This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
File:                     dTxuAUKu56nlon0Vd5su7LaI3ac.mft (raw, json)
Hash identifier:          wVJajtN8CS2hoZ6y1dn6wPVTH6iUsTdh1ewEnjn157g=
Subject key identifier:   76:4E:0C:63:49:59:5C:98:13:AE:83:06:2A:1C:3A:04:11:E4:4F:DF
Authority key identifier: 75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7
Certificate issuer:       /CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7
Certificate serial:       019C43225E82F647C823CB892E2DB02A8E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
Manifest number:          01FB
Signing time:             Mon 09 Feb 2026 16:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:51 +0000
Files and hashes:         1: Lp8uTrh0qW4aXm6dCM5_v_7ksK4.roa (hash: hMn1ax0m0A79uPtTb3kw8nIn6sECB4efeT2DDKCkCVY=)
                          2: dTxuAUKu56nlon0Vd5su7LaI3ac.crl (hash: RZ1LQ2zoOWgxV7Yw29RQ0a+tR0IHJBrn9InAm1DS0xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:5e:82:f6:47:c8:23:cb:89:2e:2d:b0:2a:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7
        Validity
            Not Before: Feb  9 16:00:51 2026 GMT
            Not After : Feb 10 16:00:51 2026 GMT
        Subject: CN=764e0c6349595c9813ae83062a1c3a0411e44fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:4d:5a:8a:54:f3:a4:52:53:d0:3d:bc:8c:
                    57:3d:fe:06:98:84:c7:34:bc:ed:c5:d0:86:76:99:
                    c1:da:35:d1:2d:e4:fe:13:09:bf:ca:a1:1d:20:f3:
                    42:fc:37:8f:f7:8f:5c:9b:6f:cc:8b:df:0c:23:22:
                    e6:16:69:a7:8a:37:d5:13:6c:91:32:3e:85:a7:c1:
                    c6:fd:91:e6:ce:ce:97:5b:66:dd:ef:12:b1:f0:ba:
                    71:60:04:f5:f6:ca:55:44:53:f3:3b:6b:8d:87:45:
                    80:2f:bb:40:ec:8e:0a:4b:a0:0c:46:82:65:aa:e6:
                    2a:bd:95:6f:bf:ae:cd:fe:79:1c:f6:82:9f:8c:b6:
                    a5:17:1e:54:61:1a:a1:6f:24:19:49:ec:03:de:dc:
                    33:4c:34:96:f8:84:20:f2:c7:19:b0:62:69:75:3a:
                    e2:19:64:6a:73:02:91:67:d0:20:6a:1d:ab:61:b2:
                    e4:ce:81:df:1a:52:a0:cc:08:20:3a:1a:8f:63:27:
                    fb:0c:2e:2a:a3:49:11:02:08:b8:b5:9c:23:31:31:
                    e7:e8:29:3e:fe:2f:42:a9:ef:8b:83:62:b2:7a:ae:
                    03:d8:7b:af:66:00:39:0f:10:a1:5f:c6:f2:c3:ef:
                    86:15:4b:d9:3f:62:fd:dc:46:0c:12:5b:4c:b5:5e:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4E:0C:63:49:59:5C:98:13:AE:83:06:2A:1C:3A:04:11:E4:4F:DF
            X509v3 Authority Key Identifier:
                keyid:75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:21:8c:ea:09:25:86:80:6e:d0:54:0f:fe:c3:ea:59:dd:ca:
         c4:53:b0:8c:87:62:6a:e7:e1:e6:ce:9e:e1:3f:4a:cf:74:fd:
         e7:d3:e8:05:38:0a:35:cb:14:cb:60:2e:f6:75:f2:b3:d5:b6:
         39:99:33:01:35:4f:9b:c6:e3:88:0c:20:c2:3d:00:05:0e:0d:
         23:75:75:2f:2b:74:ca:68:5e:7e:e9:05:3a:1d:46:f3:be:dc:
         5e:35:f9:00:0e:81:53:c3:c9:de:2e:7d:88:16:fb:c8:c0:dc:
         ca:60:72:dc:49:38:d5:19:8d:5a:75:0b:7d:8c:45:a1:19:5c:
         f6:92:ce:64:6c:3a:fd:45:2c:bb:53:c6:b7:20:ed:a4:d7:29:
         fb:20:8c:2b:3c:f7:14:ef:e0:8a:42:60:ed:a9:5e:e2:ca:d9:
         c1:61:1c:71:2b:9b:b5:5b:82:08:cb:73:7c:73:1b:b9:89:57:
         9b:d9:a8:16:73:d9:26:c1:8b:cd:12:17:5d:ff:70:ee:14:c9:
         31:49:a9:b3:63:5e:fa:e2:5e:cf:05:a8:12:0d:e3:c6:8a:1b:
         40:ec:0a:b8:7c:19:e8:19:28:33:bd:2f:14:2b:47:bc:9f:ff:
         ea:f7:ee:88:76:89:f7:96:d8:a8:3c:da:1c:f7:47:75:5f:18:
         89:94:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:54 2026 by rpki-client