This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File:                     DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier:          Ehx0W719ZL9ra2L/OBZ29xYBn3v+CoVYmjEuxad/l+Q=
Subject key identifier:   9E:4C:5A:C6:DD:1D:63:6A:39:CD:F6:A6:A9:98:C1:2F:EA:02:0C:B4
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer:       /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial:       019C42EB32B7A8ACA075B5DEB9C5AF92A182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number:          0FEC
Signing time:             Mon 09 Feb 2026 15:00:35 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:35 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:35 +0000
Files and hashes:         1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: oYDXGzj48NPB5a3cUcnX88DQSk8xSxiEoGw6yJ+ezbY=)
                          2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:32:b7:a8:ac:a0:75:b5:de:b9:c5:af:92:a1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Validity
            Not Before: Feb  9 15:00:35 2026 GMT
            Not After : Feb 10 15:00:35 2026 GMT
        Subject: CN=9e4c5ac6dd1d636a39cdf6a6a998c12fea020cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:83:44:b0:93:bd:fd:2b:50:79:ca:1f:c1:14:
                    7f:75:2a:0e:53:7f:30:15:a9:84:8c:86:fc:b3:fe:
                    ed:dc:4b:0e:52:bd:fa:82:2d:b4:54:f9:24:9e:f5:
                    0f:3a:36:8e:0c:3b:ee:c3:e8:7f:59:38:be:cb:68:
                    a5:30:c9:47:0d:f5:99:02:42:ed:b6:69:a6:64:e2:
                    89:21:6b:3f:25:15:76:89:c9:9e:72:29:b5:30:dc:
                    04:c2:5e:cd:2a:6e:f4:8c:be:7b:a4:43:a9:55:61:
                    80:74:3e:40:47:4a:f2:95:48:21:0d:04:95:8f:37:
                    ba:aa:92:32:af:a5:7f:17:76:bc:d5:fc:10:e9:31:
                    1b:d9:dc:f1:a8:2d:99:26:6b:ab:00:ab:9b:82:45:
                    84:68:3d:c8:02:e9:00:2b:6f:d8:63:6a:8c:72:65:
                    ca:b1:ed:d4:d3:95:82:da:e2:26:0c:f1:ea:a3:37:
                    ad:57:1d:aa:5e:38:c1:a7:c9:cd:f1:92:7a:50:a3:
                    b7:ac:c2:a3:dd:68:3c:21:b7:a6:fd:9e:c5:34:13:
                    12:8a:b6:be:b6:92:a4:5b:82:d9:bd:03:62:77:86:
                    73:80:ba:94:80:7d:cd:fb:89:3a:0d:16:57:47:89:
                    fb:e3:22:92:2c:1e:0b:06:7b:18:ff:79:87:3b:05:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4C:5A:C6:DD:1D:63:6A:39:CD:F6:A6:A9:98:C1:2F:EA:02:0C:B4
            X509v3 Authority Key Identifier:
                keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e1:23:a7:17:5c:c5:60:1b:87:ca:27:a7:a0:2a:ae:9b:17:
         f1:10:75:11:e0:34:b3:0f:2f:3a:46:e6:ba:7a:63:85:ca:9c:
         6e:38:09:81:d3:c8:f3:91:5a:16:fb:82:21:60:b4:bc:c8:ec:
         95:63:9d:31:50:e6:e9:11:54:17:bf:42:af:89:f8:52:63:80:
         8a:91:65:97:94:0b:a6:3e:38:64:dd:1d:13:4e:47:d5:ea:f7:
         2a:5c:1a:43:63:17:d1:42:40:c4:cf:84:96:ae:45:3c:9b:92:
         9b:ee:06:5c:38:96:bb:51:2b:7c:91:59:94:af:cb:bb:80:ec:
         9c:b0:7a:9a:41:32:3d:aa:4f:bd:bb:70:9e:b9:35:44:c7:fc:
         2a:68:c1:56:b1:e6:f8:1d:0a:06:f1:55:a3:c0:8f:f5:8f:f0:
         22:35:0a:40:f6:ae:83:61:23:57:c9:5a:6f:fb:37:e4:20:6f:
         75:54:53:f7:01:a9:e4:64:9d:79:7c:54:fa:36:42:b6:e5:9a:
         08:48:66:76:a0:86:3f:50:13:fa:30:99:1d:97:88:1f:99:aa:
         32:e3:c7:72:ac:e0:a8:78:e0:82:8a:24:4d:c6:b7:35:d4:f7:
         29:a1:0e:e8:43:40:e4:3c:e7:12:03:75:38:45:26:12:4d:95:
         ad:c1:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:45 2026 by rpki-client