This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File:                     dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier:          758Gx4GY1KStGw0KbIRNPGN4syAiqYd+CA8l+BXEFyk=
Subject key identifier:   74:F4:AE:E3:30:D4:01:D1:B5:5F:92:D0:96:1D:18:DB:0E:4E:CC:99
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer:       /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial:       019C42102CB2511BDF18C7470D997F9277D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number:          0FE8
Signing time:             Mon 09 Feb 2026 11:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 11:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 11:01:22 +0000
Files and hashes:         1: 7XwuNf8ZI8FggCTIu3xLPPBwACo.roa (hash: W+WJkHmtpXyF1YCQ32I9zdl7SdlSiAPaPn3XEwacVdM=)
                          2: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: CsUX6j5gPJpD2WT4hWni+AorKng0KPr9VjCqt+MQFZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:10:2c:b2:51:1b:df:18:c7:47:0d:99:7f:92:77:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
        Validity
            Not Before: Feb  9 11:01:22 2026 GMT
            Not After : Feb 10 11:01:22 2026 GMT
        Subject: CN=74f4aee330d401d1b55f92d0961d18db0e4ecc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:e4:15:35:1a:1c:de:71:4e:03:5a:f6:b7:
                    d1:29:c5:c7:2b:ea:ae:d1:b6:47:76:e1:50:d4:5b:
                    7d:67:fd:fe:ce:c0:20:2e:fb:78:c6:07:b3:f7:fa:
                    70:a0:1b:fc:e8:2e:98:4b:6a:61:81:b5:42:c7:d2:
                    8f:1a:b7:cc:b4:34:4b:db:c1:da:c7:b5:fc:02:2f:
                    53:f3:a6:d0:4c:d5:83:64:b1:5a:bd:65:a7:34:08:
                    8b:d0:5c:34:c9:7c:c2:45:08:0a:d6:0a:e8:b6:5d:
                    e5:fb:dc:88:a4:e6:f7:92:5d:89:7a:26:b9:c2:5b:
                    16:0b:bc:9b:6a:06:88:5f:da:db:35:45:62:ea:f6:
                    8f:25:b4:fb:a5:dc:8e:ee:20:31:e6:d8:4f:23:c5:
                    d2:1b:07:65:bf:77:a7:91:38:ea:e3:ca:1b:9c:67:
                    16:18:32:f0:20:d3:da:13:37:e1:b7:e9:79:b2:4e:
                    4a:81:4d:7c:da:ee:0b:ee:5b:84:ba:e8:d5:7e:97:
                    58:7f:64:ed:f1:41:f0:ea:b8:d7:36:12:b3:d1:8b:
                    15:b5:55:62:e2:59:66:0b:10:68:23:79:9f:0b:69:
                    e3:70:6c:d2:86:59:9a:2c:4f:ba:39:cb:db:60:36:
                    db:d1:3d:70:8b:5b:32:4c:ef:69:40:5a:f2:3c:fa:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:AE:E3:30:D4:01:D1:B5:5F:92:D0:96:1D:18:DB:0E:4E:CC:99
            X509v3 Authority Key Identifier:
                keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:85:17:e9:25:e4:21:94:5f:bf:5b:9c:0d:a3:b1:53:10:
         d8:86:8a:5b:a1:89:f3:f8:fe:a7:03:27:72:e0:b2:71:5b:29:
         cd:ad:32:9d:bf:e5:e8:49:ca:89:e4:05:9e:39:7e:c4:d5:2f:
         da:04:7d:f9:da:1b:5c:eb:21:20:93:26:e7:7a:e7:c9:b9:56:
         6f:e6:66:8d:7a:81:2e:89:37:a3:36:31:bb:ee:50:1b:32:ff:
         8b:a0:ea:83:a0:b1:2b:05:7a:3e:b4:3a:3c:a2:a7:2a:f7:d1:
         b6:ec:24:4f:7a:5f:6f:26:6b:7c:e5:10:94:09:f5:ad:83:bc:
         1b:4c:1f:e3:23:e5:d5:bc:5e:a8:43:72:b4:7f:dc:1e:c6:73:
         a5:49:2a:97:aa:55:82:17:69:28:99:6a:e9:91:de:88:d5:b8:
         91:5c:f8:cc:e9:5b:69:4e:b3:9e:70:ba:41:e2:4f:e9:27:f2:
         ee:b7:ec:80:f8:c8:33:de:ab:2e:0b:39:87:bb:1f:7e:eb:f7:
         fe:f3:d4:f9:b4:9b:a2:d8:82:ba:ac:2b:b6:02:0a:ce:a0:6a:
         6d:7b:bc:36:37:76:49:b0:03:3d:95:4a:a6:3b:9c:c8:32:d3:
         81:99:e5:99:ee:4d:84:d6:b1:4b:dc:eb:99:df:63:2b:39:6d:
         cf:f5:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:01 2026 by rpki-client