This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File:                     DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier:          yRZRzlC4RD/zFnZf+H0TmfHTYHGG4XccusNHVzTqGS4=
Subject key identifier:   CE:4F:BA:A6:2D:E1:88:9A:27:F5:89:BC:A8:BF:D2:2F:04:F4:CD:13
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer:       /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial:       019C44A2DAB190B08839EDA3B3D6FABC263F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number:          049D
Signing time:             Mon 09 Feb 2026 23:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:49 +0000
Files and hashes:         1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: MWDIPye4jZh4oNS94wvDyzc31MdXko70F8WX/s8mR8g=)
                          2: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (hash: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:da:b1:90:b0:88:39:ed:a3:b3:d6:fa:bc:26:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
        Validity
            Not Before: Feb  9 23:00:49 2026 GMT
            Not After : Feb 10 23:00:49 2026 GMT
        Subject: CN=ce4fbaa62de1889a27f589bca8bfd22f04f4cd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:19:6f:9c:cc:32:21:ad:0f:50:04:5d:20:
                    41:a1:a4:74:50:7d:d3:46:81:82:45:78:85:5d:43:
                    9f:fa:9f:45:d3:66:16:c6:ba:d0:31:3f:7f:8d:12:
                    cf:84:d4:43:05:cb:af:8b:8b:c8:ee:ee:68:e1:4f:
                    c0:ca:44:8a:59:cf:e5:65:9c:e2:66:aa:26:01:7f:
                    21:e5:3a:c6:c9:71:bf:f1:66:cd:b6:59:0c:8f:64:
                    0b:37:62:03:9f:ac:fa:5f:14:f0:cc:b6:7e:07:47:
                    a8:67:fc:a9:fe:8e:61:ef:97:65:db:ca:73:7e:31:
                    85:68:f3:bc:0f:4a:30:e9:2b:7d:4c:c1:e8:1b:7c:
                    74:e0:45:fc:02:0d:15:9f:de:e2:d3:ec:ad:91:39:
                    ec:93:2f:e3:a5:38:b5:68:50:2b:a2:ad:0f:7a:d0:
                    59:36:2f:d8:6f:5c:88:05:b4:94:3f:cb:c2:4d:61:
                    bf:9e:fc:52:c7:0d:15:8b:fb:ce:d4:ec:b3:74:d3:
                    88:bb:64:c9:a1:16:29:75:34:67:e6:5f:9a:1a:13:
                    02:fe:52:44:79:ed:ab:35:79:7b:b5:cb:e8:ef:27:
                    3b:b4:46:79:30:47:9b:ad:60:2d:d4:d1:1c:57:61:
                    32:e1:4b:f4:67:59:a5:40:21:ba:f7:12:9f:85:92:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:BA:A6:2D:E1:88:9A:27:F5:89:BC:A8:BF:D2:2F:04:F4:CD:13
            X509v3 Authority Key Identifier:
                keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:95:bb:fd:02:5d:8a:a7:47:b3:0f:9e:de:6c:d0:d5:1c:7c:
         5b:d8:2f:54:6d:a7:33:2f:96:0c:c2:52:77:1c:1c:33:1f:c3:
         10:d7:73:01:b8:0b:4b:f3:d4:75:72:1b:f2:31:dd:10:7b:b4:
         d3:f1:bf:fa:ad:3f:66:3c:78:bd:29:ac:22:dc:a0:5b:99:52:
         d3:22:dc:f8:03:f0:c7:ff:f5:14:71:f6:f1:f8:e1:8b:2a:79:
         70:e4:e7:7d:11:e5:5d:02:2c:fc:8e:db:34:84:04:f2:22:48:
         e9:55:bb:02:d8:2d:82:42:e1:f2:48:17:44:92:94:84:cc:93:
         7e:b5:3b:75:b1:48:bf:4e:7a:38:6a:c4:df:f9:e2:5e:b4:e0:
         15:72:5f:70:1a:e2:29:2f:1f:80:91:92:df:db:8d:29:68:13:
         9b:19:1a:14:4a:2e:bf:7c:48:2a:82:29:1a:82:f8:37:3c:af:
         70:ef:15:98:5c:78:01:c2:b8:fa:81:44:5e:3a:7a:fb:e8:6d:
         82:af:87:26:ff:f5:67:7b:9c:90:63:65:e7:9a:a2:d3:e7:c1:
         d3:84:c7:9a:a0:e8:25:33:89:03:f9:9b:d3:e8:77:85:61:20:
         5d:52:f4:ad:b9:c5:02:ea:69:89:4f:45:43:09:af:4d:00:11:
         c9:01:78:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:51 2026 by rpki-client