This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File:                     dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier:          5LlMPFlbAW07rMp0VHaoSvq1uSE6YN23EerSOkgZLQc=
Subject key identifier:   25:81:44:00:10:D1:44:42:C0:56:59:4D:07:20:ED:E4:BF:04:9D:6E
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer:       /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial:       019C4434BA3EE59AEA7BABD860D7FEB5BAB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number:          045A
Signing time:             Mon 09 Feb 2026 21:00:32 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:32 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:32 +0000
Files and hashes:         1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: DPkO5nQ4hT3UBCzuOc64S0jkH816h/0ZJ4ELDYzieFI=)
                          2: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (hash: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:ba:3e:e5:9a:ea:7b:ab:d8:60:d7:fe:b5:ba:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
        Validity
            Not Before: Feb  9 21:00:32 2026 GMT
            Not After : Feb 10 21:00:32 2026 GMT
        Subject: CN=2581440010d14442c056594d0720ede4bf049d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:ee:ea:62:14:b6:3b:58:08:54:36:15:9d:
                    cf:65:b6:45:c8:2c:54:a1:39:1d:85:b4:82:6c:38:
                    97:b4:af:b7:df:db:9f:88:13:01:41:fa:b4:ce:e7:
                    74:40:8a:7f:d0:ad:9b:48:19:df:8a:f8:fe:a9:58:
                    09:91:70:d0:5b:d7:f0:28:c4:d0:09:d0:69:3e:b6:
                    2f:1d:ec:4c:0c:28:f3:28:31:af:99:71:c9:c7:da:
                    cd:46:b4:7b:3c:54:b3:5d:0b:fc:32:23:41:c4:e1:
                    2f:99:d0:ef:ae:f2:70:47:6b:ca:c7:12:6c:0c:25:
                    9a:43:49:59:9e:e4:11:84:cd:5b:2a:d5:b2:76:2a:
                    49:08:22:8c:a1:15:cd:f4:cc:32:fe:49:64:1e:b2:
                    a4:20:87:9c:1e:23:92:5f:75:4d:bc:35:a8:f3:26:
                    3b:00:a8:31:1b:b8:7f:07:d6:35:35:e4:50:17:eb:
                    1a:c6:b4:74:79:b8:8d:08:a1:81:ed:af:56:bb:88:
                    ab:24:7e:4c:fa:83:f8:d3:b5:71:69:80:32:02:f4:
                    02:f6:cc:bc:6d:82:71:bb:59:b8:fe:a1:d9:17:66:
                    d5:b1:a4:43:2d:c9:76:ad:61:fd:3b:3f:f0:38:59:
                    7f:25:d7:ca:d2:8d:39:a3:c1:0f:cb:be:fc:95:15:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:81:44:00:10:D1:44:42:C0:56:59:4D:07:20:ED:E4:BF:04:9D:6E
            X509v3 Authority Key Identifier:
                keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:e1:b9:18:f5:65:37:d8:ac:b9:61:85:4c:24:55:9e:ab:
         1a:52:38:10:32:fa:8b:62:63:9c:89:95:d7:4d:37:69:00:ea:
         e4:95:7b:46:59:3b:56:a3:ce:e1:37:b6:21:b7:00:ef:92:1c:
         49:11:55:d7:56:fb:84:7d:aa:30:fe:c6:f2:f6:c0:39:0a:0b:
         cb:87:28:f2:59:86:09:00:0b:c4:8a:46:6c:93:46:24:e8:3a:
         67:27:2a:9c:5a:19:0c:0b:8d:19:f2:fe:bc:9a:f0:e1:39:9d:
         04:04:87:6b:6d:c6:84:08:bd:c0:9f:77:45:c2:ec:fc:b6:a2:
         f7:56:63:e1:6b:c6:4d:22:d1:d5:45:bc:da:71:c8:fd:a8:c2:
         14:2b:85:4d:41:59:93:fc:e6:3b:b2:7e:ff:4c:a1:65:af:d6:
         18:a6:ed:32:9b:e7:db:25:8a:90:1b:0e:a4:21:ae:7c:fb:f6:
         af:39:78:a8:c6:13:d1:f8:40:55:a1:7f:1b:5c:23:90:7c:d5:
         50:2c:5f:2e:71:29:8d:36:b4:60:a2:bd:0a:76:76:bc:ef:db:
         c1:d8:83:49:b3:c7:97:7a:7a:20:6a:30:c0:77:a2:7a:27:51:
         6d:e6:e3:af:d0:86:43:cf:ba:e6:4d:f4:19:5f:5f:3b:0d:07:
         5e:1e:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:57:15 2026 by rpki-client