This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File:                     3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier:          ndhRbXvGYYxks4nwu0oEFQrMdgEYH6sIHxqD6634v44=
Subject key identifier:   5D:53:E7:F0:49:AD:28:E6:5E:8C:79:48:41:88:6C:23:DF:15:A3:25
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer:       /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial:       019C4390B485C455E246835EFA5077A1CB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 18:01:22 +0000
Manifest this update:     Mon 09 Feb 2026 18:01:22 +0000
Manifest next update:     Tue 10 Feb 2026 18:01:22 +0000
Files and hashes:         1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: g2fnCA8WGRAjsO4bKw3EgdZMVqe1iSoRAOjKBJ2uIjc=)
                          2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:90:b4:85:c4:55:e2:46:83:5e:fa:50:77:a1:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
        Validity
            Not Before: Feb  9 18:01:22 2026 GMT
            Not After : Feb 10 18:01:22 2026 GMT
        Subject: CN=5d53e7f049ad28e65e8c794841886c23df15a325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:46:ef:01:c2:28:4e:b0:f2:ca:77:0a:c4:
                    5f:b5:12:72:a8:7f:b0:6e:52:5b:8a:06:7d:9b:56:
                    f7:aa:6d:72:bc:42:28:61:c1:1b:80:ae:da:dd:4c:
                    2e:62:68:6e:f9:6e:55:14:2a:06:64:56:2f:47:4d:
                    f0:f4:0c:e0:91:7d:de:a0:4c:45:e7:5d:61:2f:1c:
                    a0:e7:06:d1:31:a5:3a:66:d8:0d:1f:59:d2:7c:50:
                    81:f2:ad:be:9a:e4:53:83:13:b8:ee:d8:35:3a:8b:
                    94:c8:72:b6:dd:f7:07:39:3d:8b:4c:d9:51:5f:bc:
                    b6:98:f8:22:31:36:42:4a:52:6b:3e:8f:61:5c:d0:
                    d5:5a:c7:d2:9e:f9:07:5b:83:5e:d5:79:0f:40:90:
                    45:ef:7a:c0:17:7e:1c:3b:77:86:60:f9:51:f4:6c:
                    01:c2:c0:a9:b7:8c:f4:7e:10:63:be:b2:e2:1d:21:
                    24:1c:1d:87:d9:82:f8:82:fd:56:fc:d0:94:f6:6b:
                    88:0b:69:41:b8:2d:2f:48:12:ee:95:d2:9a:38:d5:
                    09:2f:80:8e:d8:3a:06:9d:10:f4:43:81:c5:3b:9b:
                    67:d7:e4:33:d9:c3:54:74:50:54:6f:26:dd:c6:4b:
                    97:a2:92:c6:75:bb:72:56:f7:8e:e2:97:c5:c8:ba:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:53:E7:F0:49:AD:28:E6:5E:8C:79:48:41:88:6C:23:DF:15:A3:25
            X509v3 Authority Key Identifier:
                keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:09:ca:94:be:c7:49:cc:fa:1b:ad:64:f9:0c:19:a1:3a:83:
         77:16:65:6e:cf:a3:90:a1:28:87:08:6e:8a:34:7d:c3:af:8d:
         38:7e:96:d3:a6:40:c4:ff:9c:a0:33:1a:e4:58:ac:c0:92:97:
         ec:2b:0d:ff:de:01:8d:fd:e0:9d:c1:d4:fd:a2:b5:ad:ad:e0:
         48:f8:8e:fd:fa:58:3c:c7:b4:2d:4c:1c:5b:ba:18:ba:39:46:
         f9:27:c2:a2:e2:3a:fc:a6:d7:bd:dc:34:0b:7a:a3:f6:14:ab:
         d5:87:22:07:20:59:1b:c8:dc:7c:73:13:3e:c1:7b:cb:de:f8:
         79:72:af:ed:b2:bc:16:6d:6d:9b:6b:9f:70:d8:7c:d9:10:b1:
         24:be:89:8f:c6:fd:b0:e9:7d:c8:59:18:a9:08:43:f5:71:4b:
         0f:06:dd:9b:96:e8:33:0d:ef:ca:54:fc:fe:08:4e:d7:77:27:
         b7:54:13:a6:e9:52:65:12:07:3c:83:8d:cb:b7:f2:ed:12:06:
         8d:5c:4d:29:a2:4b:ad:f6:8a:85:7d:32:73:b6:e8:36:46:b0:
         47:e4:11:cc:8b:42:0f:65:be:d0:e8:e6:aa:61:10:da:0b:e4:
         d6:5b:34:45:8c:f1:06:49:35:18:f3:8d:d7:76:25:28:17:5f:
         57:cd:df:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkLSFxFXiRoNe+lB3ocs2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmJhYTYwMTIzNmFiOWJlYTI5ZjgwN2E2NjkyMGVkNTY1
NmExOTYwHhcNMjYwMjA5MTgwMTIyWhcNMjYwMjEwMTgwMTIyWjAzMTEwLwYDVQQD
Eyg1ZDUzZTdmMDQ5YWQyOGU2NWU4Yzc5NDg0MTg4NmMyM2RmMTVhMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxG7wHCKE6w8sp3CsRftRJyqH+w
blJbigZ9m1b3qm1yvEIoYcEbgK7a3UwuYmhu+W5VFCoGZFYvR03w9AzgkX3eoExF
511hLxyg5wbRMaU6ZtgNH1nSfFCB8q2+muRTgxO47tg1OouUyHK23fcHOT2LTNlR
X7y2mPgiMTZCSlJrPo9hXNDVWsfSnvkHW4Ne1XkPQJBF73rAF34cO3eGYPlR9GwB
wsCpt4z0fhBjvrLiHSEkHB2H2YL4gv1W/NCU9muIC2lBuC0vSBLuldKaONUJL4CO
2DoGnRD0Q4HFO5tn1+Qz2cNUdFBUbybdxkuXopLGdbtyVveO4pfFyLoHiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1T5/BJrSjmXox5SEGIbCPfFaMlMB8GA1UdIwQY
MBaAFNxrqmASNqub6in4B6ZpIO1WVqGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEt
MzRhMTIzN2YxNjcwLzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YmQyZTMtZjNjNS00OTU1LWI5YTEtMzRhMTIzN2YxNjcw
LzEvM0d1cVlCSTJxNXZxS2ZnSHBta2c3VlpXb1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwnKlL7H
Scz6G61k+QwZoTqDdxZlbs+jkKEohwhuijR9w6+NOH6W06ZAxP+coDMa5FiswJKX
7CsN/94Bjf3gncHU/aK1ra3gSPiO/fpYPMe0LUwcW7oYujlG+SfCouI6/KbXvdw0
C3qj9hSr1YciByBZG8jcfHMTPsF7y974eXKv7bK8Fm1tm2ufcNh82RCxJL6Jj8b9
sOl9yFkYqQhD9XFLDwbdm5boMw3vylT8/ghO13cnt1QTpulSZRIHPIONy7fy7RIG
jVxNKaJLrfaKhX0yc7boNkawR+QRzItCD2W+0OjmqmEQ2gvk1ls0RYzxBkk1GPON
13YlKBdfV83ftg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:23 2026 by rpki-client