This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File:                     a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier:          3U8mOyE7hWmIOkpukPzYZdcbPuK66PxjOel089oGcgs=
Subject key identifier:   1E:0D:BE:D1:17:1A:74:A3:51:E1:90:DC:9D:CA:AD:3D:C0:87:48:7C
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer:       /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial:       019C555FCA6CF15E13B78107DE40EF606CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number:          0C5D
Signing time:             Fri 13 Feb 2026 05:01:06 +0000
Manifest this update:     Fri 13 Feb 2026 05:01:06 +0000
Manifest next update:     Sat 14 Feb 2026 05:01:06 +0000
Files and hashes:         1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
                          2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
                          3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: AgCwIRrEHq728KQrW+1oLDA7Ve2eNuirWPzRau3qVyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Feb 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:55:5f:ca:6c:f1:5e:13:b7:81:07:de:40:ef:60:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
        Validity
            Not Before: Feb 13 05:01:06 2026 GMT
            Not After : Feb 14 05:01:06 2026 GMT
        Subject: CN=1e0dbed1171a74a351e190dc9dcaad3dc087487c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:e9:02:47:54:08:a7:27:f4:94:63:78:48:
                    bd:c3:e2:03:78:a6:7f:ef:41:b6:11:7b:dc:aa:c2:
                    8e:04:62:78:9f:5c:52:2e:bd:b3:76:3a:21:20:ef:
                    4a:37:03:96:8c:00:0b:bd:39:1c:f2:85:86:53:3f:
                    09:7c:c4:5c:88:43:62:50:83:e0:0f:01:ae:3d:73:
                    be:73:5a:b1:6b:b6:51:73:b2:b1:19:e8:12:b6:8c:
                    c5:02:c5:7c:af:8b:36:3d:73:c1:af:4c:fe:8d:80:
                    24:6d:6d:7d:b0:95:4f:db:21:39:45:ac:9e:cf:d2:
                    43:f8:b1:4c:db:24:69:28:83:78:23:d9:97:cc:95:
                    5d:31:0b:a7:07:e2:70:02:49:ab:66:64:a2:37:37:
                    8a:5d:5d:b8:39:aa:97:33:34:92:e7:0b:bb:e0:06:
                    b1:11:b2:d6:bf:b3:03:fd:57:7f:47:47:54:d8:37:
                    78:36:e9:4f:44:dd:80:b7:94:aa:21:a9:06:50:d7:
                    d8:de:0e:7a:3a:be:bd:58:6e:83:c5:50:63:52:e8:
                    5d:7f:0d:7a:c7:bb:c4:43:cc:1e:5e:83:99:aa:29:
                    f8:74:18:4d:2c:98:ee:09:d8:39:8c:a4:8a:26:2b:
                    69:6b:b2:9b:6d:c1:40:79:fe:b5:12:17:24:a4:d3:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0D:BE:D1:17:1A:74:A3:51:E1:90:DC:9D:CA:AD:3D:C0:87:48:7C
            X509v3 Authority Key Identifier:
                keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0f:0a:e0:eb:a8:38:ef:dd:bb:bf:9c:03:fa:a4:35:b2:95:
         51:16:7d:2b:66:ac:4a:c4:bf:65:1a:2b:8b:d3:d4:c4:51:05:
         62:6e:ac:54:9e:e2:27:0c:a0:ce:09:71:fb:3e:dd:79:9e:47:
         e3:37:e4:24:4c:7a:d6:d5:b5:26:5d:48:6b:4d:4f:e7:d3:f8:
         32:d0:ad:60:50:18:f9:8d:06:98:9b:d1:7c:b5:9d:a1:9d:56:
         78:70:98:76:a1:90:7a:e7:8e:fa:e9:0a:a9:13:57:19:66:be:
         0d:7e:14:e8:a0:f8:fd:45:57:3a:6f:97:d1:c9:86:89:f3:b2:
         79:94:4d:a6:8f:fb:6e:c3:a5:01:c3:31:da:97:ec:e5:f6:a2:
         85:75:a3:86:78:89:02:0f:31:f7:af:58:48:da:37:82:b4:7b:
         44:55:e0:d0:ee:41:1a:28:e0:45:da:bb:84:a2:51:69:fc:dc:
         fe:20:1b:be:d6:f4:3e:6a:74:ee:56:5e:a1:dc:5b:2e:b9:0b:
         22:6c:47:2d:8d:ba:83:27:93:c7:dd:17:6c:78:d7:79:37:c9:
         0f:a3:78:a8:2f:dd:5c:0d:8e:ad:64:6a:3a:c1:03:9f:e8:1b:
         b5:ee:9f:d9:50:e0:05:fe:ed:7b:40:5d:da:e0:17:53:91:0a:
         8d:0a:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 11:25:41 2026 by rpki-client