This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File:                     dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier:          jQ/wr8VNAPCbBWANKwVSZhLh/+jEGxjip6jKcotpHsI=
Subject key identifier:   46:BF:A3:1D:05:BA:C6:46:1D:77:A6:A3:4F:B0:A8:62:E5:66:FF:F4
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer:       /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial:       019C43596A3FAC77379F1E02AC525714A30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number:          BA
Signing time:             Mon 09 Feb 2026 17:00:59 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:59 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:59 +0000
Files and hashes:         1: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: T/vjgeAp4AgZXJ6k9BBNshINJBmuB4Iu7jbuVitCljM=)
                          2: teE-GV4jFdvOHSd0O53kEW4cy5k.roa (hash: 0356Ukvg/LYMgoMT4jttwObOTcKGEvd2A1wCebPv1IE=)
                          3: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:6a:3f:ac:77:37:9f:1e:02:ac:52:57:14:a3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
        Validity
            Not Before: Feb  9 17:00:59 2026 GMT
            Not After : Feb 10 17:00:59 2026 GMT
        Subject: CN=46bfa31d05bac6461d77a6a34fb0a862e566fff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:03:1d:6f:82:1f:8f:84:98:11:fa:68:0d:
                    d0:d8:32:43:5c:b4:36:2d:0e:54:34:93:78:c6:74:
                    de:1c:61:ce:c8:c1:36:e9:9e:10:88:aa:90:d2:d8:
                    f7:1a:aa:d7:4c:c1:1c:e9:ff:65:a3:5c:01:50:7f:
                    7c:dc:b4:70:a0:4a:92:11:f3:e2:05:bc:a8:12:5c:
                    fe:f7:f9:dd:b1:5e:df:2e:7b:40:91:83:cb:ae:8b:
                    92:1f:8c:c1:17:21:3e:61:0e:5a:aa:3d:05:11:3e:
                    bf:7f:bd:53:1c:19:78:ff:47:9a:57:b9:7e:e0:22:
                    b2:84:0f:2c:cc:0a:f4:ec:f5:72:5e:95:e3:52:d7:
                    44:47:37:80:ed:f0:06:69:8f:34:50:0b:72:0d:79:
                    79:f6:bf:dd:cc:8a:2c:3f:d3:ee:31:21:48:c1:d5:
                    3c:d2:2e:39:ee:f5:d3:af:06:2a:08:ca:df:6e:79:
                    8b:d6:12:22:09:d2:03:23:a8:b2:c1:1a:e4:5a:a2:
                    d8:3b:af:c1:50:8f:a9:04:e1:a9:94:cf:77:91:b4:
                    56:8a:bd:5f:9b:40:f3:e0:1c:48:59:bb:39:a7:27:
                    3a:5a:a3:36:f3:3b:07:69:49:12:58:7d:15:69:57:
                    8b:87:dc:9f:91:4c:f0:d1:74:79:91:df:35:cd:45:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:A3:1D:05:BA:C6:46:1D:77:A6:A3:4F:B0:A8:62:E5:66:FF:F4
            X509v3 Authority Key Identifier:
                keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bb:51:8d:62:fd:48:33:f5:32:c7:a2:55:80:f9:29:2d:d8:
         3d:5b:52:79:ab:58:81:22:e1:a0:a9:a7:94:3f:73:01:45:09:
         ca:f7:5b:1e:78:8f:ed:cc:3e:d1:1f:0d:8b:f2:e9:ec:32:92:
         69:ac:33:80:24:46:3c:d1:47:b9:9c:ef:e1:c2:6b:f2:6d:a9:
         7e:8f:7d:1b:30:a4:42:bd:c4:88:81:97:e0:d8:6d:ee:31:6a:
         1b:61:e9:99:b7:47:e4:3a:8c:27:f1:e3:b4:d1:e5:ee:ae:44:
         11:d2:65:14:fb:10:dd:d9:69:c4:f5:fd:cf:f0:55:15:61:c8:
         ad:2a:40:8b:38:34:af:68:88:ed:11:2a:ce:5f:ad:8c:cf:fe:
         9a:49:55:18:cb:b3:ea:75:60:f4:37:1a:26:b2:20:b9:10:5e:
         d1:fe:66:c8:46:ae:54:6f:de:b5:ac:2c:32:5a:7f:00:83:6c:
         48:86:17:b6:c5:9d:60:bc:7d:e9:e2:85:a7:5d:66:4f:20:fc:
         18:90:78:9b:33:1e:3a:60:96:68:a8:06:a5:d4:30:08:de:26:
         5d:75:d2:7c:f5:ba:44:a8:cc:d7:5f:a1:32:f7:6a:d6:fb:02:
         07:33:75:5d:dd:d0:9e:ea:0f:7c:0a:e0:fa:5f:a8:09:7e:bf:
         42:2a:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:38 2026 by rpki-client