This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File:                     DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier:          FIHqfHOha1Lbnf/N+wRO8+TUANFbUGnY/MGbLHt3G/Q=
Subject key identifier:   A7:D9:F9:2D:7B:45:D5:5D:42:CD:6D:89:85:A1:6D:ED:1E:04:26:69
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer:       /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial:       019C420F8E3C7BE3E2353F48E86014F4BBF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 11:00:41 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:41 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:41 +0000
Files and hashes:         1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: QX2C/+xlZHPI9gp2C6ghJ6ZWOevxRvQa9ynNJmdn6Iw=)
                          2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:8e:3c:7b:e3:e2:35:3f:48:e8:60:14:f4:bb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
        Validity
            Not Before: Feb  9 11:00:41 2026 GMT
            Not After : Feb 10 11:00:41 2026 GMT
        Subject: CN=a7d9f92d7b45d55d42cd6d8985a16ded1e042669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c0:e6:b0:38:ba:37:f2:d2:bc:bb:a6:d0:18:
                    f7:38:30:18:03:e8:61:86:42:93:aa:d0:77:64:d9:
                    cb:de:84:f6:4f:23:05:02:18:79:c3:55:63:0b:74:
                    5e:73:f7:c9:44:d6:b1:ed:03:64:3e:74:01:98:61:
                    d3:75:29:d4:1f:a2:41:10:7a:8d:97:03:a2:8e:be:
                    ba:4d:cd:27:d9:12:42:93:0f:2f:fa:59:a7:9b:a7:
                    9c:74:73:dc:77:1c:a4:3e:91:13:48:ed:81:61:ad:
                    d5:4f:94:af:c4:27:88:46:a4:b5:21:e1:2c:01:a9:
                    33:de:27:8f:a9:23:a0:f3:15:af:a5:3f:39:b6:63:
                    29:9c:a8:9d:ac:6b:d6:9b:36:1f:67:6d:d8:6d:7a:
                    cf:db:e7:8c:66:77:18:d6:3f:93:b8:a6:16:33:0d:
                    89:20:88:93:c2:b6:eb:ef:52:c1:ad:96:d9:57:ff:
                    b9:43:fc:aa:dd:e5:e4:b2:79:ff:56:ef:44:4d:82:
                    50:21:f2:bf:80:9c:c4:6f:f1:3d:09:4c:d1:49:b7:
                    8d:fa:39:5b:80:99:d4:6e:5c:a8:37:68:e4:22:01:
                    16:06:97:7c:42:e2:df:1a:44:c6:99:c9:ea:3c:45:
                    9e:22:b0:8f:26:cb:ae:4e:ee:14:9c:02:e9:24:90:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:F9:2D:7B:45:D5:5D:42:CD:6D:89:85:A1:6D:ED:1E:04:26:69
            X509v3 Authority Key Identifier:
                keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:65:e6:25:16:77:01:f1:53:f7:8c:04:f9:82:36:2d:f4:de:
         05:3d:d3:82:5f:31:d9:26:45:4d:a9:c1:ce:97:0f:b2:fb:a4:
         8a:6a:24:51:69:9c:d8:1c:aa:bd:4a:52:d1:ce:2e:58:f7:85:
         07:e0:37:81:e4:d1:f9:28:5a:b4:7d:4a:1a:ea:e3:21:05:01:
         cd:38:c8:43:5d:32:23:b1:01:4e:d1:e4:6e:36:e6:e0:0e:e0:
         74:9e:ff:f6:48:9f:95:0b:a4:83:30:c6:45:26:49:62:68:83:
         d2:60:60:55:99:d2:da:9d:9c:e6:3b:cf:b1:1d:5e:b0:f7:5d:
         11:06:75:c6:73:23:dc:bf:fa:16:da:3d:0e:98:91:e2:dc:b7:
         bd:11:96:59:1b:02:97:4c:f8:de:27:77:c6:f3:3d:38:fa:fd:
         8d:9a:2a:a9:35:60:93:5c:94:18:90:1a:df:d5:44:90:d5:07:
         43:10:7a:00:11:88:e9:68:3e:ae:63:16:25:a7:14:d6:a0:62:
         9a:b1:dc:93:dd:a4:db:8f:6e:7f:e2:e5:e8:3e:58:f0:9f:d4:
         0b:a5:ba:ec:ad:e9:62:70:e4:7f:00:16:58:e5:76:a7:99:6f:
         f3:3d:77:e8:5b:81:68:2b:4f:ce:3d:52:07:f8:4c:33:3b:d2:
         c9:a9:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:41 2026 by rpki-client