This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File:                     3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier:          Nd+C4+l0heLlrlWUEzf8vMFBI/KAYWKbeHGyzZJ7SyI=
Subject key identifier:   30:61:0B:91:78:C9:E0:7B:E9:45:66:C0:2B:C0:81:E1:F6:C5:AF:77
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer:       /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial:       019C44A2B5A2EB1768301D51E86CAA02A362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number:          0D86
Signing time:             Mon 09 Feb 2026 23:00:39 +0000
Manifest this update:     Mon 09 Feb 2026 23:00:39 +0000
Manifest next update:     Tue 10 Feb 2026 23:00:39 +0000
Files and hashes:         1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: ELqgZCyd23CFtX81uiEaZ4xUQROkl2KGU1ev0l90Pz0=)
                          2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:a2:b5:a2:eb:17:68:30:1d:51:e8:6c:aa:02:a3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
        Validity
            Not Before: Feb  9 23:00:39 2026 GMT
            Not After : Feb 10 23:00:39 2026 GMT
        Subject: CN=30610b9178c9e07be94566c02bc081e1f6c5af77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:4a:5e:3a:c6:bf:57:47:2f:08:db:a1:ed:
                    c9:5f:e9:2e:5f:c1:b7:1e:52:5f:fa:82:d8:df:ad:
                    e9:6c:bc:c3:62:46:07:c7:bb:21:2f:ef:d5:a9:a4:
                    08:b2:e0:3b:22:c8:26:76:2a:f0:d2:80:73:c5:95:
                    03:7d:ea:8c:27:37:ec:dd:c0:a4:78:2f:c1:40:ac:
                    5e:a1:d1:f6:73:82:80:fa:d3:db:bd:44:93:f3:81:
                    ae:63:59:05:cf:e3:28:d0:7c:b6:1b:f2:ba:52:8f:
                    e7:4e:97:25:1e:45:7f:e1:68:22:da:be:9d:ab:34:
                    35:12:f2:e7:0b:73:cf:fb:20:f9:44:2d:70:05:d7:
                    de:06:34:89:45:2e:48:9e:63:7c:5f:32:84:f2:aa:
                    b2:12:8e:32:e2:9d:34:b4:bb:65:02:76:94:5c:00:
                    14:4d:37:f1:95:d7:ef:9c:4f:da:ff:7b:83:5c:05:
                    b5:48:a1:b6:95:22:43:fa:65:2c:07:14:68:ef:6b:
                    21:25:bb:8c:9a:3f:62:ed:70:14:7e:c6:06:8a:09:
                    23:13:fc:36:eb:f8:b2:4f:e9:e5:9e:86:f3:31:38:
                    ff:95:ea:2d:a3:65:54:a2:c3:50:b3:62:4e:f0:1e:
                    4f:a0:ad:9c:1d:53:f1:6c:2e:66:dd:15:a3:6f:c8:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:61:0B:91:78:C9:E0:7B:E9:45:66:C0:2B:C0:81:E1:F6:C5:AF:77
            X509v3 Authority Key Identifier:
                keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:64:ae:24:d2:99:7f:c2:06:07:6b:2a:c9:24:75:fe:7d:
         71:35:7e:63:1c:49:f9:6a:cf:0b:9e:1a:4f:3f:9d:5d:2b:0f:
         8b:cf:b7:e0:a9:10:cf:e8:e5:83:4d:cb:63:65:11:5c:80:3a:
         16:a0:2d:96:b5:d0:b4:f6:4f:4a:59:c9:8b:27:ce:41:28:6e:
         a5:fc:47:d0:87:56:26:8c:f2:e5:30:b9:4c:43:ea:89:56:86:
         78:16:c3:22:2c:53:92:73:cb:9e:22:e7:bc:0c:04:91:ba:da:
         e5:9f:46:91:06:ad:3f:92:52:0d:30:a3:18:1f:4b:cd:e1:61:
         0b:c4:9d:59:51:d3:fe:dc:56:01:3a:65:ed:8d:34:4b:66:32:
         fe:c0:3b:4a:46:76:8a:50:c8:35:14:ef:67:f6:e4:64:bd:48:
         1a:ac:3c:e5:5a:8f:3c:ed:08:75:ec:12:4c:a2:8c:59:c3:8d:
         ca:71:de:ea:6c:1d:d1:64:cb:ea:19:99:9e:f3:50:a7:00:c5:
         89:3c:c6:bd:a3:2e:0d:53:8f:56:b3:06:a0:90:17:70:81:30:
         19:35:d8:5b:13:3e:d6:91:2b:00:ce:bb:80:1d:ac:fd:40:cf:
         81:9f:cd:38:9c:ce:7b:87:27:15:4a:c1:9b:87:b4:1c:62:cb:
         7d:a5:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:22 2026 by rpki-client