This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          9Ov3PWOvo7N5R7TjqLZg6feO1m0vKdMwRs1v8fDqiQ8=
Subject key identifier:   8D:4C:A7:05:00:B7:1E:1A:C8:E7:4A:8F:6C:0E:C7:14:CD:82:5F:4A
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       4163FF1F446668B9AD9A0335A29364E6CB9FEACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          0435
Signing time:             Mon 09 Feb 2026 06:57:12 +0000
Manifest this update:     Mon 09 Feb 2026 06:52:12 +0000
Manifest next update:     Tue 10 Feb 2026 09:04:12 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: gpJCMW6m2eNlRUaWksDbqo6HkrKhASO8yrcOxwA+D10=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:ff:1f:44:66:68:b9:ad:9a:03:35:a2:93:64:e6:cb:9f:ea:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Feb  9 06:52:12 2026 GMT
            Not After : Feb 10 09:04:12 2026 GMT
        Subject: CN=8D4CA70500B71E1AC8E74A8F6C0EC714CD825F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:2b:72:ad:cb:8b:2a:58:21:01:31:ec:55:
                    07:1a:d2:62:3d:f0:1d:dc:d6:1f:87:ad:6f:10:c6:
                    89:54:6a:a5:39:57:ad:4f:cf:de:87:06:35:c0:46:
                    5e:df:d1:bd:c9:5b:e0:e3:b9:98:bc:72:31:d9:61:
                    68:f7:cd:eb:e3:cf:0f:f1:16:7f:1e:54:47:46:48:
                    2f:24:64:af:30:47:d6:58:23:26:f6:d9:08:ff:ac:
                    9b:48:bf:91:c3:30:34:7c:8f:fd:77:60:51:6f:37:
                    39:18:13:5c:40:28:7e:0b:fd:3c:6a:38:47:30:2a:
                    20:4c:41:7a:aa:33:25:e9:ee:53:5c:2b:06:6f:2e:
                    8c:48:a5:45:9b:de:50:2b:ed:6e:90:e0:24:e6:84:
                    f9:1d:43:a7:aa:19:96:ba:ef:5c:63:2c:86:e0:b3:
                    36:be:ba:75:22:4c:82:ae:dd:24:33:03:59:8f:62:
                    c9:91:f0:24:8c:9f:40:3d:0b:44:ab:98:8a:2f:72:
                    7c:69:86:69:bf:89:03:9b:3e:48:3e:85:f0:b4:25:
                    d2:39:c5:99:33:04:e2:f1:22:e8:d0:75:a7:d4:b8:
                    cf:f7:ab:6f:d8:68:17:09:75:19:b7:74:4f:5f:c6:
                    fb:db:85:85:b4:06:c4:a4:ef:25:1e:25:d6:3c:15:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4C:A7:05:00:B7:1E:1A:C8:E7:4A:8F:6C:0E:C7:14:CD:82:5F:4A
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:36:ef:6b:4b:57:fb:7a:66:94:1d:4d:66:df:7f:6a:3f:
         0f:26:8d:e6:c8:47:ee:cd:f4:50:10:63:aa:18:f5:bb:fa:51:
         09:bc:d8:5c:27:35:1e:4a:11:b3:b8:2a:05:e5:b9:7e:00:a4:
         8a:72:a7:bc:04:62:d8:e7:94:41:22:2d:22:50:98:29:d0:30:
         57:74:96:c9:86:21:fb:97:9b:4a:17:db:70:af:5d:7a:2a:dc:
         3e:8a:fa:10:71:90:84:fb:7e:d0:57:85:05:34:ab:50:3e:f6:
         ce:a4:0c:1f:a9:c3:1a:5e:5b:df:32:8d:a2:9c:c2:95:7a:59:
         da:09:2e:a0:81:c9:79:82:fd:78:a7:5d:aa:87:bf:ae:af:61:
         60:92:aa:78:89:0d:a5:70:cb:cd:d8:6d:9d:74:5c:90:09:8a:
         c6:1f:c6:b2:91:e8:ca:e9:a3:fe:fd:88:78:45:ec:dd:88:1f:
         f8:4a:9e:3f:c0:11:52:15:2f:0e:46:82:c5:5e:e9:d6:e2:42:
         0c:5d:ec:04:e1:d8:73:f9:95:cd:55:93:05:7d:75:9a:b2:ea:
         ba:25:ce:2b:88:73:b0:4e:5b:0a:f7:2c:47:5c:57:10:89:82:
         64:6e:e2:ed:8d:17:86:a6:85:c6:c6:93:a4:27:d1:96:8c:0c:
         82:e9:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:24 2026 by rpki-client