This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File:                     IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier:          pN2mzIqscD0fNrBjUP5lZv/wu6S0s9DWzgy3dyPJjgw=
Subject key identifier:   DB:CA:66:94:AF:14:4B:58:BA:89:12:40:14:35:A9:96:F9:AF:4D:46
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer:       /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial:       019C43590434294621304489CC4446D9719E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number:          072A
Signing time:             Mon 09 Feb 2026 17:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:32 +0000
Files and hashes:         1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: 6neApFJo4GF3mHm9MhC6qyFKzaUGiKsTaIJzknt+FQQ=)
                          2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
                          3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:04:34:29:46:21:30:44:89:cc:44:46:d9:71:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
        Validity
            Not Before: Feb  9 17:00:32 2026 GMT
            Not After : Feb 10 17:00:32 2026 GMT
        Subject: CN=dbca6694af144b58ba8912401435a996f9af4d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:e6:a1:4b:3d:c8:25:9c:3a:63:22:c2:23:
                    46:95:ec:4c:37:c9:8c:1a:4b:53:55:82:ca:35:24:
                    1c:d0:8a:e4:d2:a9:39:59:bc:b4:5c:78:7b:c1:f9:
                    2f:4a:97:74:4d:4a:7e:aa:64:e3:35:3c:90:47:ff:
                    33:03:00:bc:e6:e3:16:94:21:0d:7a:83:17:8a:f0:
                    59:19:dc:25:c4:93:e7:87:9f:2d:2e:04:c4:48:00:
                    6e:60:0c:67:a4:43:8a:90:9c:58:84:c0:6a:af:26:
                    11:00:39:d2:b6:3f:4f:3b:d8:0d:b9:8d:f6:33:11:
                    04:c3:79:e1:2a:46:2c:03:32:70:58:2e:3e:25:2d:
                    bf:fc:2d:73:33:15:b6:bc:13:f0:7f:dd:bc:87:f8:
                    0a:74:51:7d:a4:e0:96:8b:1c:07:86:3f:29:80:8b:
                    74:8e:56:93:d5:74:ef:62:97:96:f4:55:ca:72:54:
                    f8:d6:61:1a:ea:4c:a7:60:f9:3b:83:bb:58:33:df:
                    56:1b:2d:c9:1e:c6:c3:c4:f0:6d:1a:b3:dd:97:27:
                    f5:3a:e1:59:a1:3d:64:94:4a:53:64:a5:51:02:2c:
                    66:d9:a9:54:0d:0c:e0:03:28:21:5f:8e:06:5b:1a:
                    8b:41:13:53:1b:37:d9:20:01:a5:d0:c6:57:35:af:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CA:66:94:AF:14:4B:58:BA:89:12:40:14:35:A9:96:F9:AF:4D:46
            X509v3 Authority Key Identifier:
                keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:61:de:23:8f:e2:5a:c5:af:a5:ce:57:02:54:f3:03:60:fb:
         6f:6f:9f:e7:04:67:d1:a1:fb:0f:a4:7d:8a:4c:68:e7:4c:c4:
         22:99:75:1c:53:dd:f2:49:63:d9:ab:74:54:2d:8a:51:19:35:
         60:b2:4b:b8:13:0c:c0:15:99:98:1d:2c:cc:d8:1a:c3:33:36:
         84:78:a3:42:15:9f:59:73:f5:db:c2:5c:35:8c:64:2d:4c:8e:
         4a:fe:15:81:a6:58:7e:fa:4b:b0:2f:c1:26:3c:2f:f7:0c:7b:
         1e:53:b4:e9:e0:f6:fe:ea:c7:91:38:cd:99:0c:63:98:d1:a3:
         96:16:85:0b:54:81:35:3f:52:8c:61:6b:d7:86:7c:a2:84:a3:
         3a:d6:ea:8c:56:21:a2:4c:5a:24:88:4a:21:f2:27:99:cf:0d:
         07:ff:00:7d:c6:00:6e:9e:dd:cc:5b:76:b2:84:8d:d6:02:de:
         cb:04:ca:c8:b0:5a:1d:93:14:dd:0d:d1:22:d0:d2:35:54:42:
         f1:12:cf:bc:12:ae:35:ed:f9:29:e2:f3:80:88:9b:eb:84:01:
         ed:8a:61:4c:79:13:22:ad:5f:10:6f:8b:13:01:55:90:01:7e:
         29:1e:c8:a6:87:05:c8:5e:2a:fe:5e:3b:36:a9:5d:88:83:1f:
         47:bf:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:55 2026 by rpki-client