This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File:                     dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier:          k8cHEmmaqIta5k2nhD74IOcqxc6v05DVqirXXE6Ef5I=
Subject key identifier:   B2:6D:BC:B4:5E:B0:75:2E:6A:E6:4C:EF:33:26:5E:54:08:45:F5:78
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer:       /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial:       019C4322E46EB51A56F9A93942B774CD77DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 16:01:25 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:25 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:25 +0000
Files and hashes:         1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: HLl3B23NvSZeKbx0I1io1gQK5qE3yRKkwiJOgYy3OeI=)
                          2: jeUCTnllWBc2YjwSNbaBtlWcww4.roa (hash: A3urkixwNeWZh9C+aMoLes8n2HeLxR2S7cO9Wh2QMPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:e4:6e:b5:1a:56:f9:a9:39:42:b7:74:cd:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
        Validity
            Not Before: Feb  9 16:01:25 2026 GMT
            Not After : Feb 10 16:01:25 2026 GMT
        Subject: CN=b26dbcb45eb0752e6ae64cef33265e540845f578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:48:e8:9d:8d:5e:2b:87:fa:b5:50:5b:20:
                    b1:5c:db:ae:88:57:81:a7:c5:3a:59:67:d3:bd:78:
                    df:26:53:c6:96:f9:9a:24:39:b8:6e:e3:e1:aa:e1:
                    ff:75:ba:76:a4:ce:73:a5:6a:72:bf:b1:86:1d:11:
                    80:31:b7:8a:d3:4c:a0:db:51:4b:4b:eb:84:10:eb:
                    4c:a6:db:34:81:7a:85:9f:f2:b8:66:72:49:b4:97:
                    f1:d5:22:36:a0:4d:e4:15:a5:b0:ce:2f:81:62:c9:
                    1c:24:86:27:f8:82:98:b1:93:6a:54:9c:52:c4:84:
                    47:78:93:a7:73:d2:ae:7b:87:75:9f:ff:47:d7:ea:
                    12:62:3f:97:da:e0:1c:6d:9a:a1:38:37:ef:48:e9:
                    3d:3b:55:7d:72:ce:0f:bb:fb:b6:75:19:a7:6f:44:
                    7c:31:89:15:c2:a0:56:4a:b1:92:8d:01:97:f2:09:
                    ef:08:c3:54:1c:03:1c:16:fa:17:18:de:f0:6a:39:
                    5c:b3:1d:a4:92:29:aa:bc:59:d1:19:eb:38:71:1b:
                    70:50:04:87:ee:95:0d:fa:4e:48:7c:26:02:ec:4e:
                    29:59:43:fa:33:c4:5d:88:84:d6:8d:32:ea:ab:c1:
                    2e:30:2d:a8:90:44:c2:77:62:87:22:16:39:7e:9b:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6D:BC:B4:5E:B0:75:2E:6A:E6:4C:EF:33:26:5E:54:08:45:F5:78
            X509v3 Authority Key Identifier:
                keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:4e:ef:21:5e:ce:55:3f:72:f8:1f:63:bc:f2:a7:35:3d:
         22:9c:c2:03:2d:c1:b7:30:65:c8:16:d7:5f:8b:7f:23:0a:55:
         8f:b0:14:3b:50:56:1c:80:85:20:06:10:74:66:67:87:dc:30:
         14:7e:fe:81:0e:ac:34:04:5a:ad:48:47:f9:14:88:06:ab:ee:
         b9:22:d9:4f:c0:48:ef:8d:85:6f:04:da:13:6b:3c:9d:bf:24:
         82:1b:2e:bb:65:a9:20:2e:5c:c0:d5:48:fc:dd:46:5f:1a:f1:
         9e:b1:38:48:2c:83:4d:27:e3:8f:7b:62:19:bc:9f:62:ff:0f:
         6c:d9:3d:d9:93:26:18:d7:03:13:78:95:a1:57:f6:b5:b0:3b:
         b0:57:45:94:01:8e:1f:de:b2:46:8e:26:c5:8b:2d:0a:a8:72:
         80:b3:da:1c:7f:49:16:05:97:c0:4d:52:8b:89:7c:b5:e9:c5:
         50:7c:84:08:ca:c3:ea:86:7e:cf:f0:da:13:ea:52:96:2b:cf:
         57:ab:36:82:c9:25:3c:57:cb:15:51:d0:b9:8b:37:9c:d8:8f:
         1a:10:09:ae:68:40:59:b0:d3:15:ef:c2:a4:58:dd:c8:6b:b1:
         59:bb:6b:bc:e8:73:76:1b:41:c9:62:79:1a:bd:f2:3d:d6:13:
         e6:4a:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:01 2026 by rpki-client