This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File:                     DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier:          Nbc2uTTw3g7Bw+D5T+ttCu3rkxk0CqYIpZU2OR8L2A0=
Subject key identifier:   6D:0B:2F:89:48:C1:FA:23:5D:AB:73:D3:D6:8C:1B:10:41:99:BD:DC
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer:       /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial:       019C44D9FA2977926BB389542C963D31ECFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number:          1813
Signing time:             Tue 10 Feb 2026 00:01:01 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:01 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:01 +0000
Files and hashes:         1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: pNPRu04MVMbpWmgEXeN381WFHI5SmQ85HVolhHq65WI=)
                          2: R98-3MxUCEXE69Fz60_XSqvCP5E.roa (hash: pEgDuMo24DdcsijxgVsSGbfCOh2rEyVko0b+fdHTqnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:fa:29:77:92:6b:b3:89:54:2c:96:3d:31:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
        Validity
            Not Before: Feb 10 00:01:01 2026 GMT
            Not After : Feb 11 00:01:01 2026 GMT
        Subject: CN=6d0b2f8948c1fa235dab73d3d68c1b104199bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c0:04:65:df:68:94:b8:7d:d1:75:9b:78:c5:
                    da:ae:d4:ad:f9:7c:29:a5:bc:2d:5d:0b:14:c1:2a:
                    73:b1:fd:d3:fb:da:66:0a:66:34:88:76:ef:cf:fd:
                    e2:2d:21:53:cb:ce:5f:b3:2b:ee:12:59:aa:e6:82:
                    69:08:0b:4b:a8:22:22:ea:a5:ba:f8:b1:78:30:10:
                    ee:00:cf:2b:3b:24:02:29:45:bc:21:a2:f8:92:8f:
                    70:73:06:54:35:a6:ac:d1:0e:00:14:bc:a2:e8:0c:
                    07:bf:56:14:33:5b:74:1c:41:2e:f8:90:ed:a5:e2:
                    e8:5b:ba:19:96:26:09:15:7a:28:a6:8d:5b:1f:a6:
                    2b:d9:66:be:f6:80:38:e0:e7:cb:c5:db:67:8d:da:
                    da:56:73:32:7b:97:18:8c:04:04:57:70:08:3f:92:
                    bd:8b:03:e7:4e:8e:a8:ee:8d:30:a7:a8:55:4b:76:
                    5a:e2:6b:ae:84:ca:de:78:92:5e:64:14:90:2c:f5:
                    9d:56:86:29:5d:1f:cc:2c:72:3d:e0:bc:da:46:c2:
                    17:66:06:a9:0f:21:b3:2b:a9:cb:9f:c5:d0:93:7f:
                    f9:f2:18:76:df:bc:f3:94:77:b7:45:5d:ab:45:a0:
                    3f:28:2c:5f:87:44:e2:34:e5:ce:63:78:c0:51:02:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:2F:89:48:C1:FA:23:5D:AB:73:D3:D6:8C:1B:10:41:99:BD:DC
            X509v3 Authority Key Identifier:
                keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:49:88:be:2b:6b:cd:f3:ba:b7:34:68:80:da:35:d8:30:
         39:4c:86:fc:69:91:18:2c:15:c6:1d:0f:de:65:fc:12:4f:4b:
         b8:75:53:27:64:92:67:a6:c4:1a:fc:65:0c:c9:a9:95:6e:03:
         7e:61:54:a2:06:9d:19:22:1d:cb:a6:0f:57:71:f7:d5:2d:e9:
         8a:ef:5b:a8:19:58:4f:d8:05:af:e5:30:fb:82:64:e1:99:8a:
         af:80:8d:87:b9:08:62:e3:f2:f2:a8:7b:05:42:33:78:f0:11:
         4f:d1:95:6a:28:ff:d5:ba:d4:71:53:d4:e8:dc:6d:58:33:cc:
         69:af:e3:92:47:d3:d3:5d:81:e3:1c:3c:22:bb:ab:f0:69:73:
         c0:7c:fa:bf:c2:e2:14:fd:02:7b:b5:2d:7a:f7:cd:06:fa:0c:
         2c:49:02:e4:15:e5:dc:ee:93:84:8b:8a:c3:80:cd:8a:1d:df:
         0d:41:fd:13:5f:8e:c1:30:ea:47:72:b3:ea:91:e0:f1:b9:26:
         d1:de:d6:b6:03:dc:22:bb:53:cf:81:01:85:92:e2:54:d9:84:
         2f:3d:f0:f1:1b:2e:51:f8:fa:3a:4a:f2:2e:af:b0:a3:2c:e4:
         4e:17:4f:36:8e:4c:07:8b:80:9b:a0:bc:ed:af:49:78:99:fd:
         7a:8c:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:25 2026 by rpki-client