This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier:          KJNnUalhjXptN5j7U8Kdixy+VFDdI3iWIiE1z+0rfqA=
Subject key identifier:   33:93:BB:3C:FB:EC:FC:78:23:E1:BF:44:DA:E4:2D:96:02:E3:BC:C9
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       019C41A1D70F35E9F2D82A69D0A31AF0CFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number:          0CB6
Signing time:             Mon 09 Feb 2026 09:00:51 +0000
Manifest this update:     Mon 09 Feb 2026 09:00:51 +0000
Manifest next update:     Tue 10 Feb 2026 09:00:51 +0000
Files and hashes:         1: 7873A-doZHT3z3WdUC9-3ek1dsM.roa (hash: GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=)
                          2: SJYIkLcX_CNS1SprQ_soGckZIGQ.roa (hash: eDm4/cj9IxvpczJ1uU/Y+99aLmMJiA5yew/A11GEYVs=)
                          3: rf5y8gSq5wsa5gp2pUsrZdvorF4.roa (hash: LhVJmNP7LYW2COhuVTfB4/5Ch+7vx0bLlcnCO+/fQfk=)
                          4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: wuNxkng5qCSOLVhufWT9uTJmbPTcO0wkXW6z9bTGHQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:a1:d7:0f:35:e9:f2:d8:2a:69:d0:a3:1a:f0:cf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Feb  9 09:00:51 2026 GMT
            Not After : Feb 10 09:00:51 2026 GMT
        Subject: CN=3393bb3cfbecfc7823e1bf44dae42d9602e3bcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:c9:ac:30:3e:81:0b:83:d5:e3:6b:8f:3c:
                    f3:8e:c2:50:8b:5c:b0:5b:89:46:14:f5:c2:3c:69:
                    cc:d5:6b:ff:ea:d9:4d:18:ee:54:28:62:0e:24:ee:
                    39:fe:1f:42:d0:2d:94:64:e8:0d:8b:dc:51:21:ee:
                    2c:6e:75:1a:dd:0c:f5:39:1e:31:65:07:19:30:dc:
                    7f:62:da:c9:4d:35:d8:a1:73:5c:47:aa:6b:93:ac:
                    22:70:1b:4b:73:40:5e:71:5d:d2:16:d0:29:7b:a3:
                    35:4e:2d:36:0e:0a:b7:0b:26:8e:cd:3d:fa:b6:28:
                    d4:28:37:7e:58:87:5e:c2:d3:72:46:74:36:0c:96:
                    6a:e6:cf:96:72:42:f4:0c:2e:f8:c9:99:6f:98:b0:
                    fd:83:5e:bb:aa:76:15:41:70:90:47:58:3c:19:60:
                    8a:47:eb:14:bc:21:dd:06:34:2e:63:e9:81:d3:32:
                    d0:8b:fc:1f:8b:d9:65:c2:32:af:36:64:06:8f:43:
                    16:ea:c3:cc:9f:09:4a:de:d7:e4:d4:9f:a3:01:7e:
                    dd:60:77:77:9c:c8:8f:73:d2:dc:ab:09:3c:ab:87:
                    ba:bf:c6:d5:b6:b5:c7:62:fe:9f:be:3c:b7:fc:c7:
                    85:22:21:26:c7:74:99:8b:6f:8a:a9:7d:25:40:08:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:BB:3C:FB:EC:FC:78:23:E1:BF:44:DA:E4:2D:96:02:E3:BC:C9
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:76:09:9f:f5:3c:8f:ea:35:3e:e3:a7:11:ef:03:97:98:ed:
         fd:32:a4:51:23:a4:7f:19:0d:a6:24:ef:88:4f:bf:d2:ab:0d:
         e0:35:e1:9c:86:d4:34:93:3f:76:1a:49:6f:7a:3d:3c:0a:b8:
         e1:1f:ca:92:ae:3b:92:77:bb:90:34:d0:07:10:31:94:e4:76:
         96:d9:57:8c:0b:ff:6b:9f:f3:06:6e:ba:ae:6d:f8:44:38:9f:
         94:cb:48:1b:e3:7e:26:e4:73:40:a9:80:66:ee:a9:7f:15:b4:
         01:be:f5:df:0f:b4:97:72:69:82:85:50:e7:d6:4e:cc:07:d5:
         8d:01:45:fd:a6:b5:22:c3:ef:45:5e:e4:b7:4c:47:44:05:a3:
         a0:a5:c2:76:95:90:8f:ca:1b:23:15:0e:82:3c:1c:8d:d9:65:
         a8:c0:66:12:28:50:00:6b:93:1c:6c:32:c9:b2:2b:54:f3:bc:
         48:73:8d:3f:8b:b0:64:38:e3:d7:34:fb:1c:13:9a:06:ec:ac:
         f5:bf:98:47:0d:17:5d:45:e6:80:b2:22:42:35:98:3c:74:7f:
         42:f4:c8:77:06:38:37:10:72:25:33:83:d2:78:ac:f7:3a:d0:
         8a:d1:8c:97:b3:d0:e5:6b:8d:6e:78:f7:8e:ce:ec:d1:bd:98:
         99:4f:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:33 2026 by rpki-client