This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File:                     DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier:          KmTBbE/62XYL/VlT1i5YZHGsoJ6nrMWN+HkCSgXvXIU=
Subject key identifier:   83:F4:4C:86:AA:CD:97:21:F7:2E:08:81:42:68:8F:83:12:EE:F5:19
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer:       /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial:       019C443489C8BF8274D8DAB565C31BDD3F8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number:          02E9
Signing time:             Mon 09 Feb 2026 21:00:19 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:19 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:19 +0000
Files and hashes:         1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: 0hY5KnoiK6LCXIKMivjorDP93swhCm1XJe5cCF2k4JY=)
                          2: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:89:c8:bf:82:74:d8:da:b5:65:c3:1b:dd:3f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
        Validity
            Not Before: Feb  9 21:00:19 2026 GMT
            Not After : Feb 10 21:00:19 2026 GMT
        Subject: CN=83f44c86aacd9721f72e088142688f8312eef519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fc:82:7e:da:8f:43:a1:4e:52:d5:ac:41:82:
                    51:08:54:8c:16:c8:4d:8d:c7:6f:a1:4b:95:54:16:
                    2c:03:99:56:72:50:a5:49:ae:f1:24:60:9e:63:f2:
                    4b:f6:59:12:8f:7c:fc:90:9d:96:93:8b:56:c9:47:
                    2a:61:b7:76:e7:aa:81:94:64:67:14:c7:23:00:94:
                    22:d6:a5:f0:4c:4f:d5:45:08:4a:7e:17:30:2c:f1:
                    ac:59:91:be:1e:94:bd:e9:22:8a:09:e6:dc:46:41:
                    fa:72:96:10:e9:ff:cb:75:33:42:f0:ef:94:fd:69:
                    0a:77:71:0b:56:56:d2:ac:d2:9f:f3:b5:fe:6e:63:
                    37:ee:3d:5e:2b:68:fb:db:33:5d:1f:ab:dd:32:03:
                    1e:13:4b:43:f8:bf:a1:d7:a2:15:21:00:fa:99:7c:
                    8d:60:eb:05:61:4f:f6:be:33:a7:9e:c3:15:61:e8:
                    16:40:d0:4f:75:bf:b6:45:4e:f4:48:1b:b4:d7:f9:
                    31:92:38:75:4a:02:93:72:ff:7b:f2:65:ac:c8:14:
                    ab:d3:a4:43:54:73:48:51:0a:57:99:8f:b5:8e:40:
                    0e:44:ac:d5:ce:2c:71:19:ce:a7:78:54:df:89:06:
                    91:1b:35:a3:aa:82:85:28:2c:6c:8c:f8:9b:a6:e2:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F4:4C:86:AA:CD:97:21:F7:2E:08:81:42:68:8F:83:12:EE:F5:19
            X509v3 Authority Key Identifier:
                keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:0c:0e:cc:0f:86:65:d1:d2:dd:b8:83:1a:8c:b9:06:61:
         1e:07:db:d1:4c:ce:65:4d:65:24:fc:c4:35:0c:65:e1:dd:e4:
         b3:0d:b8:5e:fe:ec:36:03:ad:01:5b:9a:18:82:82:fa:20:ff:
         6d:de:68:25:9d:f9:f1:73:90:e7:1c:09:7a:25:f2:86:14:02:
         67:ae:60:f9:f8:8b:4b:30:08:94:ca:ee:ce:82:c7:fa:06:a8:
         67:bc:a7:73:68:38:17:bd:ff:30:8e:92:f3:be:29:d7:96:8e:
         a2:31:8e:2c:cc:0d:7e:da:f4:1c:ef:07:2f:ce:45:b4:56:61:
         40:a4:38:bb:a0:8d:9e:e9:81:39:30:6c:e6:0e:b8:f4:87:e6:
         ca:4d:41:fe:1f:a9:65:5b:ed:b2:cb:4d:f3:18:39:b0:9c:8c:
         da:2d:7f:ea:37:8d:a0:97:06:c8:fa:1a:fa:0e:26:68:65:bb:
         a0:27:fe:f5:24:b3:6d:18:85:cd:86:d3:60:d3:81:90:5d:39:
         ce:1a:00:26:7d:61:7c:6c:3c:f0:ca:91:c9:9c:5c:1c:ed:92:
         dd:26:e5:94:c0:8c:f3:4a:46:7b:b0:f0:e1:6d:7e:47:ee:45:
         71:31:17:8d:27:4e:e4:87:7e:5a:98:e0:d4:b6:c6:72:d9:e5:
         ae:97:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:58 2026 by rpki-client