This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File:                     3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier:          9g2hQZSb1vwrpLFqmT7v0l76zvaGoy4g5PLkoQAOpiM=
Subject key identifier:   56:59:CA:D6:A6:D0:4A:D0:71:7D:CF:58:11:5C:47:9E:45:E4:0E:A7
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer:       /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial:       019C41A256331A63A53AF9724ADC7F79FD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number:          06DB
Signing time:             Mon 09 Feb 2026 09:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 09:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 09:01:23 +0000
Files and hashes:         1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: kJiuPHiAYth9zuCmlIZ2h0PjRHSmNZhVg+JOCUv3jmI=)
                          2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a2:56:33:1a:63:a5:3a:f9:72:4a:dc:7f:79:fd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
        Validity
            Not Before: Feb  9 09:01:23 2026 GMT
            Not After : Feb 10 09:01:23 2026 GMT
        Subject: CN=5659cad6a6d04ad0717dcf58115c479e45e40ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:eb:77:ff:ff:cc:32:0a:db:f2:10:cf:e2:
                    c6:c8:e9:ef:16:84:c0:b8:82:c3:33:f5:ed:25:0c:
                    96:11:2d:c1:74:33:e9:7d:c6:40:f9:c2:f6:32:da:
                    d9:79:a0:1c:6d:bc:f0:c5:5f:52:76:58:17:7e:b9:
                    b8:22:5c:1b:74:0d:c5:02:cd:fa:9f:4c:59:af:96:
                    95:da:00:63:d5:b7:19:3f:e1:e4:86:c0:2d:ea:c6:
                    cb:34:ca:69:01:7c:e5:50:67:6f:fd:91:c6:43:e2:
                    95:62:6d:51:22:16:24:e0:35:48:b5:7c:5f:44:33:
                    e1:bd:84:5c:6a:28:41:7f:0f:7e:32:0e:56:e6:09:
                    69:52:ef:1e:da:1b:4e:6e:a9:fb:ba:2a:ff:9e:1a:
                    be:f3:98:40:c0:20:00:f0:e6:12:5d:2b:fa:38:90:
                    2c:73:38:b2:2b:21:5e:29:2f:59:df:d6:d0:f9:d3:
                    d7:31:eb:6c:42:92:41:1c:cc:7b:b6:8b:c1:63:d9:
                    f4:f0:76:66:8f:f8:ea:63:46:73:aa:29:55:39:b7:
                    55:47:54:a0:d3:77:23:9e:d4:0e:c5:f8:a1:5e:b0:
                    fe:d8:0f:c8:7b:b8:37:28:87:79:3d:57:9b:a4:ad:
                    1b:d8:47:39:c0:c0:6f:22:51:db:c9:71:2d:fa:72:
                    38:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:59:CA:D6:A6:D0:4A:D0:71:7D:CF:58:11:5C:47:9E:45:E4:0E:A7
            X509v3 Authority Key Identifier:
                keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:dd:58:d2:28:e5:ca:c6:15:2d:1b:f7:17:92:78:96:79:
         b6:d1:69:4b:e2:db:a6:c1:11:7b:ed:c5:49:ae:db:74:1b:fd:
         4a:ac:91:88:05:98:5a:b7:2b:f5:9e:0a:12:e3:1e:43:4b:40:
         d9:71:61:29:33:bc:fe:aa:85:73:71:3d:29:f7:e3:d4:af:8f:
         48:d8:27:37:c5:15:ed:60:05:be:d6:82:03:f2:b4:39:a9:92:
         82:c7:d6:1d:1b:7d:b9:f3:ea:c0:e5:c5:55:59:df:15:9a:c2:
         d5:7c:d2:5e:4b:38:c7:9a:9b:a2:ab:0a:47:bf:9e:bb:ea:7e:
         06:99:04:63:a6:b7:26:d5:e6:4a:4d:36:4c:93:a2:81:24:5f:
         42:4e:24:8f:c0:c6:2f:fb:83:2b:fa:6e:57:89:e8:af:34:d2:
         b8:da:c7:f0:23:c1:53:9a:c2:d6:65:6a:3a:bd:f0:b7:cb:10:
         d5:58:8f:a2:2c:08:89:d1:e6:3b:4c:4e:ff:3b:50:4e:7c:7b:
         2b:aa:25:f1:0a:36:d1:a4:48:88:1e:96:a7:fa:2f:2d:50:2f:
         f4:51:45:0c:95:48:5b:f3:3e:7f:6a:42:8f:2b:b4:ad:80:93:
         ee:04:f0:89:01:24:15:f8:75:21:f6:95:0c:23:7b:5d:14:1b:
         33:dc:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:01 2026 by rpki-client