This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File:                     dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier:          FXQgMytf4J5I6gaY6Ftve3eABuBmv2iSDGOOYjbnAZE=
Subject key identifier:   06:98:41:5D:B5:26:8E:08:C2:2B:FD:3F:00:28:CA:ED:1A:7E:A0:CA
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer:       /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial:       019C443517A887DB9E9AA43C0F11544A869B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 21:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:55 +0000
Files and hashes:         1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
                          2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: W15QF0ZwSMPD0hRR3pFQHiH6iqx4YAmKOyXzdpKwWpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:35:17:a8:87:db:9e:9a:a4:3c:0f:11:54:4a:86:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
        Validity
            Not Before: Feb  9 21:00:55 2026 GMT
            Not After : Feb 10 21:00:55 2026 GMT
        Subject: CN=0698415db5268e08c22bfd3f0028caed1a7ea0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:da:f9:7a:05:01:ba:50:17:9b:ff:0d:ad:
                    ab:a2:9a:a6:19:5b:25:02:1f:c1:0e:25:f5:d6:ce:
                    63:b5:ac:65:a1:eb:37:0c:2b:45:1a:6d:61:24:20:
                    d7:0b:b8:71:02:c9:13:06:09:c3:92:b9:d5:dd:a7:
                    cd:ee:32:dd:22:57:8d:3d:43:fd:30:bf:84:99:b9:
                    cf:88:c0:b4:46:fa:3b:a3:dc:68:5e:d4:08:38:69:
                    32:ad:7c:09:e0:63:bd:4d:3e:03:a3:83:d7:8e:45:
                    05:f6:23:73:5f:5a:76:29:92:00:ab:5b:ce:e6:61:
                    51:47:65:bd:58:7a:5e:ae:b1:d3:69:03:6c:1e:b4:
                    32:15:81:44:c2:18:36:55:b2:b2:2e:45:67:44:c4:
                    05:9a:93:31:10:ba:f3:45:24:33:88:02:da:24:33:
                    0a:b4:b3:82:67:f8:94:3d:b1:44:db:74:54:26:de:
                    d2:26:ea:64:73:ed:56:ef:30:ca:12:f5:f7:c0:37:
                    7e:51:ef:d7:a9:2b:fa:77:76:6a:37:6b:ce:c3:f5:
                    bb:e8:b4:6c:87:aa:8d:19:62:55:69:73:1e:8c:54:
                    89:c0:95:07:7d:ab:1a:f8:31:6e:16:8d:33:7f:3a:
                    d2:e3:da:b1:a8:86:5a:4b:07:c4:74:f3:32:80:4d:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:41:5D:B5:26:8E:08:C2:2B:FD:3F:00:28:CA:ED:1A:7E:A0:CA
            X509v3 Authority Key Identifier:
                keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:d9:68:bf:b6:1d:ac:da:93:10:da:c3:e4:e0:a1:70:97:
         c9:58:ba:12:1d:19:20:d9:4a:90:90:77:c7:56:67:7d:d1:f6:
         3f:f8:be:d5:f6:fe:a8:9f:ad:37:64:45:4a:5e:28:44:92:b8:
         3c:af:09:57:6c:89:85:ed:a7:a6:26:f5:35:9f:f1:b7:49:31:
         14:d9:ba:aa:cf:9e:94:63:7b:75:38:1d:0d:c9:d0:e2:f7:78:
         6b:6d:b9:52:2d:6d:26:70:76:66:a0:ad:ed:b6:42:58:4e:2a:
         3f:65:aa:18:71:fa:a7:7a:99:4a:c2:74:13:e9:00:5e:d8:34:
         75:f5:44:a0:84:0e:d2:e0:f6:e3:df:25:1a:9b:51:f7:61:b8:
         ee:37:ef:23:c0:6d:2b:61:31:60:3d:5c:f6:30:01:f4:29:4d:
         7f:eb:5f:29:24:ff:2f:41:c8:73:f9:63:71:88:e5:75:5f:4b:
         b5:ca:a5:38:6f:01:7f:d6:e8:cf:45:91:96:d5:4f:89:a5:b8:
         0b:fb:36:70:2b:c0:10:bd:33:cd:c7:75:47:6a:a5:69:8d:54:
         dd:07:d1:a9:26:09:bb:48:f7:5a:75:0e:0d:79:cb:52:bd:45:
         3b:db:0b:1d:9c:62:d8:67:00:d2:e8:15:ff:af:5c:be:eb:6e:
         50:53:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:19:07 2026 by rpki-client