This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File:                     dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier:          sdovVlNVasRmRxMJQ+91oYRvhH9a4qZRX8RDln0mEe4=
Subject key identifier:   2C:65:E9:63:59:4D:7E:6C:61:43:86:35:E6:BC:CB:3D:47:0F:32:16
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer:       /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial:       019C41A2066C85DE43EFEADD29B3CABF278C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 09:01:03 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:03 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:03 +0000
Files and hashes:         1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=)
                          2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: g1R9srDaaqueQgFU3Wsv7zxhHQoSDRcchQCw1bsUQIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:06:6c:85:de:43:ef:ea:dd:29:b3:ca:bf:27:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
        Validity
            Not Before: Feb  9 09:01:03 2026 GMT
            Not After : Feb 10 09:01:03 2026 GMT
        Subject: CN=2c65e963594d7e6c61438635e6bccb3d470f3216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:28:b5:f7:4c:74:77:31:8f:19:a1:90:47:
                    80:bb:a2:b4:2b:ee:35:0a:9d:24:e0:f7:22:05:7c:
                    4d:95:60:2a:02:2a:9f:b3:74:78:6e:6d:54:d8:ab:
                    b5:04:02:7d:db:15:31:f3:a2:b5:5e:85:c8:cf:32:
                    e9:be:95:23:e1:8d:6c:3c:ca:47:b5:9c:de:93:68:
                    a0:d9:44:04:2e:3f:33:8e:2d:be:22:ba:63:d5:66:
                    90:f1:75:98:8e:b3:79:5a:28:d4:32:bf:8f:9d:94:
                    f4:b3:0a:84:5a:b2:0a:36:16:79:bd:f2:2f:11:1e:
                    e3:01:83:6b:80:da:79:b2:e2:b0:37:fc:d0:cd:e1:
                    17:66:25:8a:70:fb:f2:bb:49:85:01:cd:42:a3:87:
                    57:ca:f7:f9:3a:8f:80:c9:6a:19:e2:8b:b2:4a:99:
                    13:fe:cb:be:26:e3:c4:ab:f6:2d:6b:00:1e:6c:59:
                    54:63:cc:fb:c7:e2:fc:26:ee:1b:d6:7c:db:ab:09:
                    66:09:f5:d5:ae:3b:b7:67:27:98:e6:cb:c5:32:ef:
                    6b:71:3e:5f:bb:aa:56:22:1b:c7:cd:34:f6:7c:ea:
                    44:9e:9b:77:a1:6c:02:f7:3e:a2:8c:c9:32:28:ca:
                    a1:04:d0:35:db:f9:f4:b7:6e:cc:2c:17:a7:6e:81:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:65:E9:63:59:4D:7E:6C:61:43:86:35:E6:BC:CB:3D:47:0F:32:16
            X509v3 Authority Key Identifier:
                keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:45:49:e6:5c:96:d6:ae:3b:96:09:61:a5:64:a8:d8:cb:32:
         10:70:fb:de:d9:82:27:a9:f2:17:f7:63:40:2b:37:5d:ae:f7:
         ed:df:a7:42:2b:bc:1f:fb:cb:d6:bb:98:2f:93:73:ea:94:bf:
         69:87:f1:a4:08:20:61:2f:35:6f:68:57:b1:3d:a0:ad:4c:bf:
         ff:0f:f7:92:10:95:79:20:1f:81:28:da:11:8f:fa:04:47:14:
         16:19:f1:c1:3c:37:3a:51:06:8a:27:ec:bc:43:fa:1a:6b:e3:
         26:2f:fa:ad:29:86:5c:e8:7c:5b:c6:9e:39:40:2d:46:33:20:
         01:42:62:07:19:ae:a7:c6:7e:f4:8f:5e:49:a1:b5:14:ea:8e:
         ec:54:a9:30:aa:69:44:c2:2d:c0:23:80:e9:44:ae:25:f1:de:
         4f:af:5b:56:1c:b2:7a:06:74:ab:be:90:c6:a0:59:9a:c7:54:
         b7:ca:cd:b0:4b:28:a1:4c:f3:1a:f3:3d:df:f0:15:2c:7b:69:
         e9:b9:f1:73:a5:0b:49:eb:31:6d:9d:2e:2f:d2:bf:9d:5a:10:
         6a:6b:b1:61:cf:7d:bd:29:59:7b:56:65:64:4f:33:c0:49:b6:
         80:4e:cb:b0:fa:9a:80:6e:d4:e9:da:d7:e5:93:63:0e:ca:0c:
         90:dc:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:32 2026 by rpki-client