This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File:                     DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier:          oBy1LOPGeV1FIizjtF1ACeQez23U6yJo2xkivhK60XA=
Subject key identifier:   C9:91:D3:81:47:BE:02:6A:FA:A6:FF:E1:76:B3:DA:7A:41:5A:5B:21
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer:       /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial:       019C4358E452B3005566E5537FB9D65D862C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 17:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:24 +0000
Files and hashes:         1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: TvRnDkuJ/F2ydtPOIz8212XQmrOwbzS33u4Kz6WpXNo=)
                          2: FOy7M5QfwLhnleJj9CXN45P03n0.roa (hash: ZwAa4LHTg8NRy6qzC3/r4Eh5zisKi17JWU8PiKVfqxk=)
                          3: rPrtjH1Zaddd3LQfktc8-OPOsGA.roa (hash: g5QcyO1/rh6YC2cKBEwfUlrViqov7ad2W2RK1YKQpXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:e4:52:b3:00:55:66:e5:53:7f:b9:d6:5d:86:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
        Validity
            Not Before: Feb  9 17:00:24 2026 GMT
            Not After : Feb 10 17:00:24 2026 GMT
        Subject: CN=c991d38147be026afaa6ffe176b3da7a415a5b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:d1:48:b1:71:19:78:16:ef:09:1f:65:d8:
                    6d:49:6b:bf:f3:42:b6:e3:94:fa:eb:00:9f:12:23:
                    03:c3:58:2a:65:fb:92:7b:4e:00:ca:bf:3a:47:f5:
                    b5:3e:80:fa:42:ee:9f:fd:8f:d0:37:2a:3e:34:f9:
                    3f:ca:fd:6f:50:5d:51:5a:37:5c:a6:e6:be:66:d5:
                    a5:af:fa:f8:55:fa:c2:77:82:2e:68:55:69:ff:eb:
                    db:11:39:8b:22:e6:c2:db:13:fc:a2:26:51:42:07:
                    7e:8a:22:9c:1e:7c:b9:df:ac:72:67:98:3b:70:1f:
                    e9:b9:da:92:79:51:58:24:f6:e4:96:1b:48:65:d6:
                    c5:20:76:6c:93:d6:a3:e5:3f:02:28:22:f5:0c:f6:
                    46:d8:63:a2:0e:53:f6:1e:5e:25:62:26:d6:28:46:
                    cf:09:08:c8:62:23:fc:0d:f6:35:48:f5:f9:53:1b:
                    eb:80:b9:8c:b2:7d:6f:ce:7f:52:59:98:7a:92:a4:
                    c2:3e:c0:9c:51:50:29:de:f4:4e:03:be:6f:40:bf:
                    50:84:51:85:e8:a8:f6:63:e1:62:40:7f:81:92:e3:
                    ab:50:be:ef:5d:e3:4b:98:01:a2:65:fe:d9:23:f3:
                    6e:26:7e:95:06:64:e3:dc:48:8c:b3:07:12:6c:78:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:91:D3:81:47:BE:02:6A:FA:A6:FF:E1:76:B3:DA:7A:41:5A:5B:21
            X509v3 Authority Key Identifier:
                keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:b0:ab:ff:6a:e3:6b:dc:31:cd:88:07:c1:76:75:f8:4f:
         b0:b7:b0:46:8d:00:fc:b5:53:49:c5:75:0f:b5:87:04:26:59:
         16:0b:f1:26:96:63:ee:15:45:2c:9d:94:53:93:2c:de:c0:ab:
         98:d4:82:00:13:b0:a6:e0:2d:53:99:82:86:75:b9:53:e5:ec:
         a9:8e:6f:91:7e:a7:ee:6c:69:60:6d:4a:c9:52:b5:cc:68:9c:
         e1:75:6f:5f:89:97:56:8d:a2:77:69:34:58:a9:79:43:58:1d:
         a2:30:d0:e6:00:2c:a3:e1:63:42:5d:cd:9a:cd:ff:c4:0a:5c:
         77:b9:64:12:c9:50:d9:43:eb:4d:af:ce:cc:76:07:d5:ff:04:
         80:f7:e1:ee:ee:ff:0e:97:4e:9c:9d:4b:c9:0b:39:e9:d5:c1:
         b4:de:87:b9:71:87:ec:6e:78:6d:1d:d1:02:c6:74:ae:c2:c8:
         b0:d6:27:fa:e2:3e:28:1a:5d:c5:3e:95:16:14:54:6d:9c:bd:
         6b:7c:ae:05:f5:0e:e8:05:de:42:47:0b:5f:9e:cb:fb:37:57:
         2d:09:2c:8e:8b:e1:b8:8c:07:64:c8:77:e7:66:bf:2c:c0:46:
         64:7c:fc:f0:40:0b:c3:89:53:cc:bc:cb:4a:3f:32:79:85:1d:
         bf:fb:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:57 2026 by rpki-client