98:c9:07:db:a6:19:e8:d1:3c:d3:c5:
         43:b0:4b:ec:73:b8:b8:d3:26:04:0d:79:7b:be:94:d3:35:88:
         33:63:df:b5:f4:2c:4e:c3:bf:58:c5:80:c0:8a:f8:10:0a:2c:
         15:7d:37:6d:21:74:50:ce:55:aa:6f:fa:51:c6:85:eb:d7:ae:
         7a:fc:e7:bd:44:a7:7d:a9:c3:43:5e:a0:26:36:84:05:6d:10:
         8d:36:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:34 2026 by rpki-client