This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
File:                     DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json)
Hash identifier:          4j4zYrXbUoseDOwP6+js7ZOFARVWLEaMjqmNK1JlNK8=
Subject key identifier:   FC:57:72:B7:27:C6:3C:0A:8C:4A:12:6F:79:AB:83:B0:9C:08:54:D2
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019C2F9BABA10BDCE503D80847583B857195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
Manifest number:          0B59
Signing time:             Thu 05 Feb 2026 21:00:56 +0000
Manifest this update:     Thu 05 Feb 2026 21:00:56 +0000
Manifest next update:     Fri 06 Feb 2026 21:00:56 +0000
Files and hashes:         1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=)
                          2: 7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (hash: MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=)
                          3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: XQydM3s8ownRrZL4ZN90x/EjHk/NUDxo/SeCAQU10KM=)
                          4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=)
                          5: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=)
                          6: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=)
                          7: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=)
                          8: X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa (hash: rh/WCgNGpWe5SFzXuknTX7T5+ylOXQCOCuQbZtqKNPA=)
                          9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=)
                          10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=)
                          11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=)
                          12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=)
                          13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=)
                          14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=)
                          15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=)
                          16: uPX022VTJ_bMjiHSPx4Do1vlriY.roa (hash: aq4O2cq08j8Fn88DS5wNdITiPLigSYRE0hYFpbgZqVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 21:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2f:9b:ab:a1:0b:dc:e5:03:d8:08:47:58:3b:85:71:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Feb  5 21:00:56 2026 GMT
            Not After : Feb  6 21:00:56 2026 GMT
        Subject: CN=fc5772b727c63c0a8c4a126f79ab83b09c0854d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:e4:45:09:69:f5:4d:62:2e:fb:3f:e6:f3:
                    9c:40:22:9a:04:40:62:4b:e1:aa:a0:89:34:32:a2:
                    e0:b8:e1:4c:f0:b5:cc:25:9e:9b:d4:da:aa:4f:89:
                    f6:44:b9:35:57:86:89:46:25:a6:a9:7e:9e:4d:79:
                    bb:3a:bf:e0:e5:30:d4:c3:03:c3:f1:0c:b4:a5:a8:
                    38:76:18:a2:49:61:c5:14:3a:d3:05:70:05:4e:b4:
                    32:31:64:87:21:cc:f8:27:1f:f4:ef:ea:8a:2d:9a:
                    98:f1:d0:ae:53:d7:55:38:83:c7:ef:b8:e4:86:3f:
                    b3:9a:a2:74:67:8e:21:22:e4:dc:7b:c8:91:a9:cf:
                    4a:c3:e0:ac:eb:e0:47:3f:c4:4a:bc:9a:d3:e1:31:
                    04:d2:a6:6d:f3:17:a1:b5:59:0e:35:63:bf:b7:68:
                    57:e0:64:31:4a:68:de:d4:4c:d1:d7:27:8d:5c:43:
                    a1:9f:12:b8:7a:f9:5c:35:90:b3:05:aa:d4:18:ba:
                    d1:76:36:ee:56:5e:22:6b:8d:d4:8b:8f:95:ef:5c:
                    2f:66:47:c8:cd:6d:e9:18:04:ff:46:d6:b7:91:10:
                    47:ba:94:11:4a:e2:61:5c:fb:59:78:8d:3a:b1:e8:
                    61:8d:67:64:8d:c2:fa:c5:bc:38:46:7b:41:f1:d5:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:72:B7:27:C6:3C:0A:8C:4A:12:6F:79:AB:83:B0:9C:08:54:D2
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3b:bb:12:9b:cf:b9:9a:db:4e:d3:d1:f6:fb:0e:57:40:4e:
         0a:24:78:04:5e:41:ad:ee:ee:56:db:d2:7f:63:77:52:c8:07:
         b2:86:38:65:e1:1c:7d:6b:fa:d9:35:aa:7b:2b:6e:0e:1a:db:
         2d:21:af:e8:86:65:da:ad:f8:5e:09:df:9e:7c:c2:86:ab:e8:
         c2:80:60:13:ce:c2:1b:c6:a9:68:9e:24:f9:e8:cf:75:7f:cd:
         3b:24:d3:56:82:82:6f:be:5c:c9:95:47:b2:75:f0:5a:53:13:
         c8:b7:2e:6f:18:b7:e0:2f:eb:5f:7c:62:3e:0b:42:b9:fa:1b:
         2b:3f:23:d3:bc:00:c2:18:9f:6d:ff:7a:60:29:08:1e:50:52:
         fa:12:f7:0b:9e:a2:29:c7:c1:4a:e9:ed:33:9d:b8:d5:90:62:
         2e:b4:42:a7:0a:5f:7f:71:bb:30:f3:55:b0:57:60:be:62:c7:
         75:c7:9c:9e:dc:ce:c0:f0:ab:4e:75:12:5f:9e:26:02:e2:d5:
         53:a7:da:98:4c:f2:2f:4b:b5:66:df:93:af:a1:0f:1b:c3:36:
         54:32:d0:b3:2b:ad:46:c5:a2:4f:14:d3:06:bb:de:e7:fa:68:
         23:a5:b2:ac:40:d1:97:a3:a5:37:77:c1:23:0c:95:c3:93:c4:
         58:ee:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 02:36:02 2026 by rpki-client