This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
File:                     dnLA_gg3F2QFjGq4XftdzcEJ934.mft (raw, json)
Hash identifier:          p35a+xlLfpgyffdx7WFnCknfvk3B6YBMEqNo4pB6mPM=
Subject key identifier:   A3:AB:16:9C:FA:6D:48:45:F5:96:7D:42:19:B8:29:6F:0B:3B:0F:D1
Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E
Certificate issuer:       /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
Certificate serial:       019C24E0DDEA4518A376BE5009470C5F3738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
Manifest number:          0B27
Signing time:             Tue 03 Feb 2026 19:00:42 +0000
Manifest this update:     Tue 03 Feb 2026 19:00:42 +0000
Manifest next update:     Wed 04 Feb 2026 19:00:42 +0000
Files and hashes:         1: dnLA_gg3F2QFjGq4XftdzcEJ934.crl (hash: ZAXTdCbandkaKqiVUoEx3PgMN3h3T3AEtoE6Z1IOREI=)
                          2: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (hash: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk=)
                          3: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (hash: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e0:dd:ea:45:18:a3:76:be:50:09:47:0c:5f:37:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e
        Validity
            Not Before: Feb  3 19:00:42 2026 GMT
            Not After : Feb  4 19:00:42 2026 GMT
        Subject: CN=a3ab169cfa6d4845f5967d4219b8296f0b3b0fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:be:8a:23:b2:d0:b8:97:60:1e:4f:f5:5e:
                    bc:2b:a8:5f:43:ca:4a:37:9c:72:f3:6b:c0:55:02:
                    fc:7b:41:56:fa:9d:14:70:e7:a0:c9:ef:36:b3:7d:
                    cc:32:89:f5:cc:c1:45:39:9c:b6:c4:49:ea:6c:10:
                    96:46:a0:06:cf:d7:ac:19:e1:e9:1b:e2:a8:ca:dc:
                    0b:d0:97:2d:29:e8:a7:02:13:e3:40:6c:28:db:3b:
                    a8:0a:f5:c3:c0:5e:c9:bd:7c:97:1b:bd:ba:24:30:
                    3b:6b:0e:c0:26:1a:a5:1f:55:2c:89:d5:b2:42:f1:
                    3f:fc:f8:c7:5c:42:b3:99:cf:d8:87:79:07:83:c9:
                    d1:ca:b0:80:17:63:15:3e:d9:53:41:a8:88:66:35:
                    65:71:d3:8c:a5:39:7b:28:a6:d8:9e:c8:c7:be:49:
                    bb:ec:2b:dd:f6:26:ab:a2:84:0e:f3:8f:07:5b:9e:
                    9c:ed:c1:db:9f:a3:ab:b1:24:25:17:bb:ca:3b:39:
                    ef:1b:44:61:7b:9a:c6:53:0e:8d:06:a8:c5:2e:41:
                    47:b6:6e:5b:a6:59:6c:b2:02:3a:59:aa:d1:d0:e6:
                    08:a7:d8:40:7f:1a:3d:c1:ee:ca:74:fb:5d:2f:eb:
                    e8:4d:12:a8:35:e3:83:31:80:5e:58:9d:85:5e:a5:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:16:9C:FA:6D:48:45:F5:96:7D:42:19:B8:29:6F:0B:3B:0F:D1
            X509v3 Authority Key Identifier:
                keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:06:7d:27:ff:aa:e8:6f:89:e6:c3:38:8f:f0:dc:31:56:94:
         dc:29:23:98:64:0d:8f:46:44:c7:38:e3:06:9d:01:5f:ec:6e:
         15:a8:d4:71:56:20:9d:ad:48:ad:b8:e2:fb:a4:b6:04:9c:09:
         31:03:f0:56:a0:de:79:33:0c:06:c6:b8:2a:c0:ef:25:17:5b:
         0d:f1:0c:f3:26:52:88:08:21:9d:ef:78:8a:1d:b3:9e:73:ec:
         ad:87:62:e1:8d:ad:bd:ff:79:25:de:26:29:b3:c1:b4:04:76:
         c4:14:f2:e2:24:86:65:53:81:b3:4f:22:c5:46:5d:4a:60:f2:
         db:bc:fc:16:8d:d1:60:52:f1:83:fc:0b:ba:5e:f1:b4:4b:95:
         0e:8f:38:7b:a0:6e:4c:eb:55:a6:42:9a:38:a8:92:c1:ea:1f:
         89:7c:a2:3a:95:66:9b:8c:e5:ac:d4:89:31:ea:14:5c:8c:ef:
         e2:5b:dc:f9:b6:87:4e:b1:bf:75:ba:b2:20:db:75:22:83:f5:
         1a:48:9d:0b:42:7f:d7:18:16:1d:be:b2:7b:2a:84:79:b7:93:
         c6:74:4c:93:d4:61:bc:c1:5d:ce:11:ab:03:dd:dd:38:37:06:
         05:8c:fd:68:2c:bd:c0:b9:a3:67:51:2c:a4:52:d0:2e:97:3c:
         94:0f:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 04:36:37 2026 by rpki-client