This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File:                     DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier:          7JYopY2IfYPJLpIU+Myzy8xZQaY5FcAGbVvh27FQIoQ=
Subject key identifier:   90:55:F5:9C:CD:F7:26:1D:B0:FB:85:8F:3A:40:8A:9C:02:B6:BE:A2
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer:       /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial:       019C420F486C290613E40F406116DFF7BF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number:          088E
Signing time:             Mon 09 Feb 2026 11:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:23 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:23 +0000
Files and hashes:         1: AMaU2fzpygF41S188jpF5PCtFow.roa (hash: AWYDQzHyjmYoYUtXrgToOGpkyPi31WYjmrREJ5IO1nU=)
                          2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: G99rh+ZLJNBBFZukKfzaMHnkMlCNPNS3ZhMq/Gqq7ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:48:6c:29:06:13:e4:0f:40:61:16:df:f7:bf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
        Validity
            Not Before: Feb  9 11:00:23 2026 GMT
            Not After : Feb 10 11:00:23 2026 GMT
        Subject: CN=9055f59ccdf7261db0fb858f3a408a9c02b6bea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:2b:72:41:c7:23:de:9b:47:26:08:7f:9b:
                    1e:c7:84:65:7e:79:87:4e:cd:3a:91:f0:87:74:8a:
                    8d:e6:81:6b:cc:b4:c3:35:6d:3f:41:b5:65:a5:b7:
                    49:de:e9:26:75:bb:21:2b:ed:cf:00:8f:d0:1b:97:
                    09:a6:d4:56:32:65:45:c2:04:64:5a:fe:e3:a0:a6:
                    8c:ed:d3:7b:e4:23:8a:c5:9c:30:7e:39:50:e8:b2:
                    77:f1:f6:11:96:9a:b1:ed:47:e4:70:7f:8f:88:14:
                    a0:b5:93:12:76:c2:e3:be:51:96:ea:89:ec:53:d4:
                    fe:4f:44:20:98:6f:15:bf:31:bb:c0:f2:74:59:de:
                    e4:f0:56:2d:7b:b6:61:0a:f5:ed:59:c9:0e:06:9a:
                    0c:3c:3f:76:2a:80:4f:2d:cf:2c:4e:90:73:fb:38:
                    93:ed:c5:61:25:a9:fe:d2:e6:29:b5:b7:d0:d9:ef:
                    ff:1d:57:ba:f4:f1:40:26:cd:c1:39:1b:e1:e5:6a:
                    26:a1:0f:29:9a:a8:50:b8:75:88:25:d2:e3:a2:c5:
                    c1:89:1a:ab:3d:b9:92:61:d4:a6:45:c7:03:b0:b0:
                    14:2c:65:2e:78:00:99:f4:f7:90:4b:b5:54:4e:68:
                    98:d6:d1:46:85:2a:c3:92:09:3e:5b:7c:44:b7:cc:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:55:F5:9C:CD:F7:26:1D:B0:FB:85:8F:3A:40:8A:9C:02:B6:BE:A2
            X509v3 Authority Key Identifier:
                keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b6:3b:83:e8:25:d0:ba:cf:37:b6:36:f2:84:7c:41:88:3b:
         40:09:c1:e4:39:6d:f3:b8:ac:50:6b:cb:2c:e9:50:c9:18:4c:
         ce:f0:55:26:51:de:23:ce:91:82:10:8d:a1:81:f7:ac:03:16:
         25:4e:73:69:f2:e2:9b:bf:a4:1c:2a:de:fb:c7:63:e1:62:d4:
         43:9c:f3:d1:39:64:ef:03:4c:df:55:c1:ab:fb:3d:44:b7:9d:
         28:95:49:dc:46:c9:25:b5:55:a6:da:2f:a6:b3:23:8d:d2:7c:
         18:95:06:c3:a0:89:cb:7a:7f:35:2e:bf:72:fc:53:d6:a3:4a:
         32:f9:3e:79:27:34:bc:50:e4:23:60:6f:83:4b:4a:64:20:20:
         e2:d1:68:5d:bc:fa:ff:76:1d:50:4b:27:57:11:18:60:2e:b6:
         84:a7:29:2c:4c:7f:4c:da:42:12:1b:0a:be:5a:ef:6b:ab:b7:
         af:4c:bd:b5:2e:b7:85:6d:ee:4c:1e:61:00:f4:e7:06:d1:37:
         cb:03:68:14:63:d8:f9:cc:5f:9e:78:b5:3f:13:17:03:fa:6c:
         f9:3e:16:08:36:9d:8f:67:06:aa:07:20:12:18:ce:61:d7:81:
         fd:2c:45:51:9a:fa:03:f3:35:4a:c1:2d:9a:01:ad:9a:f5:a4:
         d4:4e:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:01 2026 by rpki-client