This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          ObCxpnKL3wBe+iuPU2+VYji4mzX0F1gWZxLl07M/liY=
Subject key identifier:   CB:A5:FA:3A:A8:F5:73:BB:B1:32:8D:ED:59:47:DC:8B:4F:B4:64:3F
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019C427DCB51309F816ECB23071395A59C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          0FD9
Signing time:             Mon 09 Feb 2026 13:01:06 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:06 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:06 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: blrkwbqDB6vD3gufbyLQnCp5F8rMYEzKLYebiuEyg1k=)
                          2: ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (hash: rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:cb:51:30:9f:81:6e:cb:23:07:13:95:a5:9c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Feb  9 13:01:06 2026 GMT
            Not After : Feb 10 13:01:06 2026 GMT
        Subject: CN=cba5fa3aa8f573bbb1328ded5947dc8b4fb4643f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:09:55:7f:fb:2f:4f:2e:a1:0d:82:87:27:
                    13:cc:8b:25:1f:3d:fa:04:19:40:92:e5:4c:1b:08:
                    b6:c8:77:82:0f:17:ba:c4:e9:6c:b3:80:fe:d9:1a:
                    25:5b:d6:78:a7:74:fd:b5:43:75:6e:ce:c0:cc:09:
                    8c:f8:a4:15:cd:06:d9:96:20:3e:c0:19:53:a2:de:
                    25:24:a9:46:12:79:48:60:c6:ee:d7:d6:6b:82:79:
                    1e:4d:5a:ac:f0:9f:56:b4:26:89:26:a6:ef:c6:34:
                    b0:e6:6f:fe:20:e3:7e:d4:21:19:9f:4d:73:7e:5f:
                    c1:ef:2a:03:09:ee:79:cc:1c:32:53:18:7e:e0:ce:
                    7e:57:66:9e:a9:b1:91:79:61:83:17:e1:9c:79:3e:
                    4d:4d:1d:64:4b:c3:3d:b8:7a:7c:a6:24:1e:55:f6:
                    3c:6f:ba:e6:de:4e:14:9a:36:af:98:53:d0:c8:d5:
                    74:bb:50:6f:d8:b8:11:b8:03:59:63:d4:9f:8f:a3:
                    78:88:80:fc:19:a6:aa:32:d3:23:0f:49:ff:33:70:
                    4c:d0:97:69:37:9f:76:f8:a7:af:72:a2:42:f1:ad:
                    14:bd:1e:de:c4:dc:7d:e5:ca:18:5b:5d:db:3d:69:
                    36:4f:cf:42:cd:55:8f:a3:80:a7:01:c5:ab:d7:d7:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:FA:3A:A8:F5:73:BB:B1:32:8D:ED:59:47:DC:8B:4F:B4:64:3F
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:e7:91:b9:da:cb:5e:37:03:09:24:f2:33:71:00:8d:c7:
         15:08:98:49:06:96:f4:c8:e1:26:47:f2:96:d5:84:3c:e9:cc:
         ea:ba:b5:d1:f8:a6:fb:b4:d3:ae:b3:e4:d7:49:52:14:34:5a:
         42:03:6f:15:ed:c0:84:70:1a:99:1d:11:da:e1:57:19:27:05:
         31:52:f9:54:bf:3d:1b:9d:41:bc:f3:4e:25:49:6d:ab:40:4a:
         0f:46:7c:9e:48:ed:fb:16:8d:11:eb:e9:41:d5:54:3f:58:22:
         54:7a:93:07:87:d5:d3:68:6e:71:f4:8e:ab:7e:62:c0:17:91:
         af:77:ae:64:f7:17:38:24:d5:42:7d:e5:24:8d:7a:26:6e:84:
         11:54:a1:de:60:31:41:73:c1:bb:09:6d:f9:dd:df:a7:a7:06:
         a9:97:d2:29:22:a2:13:27:f4:e7:79:d9:4d:67:63:00:61:8b:
         21:43:59:d3:be:7b:08:37:d1:42:7b:f2:62:5e:c3:17:ab:34:
         a7:5b:bf:b1:73:e9:4b:97:6f:bd:3e:02:51:06:a3:4f:77:c6:
         4c:70:ea:8c:cb:45:55:a7:90:6c:3a:85:36:45:2e:0d:eb:91:
         6e:11:60:54:a5:96:e7:7f:47:f7:4b:58:53:46:b2:1c:5e:a8:
         1e:47:f0:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfctRMJ+BbssjBxOVpZx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjNmNzNkNjRmNmRiZjgxZDUxZDM1ODA1NDgxNTY4Y2Rk
ODE4NzUwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD
EyhjYmE1ZmEzYWE4ZjU3M2JiYjEzMjhkZWQ1OTQ3ZGM4YjRmYjQ2NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/AJVX/7L08uoQ2ChycTzIslHz36
BBlAkuVMGwi2yHeCDxe6xOlss4D+2RolW9Z4p3T9tUN1bs7AzAmM+KQVzQbZliA+
wBlTot4lJKlGEnlIYMbu19ZrgnkeTVqs8J9WtCaJJqbvxjSw5m/+ION+1CEZn01z
fl/B7yoDCe55zBwyUxh+4M5+V2aeqbGReWGDF+GceT5NTR1kS8M9uHp8piQeVfY8
b7rm3k4UmjavmFPQyNV0u1Bv2LgRuANZY9Sfj6N4iID8GaaqMtMjD0n/M3BM0Jdp
N592+KevcqJC8a0UvR7exNx95coYW13bPWk2T89CzVWPo4CnAcWr19fkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMul+jqo9XO7sTKN7VlH3ItPtGQ/MB8GA1UdIwQY
MBaAFA8j9z1k9tv4HVHTWAVIFWjN2Bh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmIt
YjNhMDk0MzBjNjY1LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmItYjNhMDk0MzBjNjY1
LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8Xnkbna
y143Awkk8jNxAI3HFQiYSQaW9MjhJkfyltWEPOnM6rq10fim+7TTrrPk10lSFDRa
QgNvFe3AhHAamR0R2uFXGScFMVL5VL89G51BvPNOJUltq0BKD0Z8nkjt+xaNEevp
QdVUP1giVHqTB4fV02hucfSOq35iwBeRr3euZPcXOCTVQn3lJI16Jm6EEVSh3mAx
QXPBuwlt+d3fp6cGqZfSKSKiEyf053nZTWdjAGGLIUNZ0757CDfRQnvyYl7DF6s0
p1u/sXPpS5dvvT4CUQajT3fGTHDqjMtFVaeQbDqFNkUuDeuRbhFgVKWW539H90tY
U0ayHF6oHkfwNQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:26 2026 by rpki-client