This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File:                     dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier:          Zjt66O0PdT8/cDPbeOSQAFjDL4Ec+bVq9yvkJvhivTE=
Subject key identifier:   48:C4:E8:E6:A5:BB:47:CC:FC:4B:B6:A1:2A:C6:E3:98:65:B8:59:99
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer:       /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial:       019C4322AC59917360CCC7C431446E30CDFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number:          102E
Signing time:             Mon 09 Feb 2026 16:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:11 +0000
Files and hashes:         1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: z9Tlox1eAaUPjmsmnm9ikKxuQ7aEKXAhqJDn5ohiCaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:ac:59:91:73:60:cc:c7:c4:31:44:6e:30:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
        Validity
            Not Before: Feb  9 16:01:11 2026 GMT
            Not After : Feb 10 16:01:11 2026 GMT
        Subject: CN=48c4e8e6a5bb47ccfc4bb6a12ac6e39865b85999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:ed:2c:a6:18:3a:e6:e4:17:7d:dd:9d:cc:
                    6a:17:94:56:e2:8c:4e:c9:2f:1d:cd:d2:71:db:a2:
                    84:ce:17:9c:4e:4e:7e:f7:2b:d5:23:2c:50:26:e5:
                    12:ca:8f:cd:96:85:81:5f:5c:d4:12:82:5a:96:13:
                    54:a2:9c:0b:eb:91:d8:46:69:03:71:a9:09:60:b1:
                    a7:34:01:97:7d:5e:41:a4:c2:22:78:d7:78:f5:4d:
                    9b:2a:f6:36:b2:9d:ac:0b:6d:c1:7d:e4:91:60:e2:
                    82:15:44:40:99:b9:a5:8d:35:60:29:49:0c:e8:f1:
                    ae:69:58:6c:42:30:5c:48:28:d6:f8:db:a6:91:02:
                    fe:c5:14:ae:dd:44:8e:9f:52:fa:03:1f:7a:8c:14:
                    96:95:a6:2c:08:e1:37:17:94:60:86:62:bf:f0:ef:
                    41:f1:75:61:f8:0e:8d:7d:d5:96:ec:cd:dd:b6:e8:
                    fa:07:40:32:0d:39:cf:4f:d5:f4:9d:2f:f4:f5:02:
                    c5:e4:05:0f:2e:3b:9e:3e:80:f4:95:6d:e6:d4:a4:
                    bf:f9:63:16:4e:64:ea:b9:b5:66:68:1a:cd:be:f1:
                    1c:66:f6:ed:0d:1b:4f:d2:aa:78:f8:83:fa:33:08:
                    17:6a:8d:d1:5c:4b:52:a0:35:8e:57:55:4e:52:5f:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C4:E8:E6:A5:BB:47:CC:FC:4B:B6:A1:2A:C6:E3:98:65:B8:59:99
            X509v3 Authority Key Identifier:
                keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:f8:9f:61:95:79:4e:23:1f:ce:2f:73:4e:e5:8b:49:4e:
         93:59:a8:ab:46:91:d5:cf:0a:56:9c:55:fe:8a:35:47:e6:57:
         d4:26:7a:fa:c5:65:ee:da:74:93:7f:a5:27:a2:22:d5:3e:53:
         ae:07:10:e6:00:c4:7f:c1:f9:21:6b:56:15:75:6d:cb:8a:93:
         d3:8d:98:b9:2a:dc:9b:2b:3d:7c:a1:6e:52:63:42:28:41:e6:
         8d:38:7a:c3:3e:ac:9c:cd:a2:db:cd:8c:51:d2:10:b7:da:11:
         42:ab:12:e8:36:58:47:a9:5e:bb:e6:5f:e6:d9:3a:f8:91:9a:
         b6:af:fa:df:e7:c1:b5:8c:5a:f6:a7:3a:8b:88:af:a1:b8:b7:
         3d:3a:fc:43:0d:b6:59:0a:d3:96:3d:16:50:7a:a9:67:f2:80:
         88:10:22:8b:3c:8f:8c:07:80:88:34:29:d5:88:c1:cd:a4:c8:
         98:4a:06:58:9c:40:6d:22:37:cb:9a:4b:a4:cb:8b:a0:21:aa:
         48:c2:0e:55:27:04:5f:08:b1:db:35:b2:99:cf:8b:3f:9a:90:
         e1:cb:1f:6c:b6:ee:39:e1:62:10:aa:6a:6f:d7:63:96:6d:15:
         4e:e0:86:f5:df:64:ba:49:41:b5:3b:ad:0e:94:4e:53:62:46:
         1c:33:61:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIqxZkXNgzMfEMURuMM3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OTcwMzZkOTNiNGFjNjcwZjBmZmM1YTkwY2VhYjZhNWY4
YmMyOTUwHhcNMjYwMjA5MTYwMTExWhcNMjYwMjEwMTYwMTExWjAzMTEwLwYDVQQD
Eyg0OGM0ZThlNmE1YmI0N2NjZmM0YmI2YTEyYWM2ZTM5ODY1Yjg1OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XPtLKYYOubkF33dncxqF5RW4oxO
yS8dzdJx26KEzhecTk5+9yvVIyxQJuUSyo/NloWBX1zUEoJalhNUopwL65HYRmkD
cakJYLGnNAGXfV5BpMIieNd49U2bKvY2sp2sC23BfeSRYOKCFURAmbmljTVgKUkM
6PGuaVhsQjBcSCjW+NumkQL+xRSu3USOn1L6Ax96jBSWlaYsCOE3F5RghmK/8O9B
8XVh+A6NfdWW7M3dtuj6B0AyDTnPT9X0nS/09QLF5AUPLjuePoD0lW3m1KS/+WMW
TmTqubVmaBrNvvEcZvbtDRtP0qp4+IP6MwgXao3RXEtSoDWOV1VOUl8qyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjE6Oalu0fM/Eu2oSrG45hluFmZMB8GA1UdIwQY
MBaAFHaXA22TtKxnDw/8WpDOq2pfi8KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAt
ZjlkZTU5YzM3MjkxLzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAtZjlkZTU5YzM3Mjkx
LzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm74n2GV
eU4jH84vc07li0lOk1moq0aR1c8KVpxV/oo1R+ZX1CZ6+sVl7tp0k3+lJ6Ii1T5T
rgcQ5gDEf8H5IWtWFXVty4qT042YuSrcmys9fKFuUmNCKEHmjTh6wz6snM2i282M
UdIQt9oRQqsS6DZYR6leu+Zf5tk6+JGatq/63+fBtYxa9qc6i4ivobi3PTr8Qw22
WQrTlj0WUHqpZ/KAiBAiizyPjAeAiDQp1YjBzaTImEoGWJxAbSI3y5pLpMuLoCGq
SMIOVScEXwix2zWymc+LP5qQ4csfbLbuOeFiEKpqb9djlm0VTuCG9d9kuklBtTut
DpROU2JGHDNhEA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:04 2026 by rpki-client