This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File:                     dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier:          rgpzzI3GgYQ+WVFZXoceXoLgP+wMYw7hwnSijC9zA2g=
Subject key identifier:   22:DE:DD:EF:B1:67:55:19:3F:6F:25:CA:03:89:E2:10:A3:CC:DD:99
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer:       /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial:       019C4246277A8455CBA85BA4E0D0FBA1691F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number:          15B4
Signing time:             Mon 09 Feb 2026 12:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:19 +0000
Files and hashes:         1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: LUCnJqDz3ap4FnfTr6hH6NdZVy/Y0C+qZhR4eT1d1xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:27:7a:84:55:cb:a8:5b:a4:e0:d0:fb:a1:69:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
        Validity
            Not Before: Feb  9 12:00:19 2026 GMT
            Not After : Feb 10 12:00:19 2026 GMT
        Subject: CN=22deddefb16755193f6f25ca0389e210a3ccdd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:dd:b9:9e:a0:b3:26:0d:36:b5:8a:8f:3d:
                    b2:bf:66:5f:1d:57:fc:4d:09:ed:ec:bc:0e:c5:9e:
                    b1:4d:44:5d:75:30:6a:01:a5:5c:4a:b4:7d:b9:28:
                    24:82:45:d3:dc:42:ee:99:82:08:13:e1:a4:93:26:
                    72:af:db:b9:33:ee:f1:95:f7:0a:06:a6:eb:1b:fc:
                    56:c3:83:bf:af:01:d6:c6:1d:08:86:d5:32:2d:b9:
                    54:b4:66:df:2c:18:dc:f8:33:89:41:2c:41:23:68:
                    50:5d:2f:90:73:9e:15:c7:e8:17:9e:3b:73:dd:a5:
                    c1:c0:fc:4b:73:08:7f:07:2d:9f:e9:ce:aa:c9:c4:
                    88:8e:67:45:67:68:b9:2c:f4:5d:e5:30:87:54:fa:
                    a1:9d:03:db:07:3a:b4:6e:50:08:28:5d:2c:af:de:
                    0d:51:78:6f:b8:ed:15:65:62:8b:50:92:3d:19:f1:
                    fd:c5:b4:cc:68:e2:33:bb:47:88:65:3a:56:c5:12:
                    58:45:ed:fb:60:64:3f:20:60:1b:1a:88:71:a9:ba:
                    bd:ec:48:22:fa:d1:53:5c:70:49:4a:3b:f0:05:c7:
                    59:54:70:2e:e0:f4:50:97:a5:0a:f0:17:22:b8:81:
                    21:39:62:a8:74:16:f0:99:72:68:35:e3:60:8c:3f:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:DD:EF:B1:67:55:19:3F:6F:25:CA:03:89:E2:10:A3:CC:DD:99
            X509v3 Authority Key Identifier:
                keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:87:63:70:c2:ec:6d:29:75:ec:28:b0:54:1b:31:b1:4e:
         26:00:7d:82:35:ae:3b:9a:f5:1c:a7:6e:b8:bf:26:f0:a1:05:
         89:d5:00:38:5d:0c:32:e5:a0:fd:8f:a9:5d:3c:ff:4e:5a:87:
         40:1f:a4:14:9f:3a:e5:a5:18:d2:c2:da:82:cc:b7:59:9d:0a:
         4f:1c:7d:67:1e:31:ce:29:ac:9d:6b:06:91:74:c8:e8:b6:7b:
         ab:7c:f1:05:12:ca:ae:ed:21:4a:f3:40:70:a6:d2:ce:e0:94:
         41:ac:1c:ed:f9:8f:3b:ee:f2:3f:92:63:5e:06:54:78:09:c5:
         1a:a4:b3:f4:69:49:24:de:98:76:1e:e8:52:e1:a6:7e:29:00:
         a9:96:29:2f:7a:6d:77:8c:b9:65:25:a5:61:e7:ca:98:6e:29:
         8e:b4:ec:71:b8:0f:73:70:17:53:d8:67:0e:5e:e8:67:0c:b1:
         9e:4d:86:02:5d:1f:09:09:54:a2:33:ff:12:26:7a:b7:5b:8e:
         7b:06:4a:ef:d1:05:14:22:c8:fc:4b:1c:47:e4:9a:ad:3a:06:
         8b:d4:3e:36:a4:77:f4:6d:a8:24:2f:14:90:b8:2b:19:1f:ac:
         00:7a:18:53:c2:51:b4:f0:2b:2c:bf:1c:c4:19:02:04:47:fa:
         6b:1b:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:47 2026 by rpki-client