This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File:                     D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier:          3NgKczNlqF4JtFe3izQ90+87/dPGgIRWeX7Cejjj8lI=
Subject key identifier:   9B:44:6C:D3:A1:58:7A:FD:AA:36:3B:DB:74:22:96:D3:97:6F:75:32
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer:       /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial:       019C4322D3206AE6F4108FDE4810945059F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number:          0EA6
Signing time:             Mon 09 Feb 2026 16:01:21 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:21 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:21 +0000
Files and hashes:         1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 2rKFS6Bcwq4qPoUhLFCorHVU11h4GYKmY5WFErTossE=)
                          2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:d3:20:6a:e6:f4:10:8f:de:48:10:94:50:59:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
        Validity
            Not Before: Feb  9 16:01:21 2026 GMT
            Not After : Feb 10 16:01:21 2026 GMT
        Subject: CN=9b446cd3a1587afdaa363bdb742296d3976f7532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:4d:56:23:6c:9c:81:6b:d1:68:78:dc:5e:
                    62:82:b4:f0:df:7a:e4:b5:40:8f:d6:9f:80:7a:4d:
                    70:79:28:f0:c6:e0:58:b7:47:91:30:2f:5a:90:2e:
                    33:9a:d3:b6:6c:1b:51:41:c6:f5:1d:f4:7c:cc:1f:
                    5b:c3:89:d2:99:d9:c1:31:32:f7:b5:0b:a1:9a:5e:
                    60:5a:51:49:51:5f:77:ea:d9:92:33:b6:d7:c8:3d:
                    9a:bb:e5:68:ac:15:33:10:a9:a3:34:da:b7:32:4e:
                    9b:c2:c1:2a:77:62:9c:46:71:7d:26:2c:58:d2:92:
                    cb:96:36:72:ea:d1:e1:b6:d9:5d:49:a2:ad:f7:97:
                    c1:9f:f5:51:b8:37:bb:c8:ad:b3:9e:6a:7c:17:2b:
                    73:57:fc:8b:41:b2:68:34:3f:bb:c6:ca:2e:93:a9:
                    f1:99:6d:5b:2a:04:84:a4:8c:d6:7a:db:dd:4c:02:
                    ca:23:56:5d:dd:b8:3f:69:69:30:2c:fa:47:80:a8:
                    08:43:da:08:03:1b:93:c5:df:7c:1a:1a:23:80:1a:
                    00:41:b2:f5:fe:02:cc:9d:6f:c5:83:b7:a9:61:6f:
                    0b:ef:1d:84:f3:c6:60:51:81:a5:31:ef:e2:29:d1:
                    17:ce:62:c5:69:68:cb:e8:b6:e0:d7:12:2c:0a:17:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:44:6C:D3:A1:58:7A:FD:AA:36:3B:DB:74:22:96:D3:97:6F:75:32
            X509v3 Authority Key Identifier:
                keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:7c:24:43:ee:63:ac:3c:9a:20:07:34:ec:9a:fd:bd:33:
         9a:16:67:6c:a9:5e:69:c3:e6:89:65:03:6b:c3:0c:79:98:bc:
         1b:e0:26:91:35:82:04:f7:3b:6e:f4:55:60:ab:e9:0b:54:b6:
         cd:84:b4:21:18:a2:99:be:cc:d5:eb:c5:43:e2:e7:87:5a:97:
         d8:9b:94:8c:6f:67:72:99:d6:2e:52:57:91:97:7b:4b:8f:e7:
         3d:1f:46:ad:94:38:af:a3:cd:93:b1:67:8c:f3:6b:07:e7:d0:
         32:b4:21:d4:7e:d2:da:53:5a:47:13:58:b7:35:84:6c:95:cb:
         1b:14:d3:55:a8:81:e6:1a:5f:ab:fd:c6:2b:64:7c:dc:66:fb:
         e1:96:79:9e:d7:78:22:03:d4:24:b9:8e:fe:72:e1:c5:6e:22:
         b5:6d:a5:b1:32:24:59:a2:bd:92:cb:c2:39:a0:3c:96:9d:50:
         6a:9b:80:bf:cd:92:d6:27:b6:59:7b:07:b2:a4:22:b6:d8:c4:
         06:8c:15:84:ab:b8:2a:c8:74:f8:28:8b:97:7b:86:1f:67:8b:
         af:2b:6a:72:7c:67:04:ee:36:f4:4c:de:66:3e:82:ca:01:9f:
         4b:44:7d:0b:c0:fb:48:85:62:4c:ce:24:24:86:1f:56:40:30:
         5e:d6:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:56 2026 by rpki-client