This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
File:                     ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft (raw, json)
Hash identifier:          bWm+ipCmZomadec5tM19uAaqYhz/pjNLhpC67waKIOY=
Subject key identifier:   EB:AD:CF:27:50:91:21:14:A5:95:FD:EC:1D:32:0D:A1:BE:B4:68:64
Authority key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Certificate issuer:       /CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Certificate serial:       019C420FFA11C41E18F75D6BC1C8564A36C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
Manifest number:          1714
Signing time:             Mon 09 Feb 2026 11:01:09 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:09 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:09 +0000
Files and hashes:         1: ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl (hash: GyOHZOhGdYl7EeKwbeNGqIWoZhJ5yl5Iy8XFB7aFkS4=)
                          2: hsS_dQVQFPV5hLzgsOTPdvSM2Go.roa (hash: ATrYNNXfTceiohlPFSe9W4JtggiaqmzTnSYR0lAfwkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:fa:11:c4:1e:18:f7:5d:6b:c1:c8:56:4a:36:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
        Validity
            Not Before: Feb  9 11:01:09 2026 GMT
            Not After : Feb 10 11:01:09 2026 GMT
        Subject: CN=ebadcf2750912114a595fdec1d320da1beb46864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:7c:7a:62:02:56:47:16:5c:53:6b:e3:7d:
                    47:91:da:1e:c9:c9:65:66:3c:24:b8:5a:76:f7:50:
                    c3:e8:f4:2a:08:42:1d:b3:24:28:ad:2b:2f:e3:36:
                    02:18:bd:64:cc:69:56:a6:d0:9b:62:81:e6:6d:12:
                    e8:78:99:ee:15:9e:0b:7d:9b:f4:a7:4e:c4:7b:eb:
                    28:1a:64:46:05:46:3e:2f:8c:b9:90:67:ff:1a:df:
                    a2:76:a3:61:2a:6c:5d:fc:2e:1f:c7:72:2a:4c:15:
                    26:d1:74:84:dd:70:f0:2a:4c:7a:8b:12:73:ab:50:
                    b9:f3:e0:54:e6:ea:51:18:91:eb:54:f2:b6:6d:ea:
                    88:75:b7:90:c1:7f:33:35:94:73:0d:12:c2:98:a1:
                    8e:0c:0f:12:7c:58:64:c0:3d:b2:27:ca:cd:f9:35:
                    87:b9:66:b7:e0:bc:22:6f:3f:07:a8:24:25:86:9f:
                    44:9b:13:36:fe:b6:19:91:98:b2:07:fb:27:a8:f0:
                    5f:ac:c3:b1:b9:8e:a4:a2:1e:eb:ba:4f:49:05:52:
                    1c:22:28:0d:f1:36:71:34:8e:81:2b:ab:95:8e:4e:
                    50:7a:86:f3:9d:f0:97:fa:48:70:49:fc:96:b1:77:
                    ec:0f:33:8d:54:89:88:61:ac:61:c9:41:e4:5a:9b:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:CF:27:50:91:21:14:A5:95:FD:EC:1D:32:0D:A1:BE:B4:68:64
            X509v3 Authority Key Identifier:
                keyid:75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4f:7e:8b:53:03:da:ab:6e:e2:f6:77:22:65:e2:09:13:fb:
         af:50:ae:39:a3:de:ec:61:f9:a3:3c:9c:4a:3b:73:6f:33:bb:
         dd:29:2b:34:8d:ae:12:0c:0e:d3:d5:4a:52:b9:94:19:0b:85:
         09:0d:ba:2c:1e:37:e7:13:18:22:31:54:c8:dc:f3:ad:56:f5:
         82:d4:c1:8c:1a:fc:15:df:55:b9:7d:71:ea:33:01:32:a6:ba:
         5e:ce:70:37:a1:65:7e:46:88:87:83:b5:4f:b1:b9:fe:85:27:
         fc:d7:57:55:c6:d0:62:7c:b3:47:76:6f:5e:e3:50:d5:a1:c3:
         96:2a:b9:94:fa:6c:f5:41:d6:b2:72:9c:b1:a6:8b:55:c6:80:
         01:17:f7:22:6e:a3:8a:5c:df:9b:c8:b0:c1:ea:9f:32:d6:08:
         47:10:2c:1f:34:8e:81:88:75:53:53:55:43:7f:c7:fb:4f:0f:
         ec:db:71:dc:ad:ff:7a:07:1f:ba:18:b8:1d:b8:c2:7c:02:dc:
         98:cf:15:aa:ce:ee:7c:da:66:f9:9f:fe:ea:33:02:b5:3f:63:
         e8:4c:65:e0:26:58:08:28:52:32:6e:d8:9c:33:47:eb:81:56:
         e1:ea:a2:9d:04:85:2f:26:b1:7a:7b:68:fc:4a:14:b4:dd:3a:
         44:ae:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:21 2026 by rpki-client