This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          gEBQhkD+7M4/d5jcGKO5dHajCpG/dCBSKcvfmnyap6c=
Subject key identifier:   C3:7A:CE:41:5E:74:8E:B9:9B:6A:24:F4:D4:EF:09:F3:80:BE:D0:E0
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019C42B402DFC71DA7FC9B8A0C5614FA9828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1820
Signing time:             Mon 09 Feb 2026 14:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:19 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: rbGeMNy45PsAvyYdmjANMGhhEk78b5K9f2yAdbwXeTk=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:02:df:c7:1d:a7:fc:9b:8a:0c:56:14:fa:98:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Feb  9 14:00:19 2026 GMT
            Not After : Feb 10 14:00:19 2026 GMT
        Subject: CN=c37ace415e748eb99b6a24f4d4ef09f380bed0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:1c:69:52:ca:a2:ac:2a:05:44:91:12:26:
                    ec:bb:82:56:46:11:25:26:1e:75:54:f1:9f:23:6d:
                    2b:38:ab:db:07:dd:bf:c5:10:2c:cd:a2:44:a9:ae:
                    cd:43:aa:8e:97:80:6d:a3:bb:0d:2b:4f:39:ce:6c:
                    c3:b9:b8:70:01:aa:df:30:45:06:af:e9:7a:6b:91:
                    6c:50:17:f5:2b:44:ed:1c:49:88:ae:94:37:fb:78:
                    13:c0:18:37:76:e7:e8:bd:44:bc:5d:53:b7:2d:a4:
                    55:17:14:c0:cd:b3:5d:e5:37:05:01:56:19:2e:17:
                    db:fb:33:c2:90:1d:d0:18:a7:8a:f1:61:e1:f2:f3:
                    b9:b7:20:04:a9:3d:52:41:f2:5c:2d:2e:8e:34:52:
                    43:c3:ab:2e:89:fe:c8:a0:07:89:2a:c7:34:d4:10:
                    f9:8f:7f:7e:b8:2f:b8:1f:36:9b:cb:e8:cc:5f:18:
                    90:70:3a:39:bd:2c:62:48:74:34:54:6d:ce:1d:ac:
                    bf:5c:96:02:11:46:f7:b2:e4:f1:69:37:04:63:4d:
                    5b:b6:d6:34:48:46:2c:01:9a:09:0d:0d:5c:0b:bd:
                    43:f7:15:36:7c:84:59:94:2d:e5:a2:c1:bf:b9:ae:
                    af:e1:cf:bd:4d:ea:d0:a5:8e:1f:f7:42:d2:e6:a2:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:CE:41:5E:74:8E:B9:9B:6A:24:F4:D4:EF:09:F3:80:BE:D0:E0
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:c5:09:74:ac:d4:c2:0d:f4:63:c9:2e:51:a1:b5:c4:49:
         ea:d1:6c:6f:e1:d9:b1:08:9e:4f:70:16:db:79:f1:3f:47:16:
         77:76:d3:7c:22:b1:ee:06:cb:51:85:6a:d0:67:12:aa:7b:8a:
         bd:48:b8:46:b6:a1:2d:6d:1c:47:d5:ff:74:0a:12:9d:08:b2:
         db:80:dd:33:d9:ed:87:31:f1:74:09:51:f5:f4:5f:a9:04:e2:
         ab:e8:e6:3b:c3:f5:2d:e8:fe:41:13:aa:36:fe:64:40:7f:96:
         da:28:35:cb:d2:a4:16:d7:7c:b5:0c:0b:4b:d7:12:1d:f8:9f:
         11:ec:a5:ab:aa:b8:06:8d:81:37:73:19:26:c3:40:5c:e3:67:
         da:99:63:c7:70:37:1a:e0:5d:60:87:14:3a:35:f1:ee:9b:c3:
         1c:5f:c3:4e:fc:a3:06:64:4d:bf:de:ac:0b:d2:89:28:19:70:
         18:56:0a:b8:fa:bc:81:0d:28:2d:6e:c7:e7:34:1b:37:44:2e:
         01:b5:58:db:50:81:41:97:b2:8e:b8:87:10:cc:69:b5:e5:5a:
         f7:dc:1b:77:ad:58:a6:8a:65:ff:02:03:d6:73:35:82:3d:35:
         40:19:d2:fc:cf:5a:01:37:7f:47:10:cf:5b:78:a7:be:a0:08:
         b9:73:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:28 2026 by rpki-client