This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File:                     DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier:          3ST1Bi9lMoGT5RN0iBfjiZc5EAyFY0TI/twBgmJRht0=
Subject key identifier:   C8:B1:20:84:24:56:55:B8:1D:04:EF:05:DD:A6:8B:04:DE:F3:0B:D3
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer:       /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial:       019C427DFAE4B87FCEF3855204F59341B96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number:          1818
Signing time:             Mon 09 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:18 +0000
Files and hashes:         1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: NzozESEjujh5ZGEo7AaXWl8xD+8ypiadZ06DigSSVyI=)
                          2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:fa:e4:b8:7f:ce:f3:85:52:04:f5:93:41:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
        Validity
            Not Before: Feb  9 13:01:18 2026 GMT
            Not After : Feb 10 13:01:18 2026 GMT
        Subject: CN=c8b12084245655b81d04ef05dda68b04def30bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:83:43:19:68:17:40:a8:d6:20:48:ca:be:
                    86:cf:7e:e3:30:f3:a5:c9:4e:5c:a8:db:41:a9:00:
                    ee:d1:a0:81:f1:f5:3c:9b:ba:58:be:14:6b:0c:31:
                    c8:b1:46:a1:9d:3a:d9:fc:b0:64:9d:d9:e9:bf:8b:
                    43:b5:18:a3:17:6e:3a:44:b8:7c:34:2e:43:3b:9c:
                    55:34:17:77:82:78:b6:fd:1d:40:32:d8:79:16:01:
                    fe:01:71:d6:45:2b:1f:bf:c1:8c:f6:7a:cb:48:b9:
                    41:30:f8:d1:d0:25:24:24:4f:a8:75:a4:47:ea:d0:
                    03:93:6b:da:1e:c0:3c:c8:ef:65:08:8c:c9:bb:8e:
                    12:80:0b:ec:2d:03:23:b7:6f:73:a8:98:ec:d5:05:
                    79:d2:b8:c4:07:9a:d8:12:10:96:4f:d8:7d:a5:0f:
                    ee:db:47:4b:14:b5:15:ac:16:65:35:23:dd:9c:3d:
                    73:67:4c:fb:09:99:84:e4:42:34:06:8e:97:3c:bf:
                    84:bb:fe:b7:a9:f9:0d:77:0b:39:b7:18:7a:f4:a7:
                    58:5b:6e:7f:a3:82:e1:24:cc:f8:95:83:7b:a5:6b:
                    22:a3:2e:78:12:f8:94:09:50:1d:7c:cc:9f:fc:4b:
                    09:8b:a1:ed:45:db:67:f1:29:fd:e5:9f:9e:6c:c4:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B1:20:84:24:56:55:B8:1D:04:EF:05:DD:A6:8B:04:DE:F3:0B:D3
            X509v3 Authority Key Identifier:
                keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:b3:58:60:7f:5f:de:0b:86:0e:e0:90:a0:80:b7:f9:2b:
         6d:72:6d:df:ed:4e:f0:34:06:0a:99:29:e1:00:98:ea:b0:88:
         88:e3:bd:40:bf:b2:35:10:d1:f5:22:7d:ca:a8:89:31:28:8d:
         ac:a9:98:d0:e1:31:6e:c9:87:d2:ba:6a:96:11:20:be:82:10:
         e2:2b:d8:52:21:3a:4f:7e:ea:9a:8f:1d:a3:ed:f7:eb:16:df:
         d1:ed:3c:92:da:f1:d6:ac:f5:24:bd:28:e8:f0:8b:cc:ba:8f:
         33:3b:ae:5c:ac:22:0c:55:6e:ee:a9:0c:0e:67:79:42:16:5f:
         97:e4:45:08:46:7e:fa:be:ec:c4:0a:0a:a6:fa:20:ad:8e:8b:
         14:23:f7:77:8d:52:8d:db:e4:fc:84:94:63:f4:5d:b0:af:14:
         f9:e1:05:aa:66:e9:a3:fa:de:65:5c:aa:4b:b4:dd:82:81:d8:
         86:32:da:c3:87:21:7e:9e:1c:dd:c2:a7:b1:7d:f4:16:41:df:
         9f:58:a2:49:9e:4a:92:b8:6e:f8:bc:68:9a:6d:e1:8c:9e:b2:
         ad:ad:45:e4:b6:f9:4c:48:95:12:2e:6d:74:d7:e8:ab:37:cf:
         33:7b:65:44:06:0e:8a:f2:46:76:81:5f:b1:4a:5d:21:58:9b:
         a8:42:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:01 2026 by rpki-client