This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File:                     dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier:          tIs1r3hVUPeTUZkZ9J+ZFZ2S10i06vuXtooFUixTI5E=
Subject key identifier:   46:1C:74:B9:6B:1C:98:87:B7:55:F4:FD:92:12:5C:F7:37:07:4D:C3
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer:       /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial:       019C41A1D495C91E521CEC0D9990CD464D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number:          129E
Signing time:             Mon 09 Feb 2026 09:00:50 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:50 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:50 +0000
Files and hashes:         1: _QeltRwVrmIgCr-eo6LxBUwzpXY.roa (hash: q8bq7ENqcKxVLtJa6stK4wblRlHycCi1u+gxzHveo3E=)
                          2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: Hcfl8FDXllu87bBRInFFnGX6S/nj3I4EAt3EsxjIRhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d4:95:c9:1e:52:1c:ec:0d:99:90:cd:46:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
        Validity
            Not Before: Feb  9 09:00:50 2026 GMT
            Not After : Feb 10 09:00:50 2026 GMT
        Subject: CN=461c74b96b1c9887b755f4fd92125cf737074dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:e2:42:5d:8c:22:13:c6:ad:b1:b8:31:97:
                    46:c7:c6:f4:7b:5a:da:3e:10:65:0b:44:5f:94:94:
                    37:b4:21:08:da:39:fe:ac:08:cb:00:e3:2a:8a:fd:
                    83:0f:3b:d7:d7:1e:ae:c4:c1:72:7b:1c:b3:46:9f:
                    c5:7a:a5:aa:87:ec:54:38:f3:df:20:aa:d3:12:1a:
                    94:83:0b:b0:2f:ac:c5:da:39:af:43:9c:19:9b:12:
                    1b:32:8e:74:c2:9f:db:ba:0b:47:c5:6d:e6:33:4a:
                    fd:7d:54:a4:7a:94:f6:bd:db:9b:3a:74:4b:25:93:
                    0f:3a:3e:bc:f0:87:cc:be:71:ff:5c:11:46:fa:e7:
                    dc:c1:3b:35:83:39:92:69:4b:2b:2d:f1:60:50:82:
                    6c:5f:3f:f0:74:a9:dc:d5:f8:91:aa:65:14:4a:4e:
                    d4:e4:d7:47:cd:d2:65:3d:7e:54:77:46:9c:6b:b7:
                    6b:bf:13:74:36:41:eb:82:3b:83:ff:50:c7:67:71:
                    b9:f8:01:4d:13:3e:23:93:52:23:f6:37:f5:ec:0a:
                    2b:fe:06:29:63:fe:29:4e:4e:3e:9c:9b:21:45:01:
                    2a:bf:20:fb:fa:ea:73:59:9d:27:4e:db:03:b6:01:
                    52:4e:e8:1c:73:26:76:a4:d8:ea:76:35:1d:00:ba:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1C:74:B9:6B:1C:98:87:B7:55:F4:FD:92:12:5C:F7:37:07:4D:C3
            X509v3 Authority Key Identifier:
                keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:24:9d:76:aa:a2:a9:56:ff:24:34:6a:56:21:a3:b0:8e:
         c3:41:3b:5b:54:55:b2:bf:1b:c5:7b:02:33:18:e4:fe:5a:67:
         5a:a3:0f:73:d6:69:70:2d:94:cd:42:99:19:40:f7:67:97:7c:
         57:26:f0:4b:35:f4:8b:34:85:7c:cd:43:54:c9:95:3e:18:09:
         b0:bd:09:b1:a2:05:a4:e6:af:53:5a:ae:fb:de:c5:b6:12:d9:
         d7:07:65:66:64:d3:aa:38:3f:21:b2:d6:0a:a1:48:64:15:bf:
         16:aa:49:12:ad:63:f5:0b:9f:c1:cf:3a:9f:d2:42:1c:48:03:
         b0:9e:1e:68:68:9b:a0:61:b7:0e:a4:24:f3:c6:aa:42:69:4c:
         0e:7b:de:eb:97:3e:dc:15:18:e6:e7:be:dc:c4:52:fd:86:1b:
         3e:24:d1:1f:95:81:3d:fc:ad:ea:d3:d0:18:80:48:e6:32:81:
         b0:8e:af:87:66:d1:5d:b8:f3:2b:7a:25:6b:04:4a:ee:a2:0f:
         18:87:4e:de:c8:f3:5e:e7:fd:65:5b:20:8f:fa:bc:f8:f7:93:
         ac:8b:a0:f3:7a:16:2a:c2:95:00:10:e6:3c:3d:db:b6:0d:5a:
         16:e4:c0:42:dd:1e:3c:8e:63:1b:61:1d:09:5c:d5:03:9b:25:
         32:de:d3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:38 2026 by rpki-client