This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
File:                     dw0111Zu5yRuTSEzy95Ip3RCPHc.mft (raw, json)
Hash identifier:          UoXPWFhRXeANj0WbbfIY8tuPZFDZCvpxk8maUimZULE=
Subject key identifier:   0E:F3:3D:CA:F8:8B:B6:DC:E7:F4:20:FE:D4:6B:35:C5:45:C2:28:82
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Certificate issuer:       /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial:       019C420F69E955E9E27D4E72D41EEFE9163F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
Manifest number:          0BF3
Signing time:             Mon 09 Feb 2026 11:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:32 +0000
Files and hashes:         1: 4M_UsjI3sTlD02Fx3KfoZHfdDb0.roa (hash: dlLvX8/Ejpl0nrFnm4Jn56Ulk4bAMrdScrrJoG2sLZI=)
                          2: da7V_Ge3OwJ-tptvN6P_P-82QWY.roa (hash: LhRu3/JonoqXhl7X7FsOj5gA5Kow+TvLPdq0yyZ9ncU=)
                          3: dw0111Zu5yRuTSEzy95Ip3RCPHc.crl (hash: Y+Xw6ZbjKQk4FuWTj4F2liGhbB5PnhxiAOcH4adX/MU=)
                          4: mT-pF9AMKMZsgk-sXRGFTjdjjTw.roa (hash: 8hi8c5X3lOfRNm6eAGE7trxa/urAr1vNuOA2SfS5/jE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:69:e9:55:e9:e2:7d:4e:72:d4:1e:ef:e9:16:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
        Validity
            Not Before: Feb  9 11:00:32 2026 GMT
            Not After : Feb 10 11:00:32 2026 GMT
        Subject: CN=0ef33dcaf88bb6dce7f420fed46b35c545c22882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:7a:22:03:3a:09:73:92:9a:5a:7f:8e:1f:
                    b1:7e:11:e9:bb:4a:87:e4:ed:63:06:1e:ea:a3:a8:
                    14:c9:fe:3e:aa:dc:07:f8:38:d5:68:36:2f:3d:39:
                    76:5e:8a:9f:61:8a:c6:8d:74:9b:a8:56:24:bc:02:
                    a4:91:2a:d0:f7:33:4a:29:c5:7c:86:c0:19:a0:ec:
                    cd:a4:9d:ed:9e:99:20:4a:97:e9:f0:6b:4b:17:3a:
                    21:7e:51:19:db:90:92:04:70:bb:cb:83:d8:5a:1f:
                    a3:2a:a3:7d:e0:5a:88:09:9a:ab:a5:f8:9e:b9:18:
                    83:00:19:e9:c1:f7:09:9d:92:7d:09:74:b9:fa:cc:
                    9f:db:5a:08:77:04:f7:98:e2:1f:9d:73:98:26:43:
                    8c:70:40:a7:fd:84:d1:7a:a8:d5:6f:9b:ed:e6:ca:
                    69:45:a0:83:10:a1:f0:2a:7e:f4:5e:26:cb:0a:16:
                    4d:08:13:41:17:ff:7a:3e:6b:55:04:a0:6c:f2:3d:
                    7a:7a:15:d9:e3:09:8e:0c:90:29:38:f2:fe:50:76:
                    f5:f8:b8:c4:a2:ef:39:bc:fd:b0:4d:35:3d:ba:09:
                    7c:14:64:ba:9b:da:3c:dd:88:20:bc:28:57:fa:53:
                    22:56:48:61:fa:c3:8a:f4:13:ff:dd:5e:09:77:49:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F3:3D:CA:F8:8B:B6:DC:E7:F4:20:FE:D4:6B:35:C5:45:C2:28:82
            X509v3 Authority Key Identifier:
                keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:33:03:dc:6f:f4:4f:27:5b:73:af:6f:ba:5c:80:76:ca:
         70:2c:08:05:aa:11:00:59:a2:24:b2:17:86:d4:64:6a:76:42:
         97:65:27:f6:b8:83:6a:e4:d3:c4:e2:08:bf:c3:47:52:bc:e9:
         eb:a4:dc:bd:6b:5d:a0:4c:41:f3:9c:c5:b0:ab:df:0e:4c:94:
         25:a2:b9:c9:bb:34:7d:26:32:61:fa:93:79:6a:39:04:b4:d4:
         45:33:e6:9a:e8:d7:a0:80:98:99:15:fd:d4:d8:44:48:8a:ee:
         dd:d2:26:f5:ef:eb:bf:5c:a3:0b:31:fc:0d:7d:b5:67:4b:3e:
         09:35:e8:af:79:33:dd:a3:f6:f2:5d:b0:3b:bf:ee:a5:5a:70:
         0a:cc:5a:c7:93:b9:79:ac:97:f9:f4:7a:f5:8e:9c:b8:fe:00:
         a2:cc:3a:a4:fe:27:a1:fb:21:62:e9:86:74:a3:dc:bc:5b:f8:
         54:37:16:de:ff:73:53:a8:92:ff:7d:d3:3f:8b:f0:2e:bf:d0:
         ee:3f:dd:ee:23:b5:43:31:f3:f8:81:74:76:e5:1c:bc:90:b4:
         74:c4:97:2b:2f:fb:ce:96:fe:c2:68:b2:67:ce:2b:fe:65:a6:
         c7:91:51:10:f3:04:4f:16:bd:3c:6b:37:64:ac:b7:c1:de:78:
         da:6c:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:02 2026 by rpki-client