This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File:                     1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier:          WZlLPaDxSp31aZW6J6u/kNksGKO+B8g9lF96Ny6wk4I=
Subject key identifier:   A3:97:FA:B4:FA:2F:B9:04:3E:11:A0:B9:56:26:84:96:20:35:E2:A4
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer:       /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial:       019C4390513B9BE4901EFD71E8F242106155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number:          0204
Signing time:             Mon 09 Feb 2026 18:00:57 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:57 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:57 +0000
Files and hashes:         1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: D8AAI96z60zaLeyqHTf4FzWnL0afK4HkjZvlnGqn2JA=)
                          2: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (hash: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8=)
                          3: RsQ2F1hR8H3i7qc1K-1py98Y2oE.roa (hash: uYjJFeCzfVAYecHpU37zMUj8OmOaI8Jw7yaqtpm+414=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:51:3b:9b:e4:90:1e:fd:71:e8:f2:42:10:61:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
        Validity
            Not Before: Feb  9 18:00:57 2026 GMT
            Not After : Feb 10 18:00:57 2026 GMT
        Subject: CN=a397fab4fa2fb9043e11a0b9562684962035e2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:de:46:64:e3:9b:89:0f:c6:06:d2:58:c2:46:
                    07:bd:23:c2:37:45:6a:6e:fd:e0:cc:98:d3:42:f3:
                    23:4b:36:d7:fc:24:b3:f1:76:79:4d:f6:cf:85:21:
                    16:7a:46:cc:d5:d0:5c:53:62:da:1a:06:26:66:59:
                    d5:9f:3c:3d:5d:96:f6:b4:db:fd:24:f6:7c:2a:c8:
                    9d:ea:07:96:34:38:7e:26:3f:3b:ff:0d:c6:fe:b8:
                    86:29:7f:77:3a:65:fb:e9:7a:d8:78:4d:68:20:91:
                    42:f7:5f:c5:d8:d6:5c:85:c8:04:80:83:76:78:1d:
                    e3:a4:35:4e:44:cf:e8:f4:82:1b:0e:f3:86:8b:0b:
                    f5:9f:ce:81:5b:29:da:5a:55:e2:e9:3e:9d:44:ac:
                    73:0f:9a:3b:1e:53:35:43:aa:f7:49:f6:e8:3f:e3:
                    42:9e:a0:38:8c:e0:ce:76:6d:a1:ee:5e:20:21:80:
                    67:5c:a5:50:2f:8d:41:6e:68:d4:de:d4:9a:1c:43:
                    4d:33:82:51:f8:bd:4c:d5:de:54:f5:66:a6:49:2f:
                    48:62:2e:8c:81:aa:26:fd:ad:a7:35:09:b0:da:0c:
                    f4:2d:29:2d:1f:22:4f:84:e3:39:19:83:91:c6:cc:
                    75:f1:02:24:09:57:08:d8:c1:9c:52:cb:d3:a1:f9:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:FA:B4:FA:2F:B9:04:3E:11:A0:B9:56:26:84:96:20:35:E2:A4
            X509v3 Authority Key Identifier:
                keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a5:ff:e1:73:ee:8b:e3:8f:2a:52:11:f4:7b:64:5f:57:ad:
         d2:9e:53:ab:0d:8f:11:cf:d2:a3:4a:e9:c8:15:bd:55:af:ce:
         3e:7e:af:17:fc:a5:63:5b:7a:2c:de:7f:d9:fb:e8:08:4f:f3:
         ed:e8:79:67:d9:54:e5:c6:ce:27:14:b0:51:ed:30:98:ae:cf:
         d9:2a:81:ea:ae:f7:24:76:9b:79:3b:2d:31:47:d1:c0:a9:d4:
         b2:9a:ef:1b:04:7d:3a:46:3f:8d:59:94:f9:d2:84:4d:2e:84:
         45:f9:8c:e1:05:36:5a:da:17:8a:43:2d:4a:af:89:bc:2d:25:
         c5:ae:5d:79:f5:ad:a6:54:6d:a8:ae:0a:0a:d0:41:97:4e:ea:
         07:96:2c:df:34:a6:24:98:06:82:60:a8:39:ad:0f:fb:61:5c:
         24:a2:16:3b:ce:c5:78:4f:5f:f9:1d:16:db:12:03:32:1d:d7:
         d7:a1:56:7d:f0:93:b6:8d:f9:d9:12:95:da:5f:d9:e0:ed:d1:
         b1:b6:30:e3:6b:5b:f7:0d:44:79:98:74:b6:a3:f6:d9:f3:5e:
         90:90:67:c1:f6:32:b2:e5:63:37:08:fc:77:14:a1:32:f1:ac:
         6c:88:db:e8:ff:ee:06:6e:39:41:c7:ba:12:ce:32:c3:3d:64:
         1b:f8:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:44 2026 by rpki-client