This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File:                     3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier:          K/wppbMKWwl9CL2b/E/QyAWioc+4Wi3BPRZDCl9YAWk=
Subject key identifier:   DF:54:A2:0F:31:A5:99:8B:05:C1:72:61:14:38:15:61:18:1A:68:A6
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       019C25183159A64D5540F6B457D9E4DB3C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number:          1768
Signing time:             Tue 03 Feb 2026 20:01:08 +0000
Manifest this update:     Tue 03 Feb 2026 20:01:08 +0000
Manifest next update:     Wed 04 Feb 2026 20:01:08 +0000
Files and hashes:         1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: w2FCh7shG3EiYF/kT+9p6glYQeiVQRo2upca1dZ0Lto=)
                          2: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
                          3: n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa (hash: gVRzaVlrA0PT4P/eOqodE9EyzqJ1MpOnj1J5G+nWuZc=)
                          4: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (hash: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY=)
                          5: xsB8VuxguMjVGEEIoWg1RDm1ZYo.roa (hash: mQSj5E+L8Ak9ruHD0WWJ2/J6mb1ky6kbhBVPI1nZD5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:25:18:31:59:a6:4d:55:40:f6:b4:57:d9:e4:db:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: Feb  3 20:01:08 2026 GMT
            Not After : Feb  4 20:01:08 2026 GMT
        Subject: CN=df54a20f31a5998b05c1726114381561181a68a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:f1:8f:2e:7e:f5:a0:8f:6a:9a:1e:9c:76:
                    0a:f8:51:02:48:53:57:02:82:c2:ce:3a:c1:6e:d2:
                    df:18:eb:e6:0e:d0:6f:25:00:a1:59:cc:a4:34:56:
                    de:9d:b3:82:14:64:69:e1:a5:72:a5:94:a3:7d:2d:
                    18:02:2b:54:0a:d2:4e:4e:1f:40:69:0e:3e:a1:dd:
                    17:e9:28:fc:6e:2f:fd:d2:45:6c:f6:db:88:42:4f:
                    d3:85:73:72:cf:02:a8:fe:4d:05:07:c1:88:23:da:
                    58:48:99:bb:a6:60:9e:3a:5c:cf:91:af:38:d6:1f:
                    ff:51:84:b1:4f:88:60:a1:76:55:a7:35:5b:ee:31:
                    0a:03:8f:78:da:d5:3a:ad:5d:a0:84:dc:e0:90:46:
                    26:db:6e:e6:f0:28:3b:a7:be:f3:a0:5e:9e:db:0b:
                    cb:98:aa:c9:e2:49:a0:30:c4:7b:a7:8d:18:81:50:
                    7f:ef:5d:56:1b:b3:04:ed:10:d0:24:36:52:d6:70:
                    ba:ce:0d:61:cf:04:a7:87:2e:b4:65:ac:22:5f:99:
                    4b:f5:b3:d4:9b:89:7c:17:ef:bd:91:d2:26:8e:a6:
                    52:cc:92:e7:21:35:d1:15:36:77:7c:98:d8:35:2c:
                    a4:25:d1:cd:12:0d:b2:65:58:a8:49:9a:9c:21:5f:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:A2:0F:31:A5:99:8B:05:C1:72:61:14:38:15:61:18:1A:68:A6
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:02:5a:13:1a:8d:79:b1:b8:56:9e:b2:2d:c3:2d:73:94:
         20:49:09:60:91:13:a5:ed:b2:23:3c:ef:23:99:ef:64:91:67:
         77:44:9a:e1:68:0a:0a:20:dd:1c:50:27:49:68:92:56:5b:ac:
         dc:a4:61:3d:b4:ba:4a:c4:26:ce:56:e6:3c:b2:c6:2f:2a:a4:
         be:cb:17:4d:b2:df:c0:5c:16:ab:06:25:1e:d0:92:25:66:16:
         46:28:de:12:e3:1c:06:09:04:e4:53:a4:c4:ef:5c:14:03:5f:
         56:59:8a:b5:b8:7e:34:44:ef:f5:0b:d5:05:32:27:4f:de:ff:
         01:c6:84:07:04:5c:2d:8a:de:30:50:3b:90:ab:3d:b5:c2:9e:
         26:c0:44:40:12:f0:b0:d7:b3:ab:8f:80:a8:ed:80:d4:e2:6c:
         c4:8f:e3:0e:09:58:5d:9d:c7:70:68:c4:49:81:87:0c:29:00:
         34:6d:33:f3:c1:c2:84:80:bb:2d:50:75:aa:8c:bd:c8:5d:f8:
         3d:87:00:8e:c5:f0:b1:33:27:93:59:e1:5d:47:fe:0c:f1:6b:
         e7:31:51:88:82:8d:1e:46:e7:f2:6c:ae:d2:24:8a:c5:af:c6:
         33:d5:ae:19:b8:f2:5c:29:1e:fb:82:85:d8:b3:5a:a3:91:26:
         bb:44:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:18:37 2026 by rpki-client