This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File:                     R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier:          lnKs0j+2t5PUKcXYPla8gZFJJ3oOHgHMMo4F46SyM6k=
Subject key identifier:   A6:48:D5:E0:DB:92:67:CD:B3:5B:3B:C8:3C:23:F7:B0:56:BD:85:73
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer:       /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial:       019C42EB44A78A756FB67C1BCD523DE19721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 15:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:40 +0000
Files and hashes:         1: 3IZRCOACUcLiARW2HP7kjbxOWuA.roa (hash: cLVZUJw1rLqnRks0o5eNFloDi9vUVRxfI1Y00+CjpX8=)
                          2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: O9whXnbSwGNCUbogkWHvATSS4oxmtTjmf42QmKAE0RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:44:a7:8a:75:6f:b6:7c:1b:cd:52:3d:e1:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
        Validity
            Not Before: Feb  9 15:00:40 2026 GMT
            Not After : Feb 10 15:00:40 2026 GMT
        Subject: CN=a648d5e0db9267cdb35b3bc83c23f7b056bd8573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:dd:41:bb:2c:4a:f5:ec:84:99:be:58:47:
                    63:5a:72:c8:b5:04:cc:fd:27:3c:59:47:e1:ea:68:
                    02:85:fe:dd:c3:75:10:d9:30:67:12:4c:4c:6f:d5:
                    1e:1f:d6:cf:c4:a7:10:60:84:54:19:14:00:3d:21:
                    9d:ab:bb:3f:2e:0d:a7:06:29:2b:52:ac:8c:24:da:
                    2b:ac:ef:09:4e:e8:0b:93:88:33:6b:11:f7:6b:74:
                    74:94:1b:a7:a0:60:9b:9e:d3:90:94:8a:25:f9:3b:
                    fa:79:42:c5:65:5d:cf:b8:c3:af:fe:32:9d:f8:17:
                    9e:47:f1:8a:2d:35:db:af:1e:7e:bf:25:36:50:f6:
                    aa:0e:70:14:bc:b6:ee:30:ae:5e:40:ce:2d:bc:6e:
                    fd:78:b1:16:06:ea:67:69:d6:97:a2:95:a7:8c:ba:
                    85:5c:12:47:38:e4:0f:14:74:7d:40:db:99:13:09:
                    a5:d7:07:dd:27:a2:a4:74:60:74:07:47:2b:38:53:
                    b6:3b:4a:74:94:17:fb:d1:42:61:c3:d0:8d:20:87:
                    e8:1b:16:9a:49:6c:f5:ec:a4:75:54:f2:3c:5f:6b:
                    e3:58:cf:9d:78:79:71:8c:86:e4:b2:a8:fc:0f:ca:
                    73:87:58:e9:43:7c:7c:2e:40:09:47:31:a6:ee:30:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:D5:E0:DB:92:67:CD:B3:5B:3B:C8:3C:23:F7:B0:56:BD:85:73
            X509v3 Authority Key Identifier:
                keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:a4:ee:a1:72:5f:c5:ce:85:66:b0:7a:e9:4e:9b:78:82:
         67:39:6c:7a:51:7b:ee:eb:0c:19:a2:19:47:e7:49:52:92:1d:
         e4:e9:4b:1f:bc:35:36:a5:fe:6f:25:79:24:a4:cd:db:6f:63:
         fb:67:c3:8c:b0:70:e6:d9:e6:a7:cc:1a:a5:c8:8e:04:de:b3:
         f4:51:8e:9d:eb:4f:79:44:dd:7a:28:92:4b:ae:50:f6:30:8a:
         ae:0a:92:ab:a3:f6:a3:b8:5c:85:95:80:25:90:5e:27:24:f5:
         de:f7:ad:3e:70:38:a1:aa:c7:62:11:e9:b5:4f:4b:40:04:b1:
         c6:df:7b:d8:db:31:75:2b:53:87:9f:d4:10:13:7e:2d:87:ab:
         af:27:f5:31:03:8c:cc:77:d4:b8:1e:8f:ab:91:7a:56:8f:e2:
         c5:cd:01:68:b6:e4:9b:21:80:ca:a9:5a:d6:e1:06:48:65:f9:
         6c:be:e6:76:33:75:d7:a2:1a:aa:5c:a0:db:d8:3a:d9:c6:45:
         ef:99:46:c5:e8:cb:1e:36:a8:89:64:42:2c:7a:78:fb:8c:57:
         bb:8e:c5:09:a2:24:ab:54:8d:b1:68:59:3e:ab:d7:bc:f0:59:
         10:c7:61:5f:c5:55:a4:e3:7d:ff:92:02:1f:84:d2:de:37:7b:
         e7:4b:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:07 2026 by rpki-client