This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File:                     3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier:          fsIcpKXiGHhM3TRHmt8hQktpMYNUbtH+lDi/wyPgHWo=
Subject key identifier:   9E:D9:9B:AD:9F:A9:FD:82:6D:C2:FF:09:EA:13:4E:96:D6:B3:1A:92
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer:       /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial:       019C36E6AE9F0E5A681135C33ECA88A384DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number:          179D
Signing time:             Sat 07 Feb 2026 07:00:13 +0000
Manifest this update:     Sat 07 Feb 2026 07:00:13 +0000
Manifest next update:     Sun 08 Feb 2026 07:00:13 +0000
Files and hashes:         1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: 9OfwGjbNJP5GN+wXihlra1pCuzCeIeSr3ZCvur4AA3M=)
                          2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
                          3: lgAFjN4gHYopIT8heunPXH1vt8E.roa (hash: r+8mwmWirHpSDxWo288I4eaMHGJth/6WbvlwodVcooQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:36:e6:ae:9f:0e:5a:68:11:35:c3:3e:ca:88:a3:84:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
        Validity
            Not Before: Feb  7 07:00:13 2026 GMT
            Not After : Feb  8 07:00:13 2026 GMT
        Subject: CN=9ed99bad9fa9fd826dc2ff09ea134e96d6b31a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:b7:d1:dd:74:a7:f9:76:69:e8:69:c0:35:
                    8f:dd:e0:63:75:44:c6:08:44:f8:b3:80:7b:b1:f6:
                    2a:35:67:43:ae:8b:0f:f4:8d:e6:0e:eb:40:c1:96:
                    fa:e1:85:2d:27:36:72:2b:7d:e3:8d:3d:44:75:ed:
                    12:2d:35:8b:ea:c4:3b:30:61:73:8a:e2:c5:08:b1:
                    8b:d5:43:dc:24:d2:5c:9e:12:81:e9:5a:9f:3b:cf:
                    14:75:33:7a:24:ba:bd:66:82:9b:e1:62:56:af:2d:
                    6d:7e:23:64:9a:f7:37:12:80:5b:bf:6e:2d:5e:f3:
                    b6:71:80:36:c7:a7:ae:e8:62:b9:5c:e7:ab:4d:9e:
                    43:ad:10:d4:2d:e0:bc:76:47:0f:c9:36:46:28:7b:
                    f4:57:05:92:0f:70:4c:93:75:94:06:32:b5:82:4e:
                    1a:c9:4f:a4:94:a1:96:d7:03:78:15:45:43:a7:82:
                    54:52:5d:a9:db:90:a9:71:96:17:5a:ef:71:77:4a:
                    20:35:67:ba:23:1f:58:d5:45:11:29:63:d7:d9:e9:
                    3e:b5:5b:84:ed:e7:8f:63:87:82:c1:06:f3:16:e3:
                    4a:ed:c9:a4:15:15:33:9e:0a:93:81:6d:1c:b6:34:
                    bc:78:9c:14:1d:d8:87:08:c4:eb:2f:d8:cc:3e:89:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:9B:AD:9F:A9:FD:82:6D:C2:FF:09:EA:13:4E:96:D6:B3:1A:92
            X509v3 Authority Key Identifier:
                keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:ac:d4:a9:e1:19:66:1e:23:42:06:7c:ba:f4:f1:53:72:
         3e:e6:b9:f0:7b:a4:36:05:60:72:1a:4a:1d:65:55:15:6e:b5:
         74:95:d8:d1:ec:16:de:5b:8e:01:fc:52:e4:52:93:c5:68:ea:
         07:6e:c9:5d:d8:f0:1d:bb:3d:17:8c:1a:51:6e:ad:6a:8b:7f:
         0e:a1:42:11:b3:a3:2e:1a:94:20:27:7b:72:80:a8:1c:49:fc:
         14:79:cd:d4:f2:16:23:5f:47:a9:79:1c:19:55:a4:2d:f4:71:
         7b:10:33:b3:51:10:cd:b1:05:26:66:66:68:69:03:29:33:cf:
         a8:dd:f1:9e:14:05:e8:6b:60:d3:4b:b9:35:3f:41:36:2d:26:
         2b:56:02:db:81:d4:60:89:ad:f9:da:2b:18:d1:3f:60:9c:be:
         1b:10:67:64:ee:93:0c:8c:e5:2a:ca:f9:c2:20:c4:e5:2a:b4:
         89:ff:26:92:0f:0f:9c:26:e1:26:21:95:eb:87:6b:f0:9a:a7:
         ec:67:58:8d:fc:9e:56:66:9c:d4:4e:29:cb:f9:70:18:a2:a2:
         24:1c:ee:f1:70:87:a2:2d:5c:bb:fb:41:62:e4:e6:ed:d4:f6:
         e5:1f:be:5b:4c:47:5b:28:84:41:7c:a9:88:6e:cf:ad:81:49:
         e3:38:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 13:00:45 2026 by rpki-client