This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          JZBW4yW6XQmTVAdVOpx6SF3HsI/3/5CG9K/751lKBk4=
Subject key identifier:   15:68:1E:80:72:F3:C8:4F:6F:1D:AA:9A:DC:DB:38:6D:E3:51:13:22
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       019C42B3EC7053692FCD41126A7F4F3571BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 14:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:13 +0000
Files and hashes:         1: Pf7AhUnXaKprsBS53Iasbf8vKSQ.roa (hash: EmnGUbW7DpEjL4TQ6sjZbo/JVLkBohhhsfWVRp/Hkx0=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: 2mRG/fcBcYW+5j1F/LUgr3sMQ6PV+kShxukUzNqpxAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b3:ec:70:53:69:2f:cd:41:12:6a:7f:4f:35:71:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: Feb  9 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2026 GMT
        Subject: CN=15681e8072f3c84f6f1daa9adcdb386de3511322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:64:04:ae:fc:a1:04:97:a1:2c:93:4a:4a:
                    22:53:40:2c:62:30:78:92:c7:e7:e7:ea:ec:2c:b3:
                    5d:eb:90:cf:9c:4d:81:d9:4d:dc:51:ef:10:bf:6b:
                    55:aa:d3:20:3a:2d:44:12:36:3c:a3:29:08:34:26:
                    06:43:2f:f1:e9:28:3d:51:4b:aa:b0:4f:46:7f:4d:
                    7c:51:0a:bc:4b:59:42:65:74:bb:b7:86:3a:09:47:
                    a2:57:0d:f3:86:4b:34:91:6e:3b:af:cd:9a:b4:59:
                    01:da:d7:e9:39:07:f2:82:9d:34:c1:42:f1:61:fd:
                    da:b7:46:26:de:1f:1b:02:e1:79:2d:1c:6d:cf:56:
                    6c:03:28:c2:28:92:0d:bc:82:63:fc:dc:70:d7:92:
                    49:65:0e:9e:17:de:b7:ad:c3:59:a1:5d:b5:b8:ee:
                    bf:34:bd:dc:8e:58:d1:dc:75:2d:95:05:12:ee:3c:
                    a2:21:58:b6:26:a5:65:e0:48:c1:75:e5:f9:a8:ca:
                    70:f7:aa:38:1b:19:17:a9:16:07:2c:ee:5b:4c:9e:
                    7c:61:fa:77:a1:1b:e4:bf:bc:bc:8a:fb:56:1e:78:
                    1c:b2:1f:0c:c2:5c:53:3e:1c:ab:d7:e2:2f:4b:21:
                    74:8e:52:33:5a:f8:6a:d5:51:c5:33:79:ca:42:20:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:1E:80:72:F3:C8:4F:6F:1D:AA:9A:DC:DB:38:6D:E3:51:13:22
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:56:27:6e:bb:0f:3a:4b:f6:08:ee:0b:95:42:b6:e4:d0:79:
         5c:f4:67:f1:dc:fe:d6:30:54:01:c2:8b:c2:d3:1b:07:ea:9f:
         46:0d:7d:97:34:36:63:fb:e1:08:b0:32:e5:14:aa:45:88:a0:
         c7:0f:6a:46:ed:4b:c0:7d:ed:bd:c7:d6:1a:96:b5:c9:25:6b:
         2d:bd:b8:fe:d9:86:f8:ef:63:a2:b7:27:c8:10:1b:94:df:3b:
         b5:ab:10:7b:fc:68:7d:91:7a:e8:66:15:36:f6:ba:95:bb:ba:
         af:1a:2a:d1:df:dc:78:eb:6d:e1:d2:6b:27:7e:c8:ed:2e:f1:
         5a:3d:c6:a5:c9:47:09:f2:fe:10:d7:7a:5e:c3:0f:04:66:bf:
         42:a5:61:85:8b:7f:9f:78:bb:86:8d:7e:82:0e:03:b9:3f:39:
         d7:bf:dd:59:61:9e:b9:ec:ff:4a:23:3d:d4:78:f5:a1:21:7b:
         92:b2:f9:c7:d1:9d:6d:ca:13:0a:89:d8:63:46:45:e8:76:39:
         4a:1d:8b:6f:a1:23:ad:3e:59:90:f6:e4:75:d9:d7:af:ef:1d:
         0b:38:a6:df:64:b9:d7:35:f5:61:95:31:71:c5:c2:3d:fa:7c:
         a4:51:84:a5:be:36:2c:3e:04:29:e8:9d:08:ad:b2:24:0c:9b:
         8e:12:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:28 2026 by rpki-client