This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File:                     s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier:          WUfcKEOVyywEbGtSFUDK8qL6D+O9JKo1zy6nJ3wbCOE=
Subject key identifier:   67:79:6A:A1:0E:90:A3:D6:44:A2:1F:25:36:C7:25:6E:0D:DE:F9:7B
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer:       /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial:       019C44D9D42F3FF89A513B95D59CD4959406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number:          1815
Signing time:             Tue 10 Feb 2026 00:00:52 +0000
Manifest this update:     Tue 10 Feb 2026 00:00:52 +0000
Manifest next update:     Wed 11 Feb 2026 00:00:52 +0000
Files and hashes:         1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
                          2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: g9uWYL1b3QYfwfaY3sCiPhOdSyX2y6/BX2fUhdF4X8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:d4:2f:3f:f8:9a:51:3b:95:d5:9c:d4:95:94:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
        Validity
            Not Before: Feb 10 00:00:52 2026 GMT
            Not After : Feb 11 00:00:52 2026 GMT
        Subject: CN=67796aa10e90a3d644a21f2536c7256e0ddef97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:64:11:1a:15:2f:0c:5b:d1:cb:1c:f0:5e:
                    f7:69:2e:fa:50:69:f2:a6:8a:7c:74:bb:2b:43:2d:
                    8b:a2:24:c6:20:3f:86:73:e2:3d:0d:78:8a:03:15:
                    89:9e:a6:cd:66:e1:5e:f3:5c:05:76:5d:84:6e:68:
                    d5:53:6c:49:2f:cf:e1:1f:df:ca:65:9b:93:1d:bd:
                    6b:da:ab:3a:2e:07:8b:17:dd:a9:3e:34:ca:76:09:
                    0e:5e:51:79:8e:37:62:9c:04:99:f7:4a:16:18:85:
                    48:fa:c1:9d:af:98:98:12:ff:c2:2d:55:53:48:b1:
                    7b:3e:bd:4a:26:fe:8d:aa:20:56:79:71:33:67:fe:
                    14:25:40:af:e1:f7:bf:7c:86:b6:4c:1a:8f:fe:ef:
                    2c:b7:a3:34:e8:a4:58:d5:ce:a6:4e:c5:89:76:a7:
                    9e:85:bf:45:44:05:81:39:ed:d4:51:dc:61:e3:88:
                    ee:cc:c7:35:97:e0:3d:af:32:ee:cf:c9:5a:7d:82:
                    a8:7e:c1:30:6d:14:ef:3a:c4:6d:bf:ff:f4:65:22:
                    d3:bc:fe:d2:42:e5:aa:55:b9:ae:b9:b8:1e:fe:55:
                    53:cf:3c:12:76:9f:6f:d8:bd:e1:80:7b:0c:f7:52:
                    4e:ec:ff:46:8c:72:6e:77:c1:ee:02:93:27:74:ff:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:6A:A1:0E:90:A3:D6:44:A2:1F:25:36:C7:25:6E:0D:DE:F9:7B
            X509v3 Authority Key Identifier:
                keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:19:de:d8:88:90:8e:9c:72:dd:0f:c1:c0:72:ce:96:8b:b6:
         ea:3e:3c:2f:e8:a3:3b:2e:a3:3e:c9:8f:83:63:b3:5e:07:32:
         4b:11:81:32:58:7c:b3:f5:b2:b7:79:9f:61:85:ae:ea:fa:d7:
         b5:c1:32:1f:ac:07:99:2f:a8:52:d8:af:0b:82:0a:76:24:86:
         5c:9e:01:d5:4e:bf:8d:74:1a:67:39:6b:39:71:03:9c:b9:ee:
         c4:76:8f:d4:a5:63:4e:3c:b3:e4:50:3a:86:22:b8:05:55:8a:
         43:dc:f0:b1:2d:b0:a8:22:39:8e:11:50:2f:9b:3a:bd:b7:9d:
         7b:74:c9:e1:83:7a:ab:83:50:72:73:e0:06:3b:b2:0a:a5:d7:
         05:6e:77:79:d4:71:eb:74:21:08:ee:52:4c:da:46:38:04:27:
         51:9e:92:61:a5:0f:a8:41:ed:1a:f6:b5:fa:28:72:f3:e1:84:
         aa:e1:76:e1:01:e9:3a:00:1b:d6:d0:f3:d6:35:c0:cc:f7:48:
         88:49:b1:9d:d3:7c:d9:cd:5f:31:e1:cc:3d:75:a8:f5:6a:ea:
         d8:7d:10:7d:a7:aa:03:7c:37:b9:ef:51:62:8c:de:8f:29:e5:
         a6:63:11:cc:41:c5:cd:0a:00:57:fe:52:b8:cc:da:d9:d5:83:
         a4:6d:2b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:54 2026 by rpki-client