This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File:                     3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier:          Pw1IecN8HJ07iC+Hnt53ZbtNqF3UVHLod1hwHr0bpD8=
Subject key identifier:   74:4A:D6:5E:D2:51:99:AD:AE:A4:16:6D:DE:29:5A:57:C4:3E:55:FB
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer:       /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial:       019C438FEC2F2CFCA972ECF73B6B37E3DBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number:          0E39
Signing time:             Mon 09 Feb 2026 18:00:31 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:31 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:31 +0000
Files and hashes:         1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: yHfTri30vhCK2h0hYJpRM/c4niyFTyMdqWpMw2E+B64=)
                          2: AsZzVRFHM8fIkabnOw1lUsz9Vcs.roa (hash: f+u/yu7J+CDrLDQiTVjW/9Sj11XA+wmveFvT2gcpBO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:ec:2f:2c:fc:a9:72:ec:f7:3b:6b:37:e3:db:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
        Validity
            Not Before: Feb  9 18:00:31 2026 GMT
            Not After : Feb 10 18:00:31 2026 GMT
        Subject: CN=744ad65ed25199adaea4166dde295a57c43e55fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:dd:34:fe:ec:26:ee:61:47:d1:c6:c0:df:
                    92:f7:dd:13:5f:4b:e7:0f:a6:69:da:a5:b3:2f:05:
                    cb:6e:0d:66:b3:24:c7:73:35:06:dd:ee:60:05:cf:
                    51:ab:a4:ee:14:b7:2a:5c:71:e7:61:2c:5e:8c:e2:
                    ba:60:7c:44:1e:4c:2a:69:30:e4:85:fa:0a:e0:21:
                    86:07:e9:ad:2f:ab:87:eb:3c:78:cf:13:22:00:e2:
                    90:e7:8e:ec:47:5a:81:78:42:13:76:25:82:51:38:
                    89:03:50:fb:d1:8b:90:b9:11:09:20:14:78:52:c4:
                    78:46:7d:b9:0c:2f:dd:80:a6:3b:b3:ee:c1:e4:4b:
                    db:ca:06:8f:ad:78:2f:92:22:1d:3c:46:ae:08:96:
                    f8:bb:ed:e1:cf:80:c6:b1:7c:34:b3:7b:db:57:aa:
                    6b:43:fc:ea:2e:7e:22:10:7c:82:9a:57:66:71:a1:
                    44:c7:3a:62:c3:83:b7:ac:e6:5e:e7:cc:82:6e:47:
                    d8:6a:19:36:53:fa:16:1f:08:45:1d:f7:ca:f7:ec:
                    16:8a:96:50:01:ba:9b:b0:de:c0:83:86:df:a0:ad:
                    17:fc:2a:7a:ac:4e:bc:74:08:f0:ac:08:f5:d9:9b:
                    4d:1d:93:c0:6b:59:81:ac:66:a2:30:9d:83:fa:0a:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:D6:5E:D2:51:99:AD:AE:A4:16:6D:DE:29:5A:57:C4:3E:55:FB
            X509v3 Authority Key Identifier:
                keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:51:12:c4:6a:d9:97:0a:4e:bb:a7:82:45:a4:0d:3a:f3:0c:
         85:3c:88:e9:1e:b5:47:8e:dd:44:b2:d9:b8:74:ad:83:8b:4f:
         53:ca:1b:da:4a:9f:f4:e7:c4:f4:2b:62:2b:cf:14:28:5c:69:
         8a:0d:52:a0:1c:04:de:f5:7a:0c:69:27:ae:37:3b:71:ea:5d:
         9f:f8:e9:93:27:cc:76:26:77:a7:18:2a:d3:20:e6:33:19:b4:
         08:56:0f:5e:56:bc:9b:ff:c2:c7:34:58:8e:2a:ec:b5:e0:a8:
         d7:6d:5f:20:3e:df:9c:cb:40:ac:39:47:3a:8d:b1:66:d7:9d:
         f3:9e:17:11:94:26:e3:af:f7:0a:51:a3:46:3a:51:61:4e:9f:
         84:d1:c6:27:31:a9:2a:ca:40:ea:44:0c:4b:8e:bf:39:04:51:
         e6:ce:b2:64:b3:86:88:70:8f:8e:6e:fc:80:dd:ec:b3:9a:43:
         db:30:74:30:68:6d:d0:96:e6:cd:ef:ba:e2:57:27:93:42:2c:
         49:e0:0a:5c:a2:a1:8b:e8:ec:1a:b0:58:ee:1f:22:9a:cf:6d:
         54:5e:0f:11:61:46:43:24:e7:e9:de:f5:f9:03:99:9f:92:a1:
         e0:51:2b:cb:f8:2b:7a:73:c5:ee:e4:65:2c:f7:64:13:f3:cf:
         2a:31:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:24 2026 by rpki-client