This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File:                     dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier:          UQQZd/f7Qe2WlB6mOhBrsgp+iT8LizCZ/ot4qnuW+dQ=
Subject key identifier:   6F:51:27:CE:FD:8D:0E:4B:F6:9A:A7:F6:1E:C0:31:E7:BC:71:E9:81
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer:       /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial:       019C439017EF1D6229669F7A39A1DADADF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number:          17A3
Signing time:             Mon 09 Feb 2026 18:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:42 +0000
Files and hashes:         1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
                          2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
                          3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: SyfqoJoUQtByaKczeWHG5dOmx+gbF3DrSQOk8N+XvQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:17:ef:1d:62:29:66:9f:7a:39:a1:da:da:df:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
        Validity
            Not Before: Feb  9 18:00:42 2026 GMT
            Not After : Feb 10 18:00:42 2026 GMT
        Subject: CN=6f5127cefd8d0e4bf69aa7f61ec031e7bc71e981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1a:60:fc:13:86:a4:1c:19:e1:c4:20:12:18:
                    60:b4:3b:ca:ee:70:b2:9f:98:80:42:d7:9c:a5:8b:
                    f0:e5:38:58:30:0b:01:39:40:45:dc:da:0c:72:61:
                    2e:7d:56:44:7f:55:bc:01:45:5c:fe:7b:34:ab:b1:
                    fe:23:04:92:3d:d4:53:55:0b:f1:e4:21:c5:ae:10:
                    02:89:68:7f:2a:aa:0f:b9:1b:82:4d:21:09:a3:46:
                    16:0a:70:ba:33:39:69:7e:af:f0:d4:a2:15:17:1f:
                    73:98:37:80:cc:75:7c:51:4b:26:f9:bd:3d:a1:e2:
                    96:f4:42:ee:ad:fb:64:d7:28:67:46:6e:4e:9a:88:
                    3a:9e:8d:b8:70:66:3d:74:f7:4e:38:76:aa:82:86:
                    37:cc:6a:78:8b:e7:fc:40:a3:25:2c:48:23:6f:75:
                    0f:73:db:79:3e:14:00:1a:df:d2:38:c0:9d:4f:0d:
                    54:bf:cf:69:e4:34:f7:f4:7f:ba:25:8b:23:ef:dc:
                    c5:fc:90:f3:e0:fd:a6:9d:64:39:0b:36:b7:fa:43:
                    37:7a:3a:56:f6:e3:cf:1b:55:80:a1:b0:26:b2:e4:
                    bb:07:75:3a:86:92:08:20:b9:08:b3:84:c6:8f:c8:
                    dd:85:df:e1:2a:98:88:a3:cf:7a:35:4d:d7:8e:28:
                    01:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:51:27:CE:FD:8D:0E:4B:F6:9A:A7:F6:1E:C0:31:E7:BC:71:E9:81
            X509v3 Authority Key Identifier:
                keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:24:42:68:be:29:c0:32:74:76:ea:0c:e9:21:20:b1:2f:
         27:c1:8b:bc:07:f1:04:31:88:0f:44:24:95:cc:24:26:59:8c:
         c5:02:17:dd:23:1d:b0:f8:a1:21:57:57:dd:a4:1b:d5:86:9d:
         b1:40:11:b1:70:dc:3c:a0:34:09:08:82:99:e9:2e:e2:6b:fe:
         1f:e0:ce:3f:90:24:98:9e:56:db:cd:4e:56:7f:e2:e8:c3:cf:
         7a:c4:7e:da:e8:68:2b:5a:da:67:50:b9:df:99:de:6f:f9:00:
         f7:6f:95:11:99:88:2a:58:87:d3:13:d6:18:b6:be:d6:96:05:
         cc:bb:8e:fe:db:3a:30:72:cb:99:7b:6c:be:93:f4:88:c1:13:
         b8:af:5d:a9:24:b2:28:b9:bc:99:bf:8a:9d:54:e4:31:c3:16:
         17:a6:4b:eb:cf:46:cb:8f:4a:a8:44:91:8f:02:2c:00:a5:24:
         a6:9a:b4:64:2f:c5:7d:75:cf:c0:3a:ad:a1:84:5a:9e:ed:75:
         df:3a:87:5e:6f:6e:65:a2:4a:85:b1:d3:c6:cd:c6:36:47:de:
         7c:c7:49:82:4b:03:c9:f5:6e:ec:f2:f2:5d:f3:78:cf:6f:44:
         9e:85:74:2c:1a:e5:0c:26:fa:e3:f7:53:ca:6f:1c:37:cc:74:
         07:b8:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:39 2026 by rpki-client