This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          j5jlf+uZv+0nP1OxHA3Gmd041xDz1lNZIfKmz9EmPDk=
Subject key identifier:   FD:EC:B4:6D:5B:98:A9:45:F6:97:7E:C2:A4:9A:72:C3:92:3F:65:85
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       019C42B40F523D5DF24A64A041DF8B4842A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          12B2
Signing time:             Mon 09 Feb 2026 14:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:22 +0000
Files and hashes:         1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: Se8SEfh4d60NMVABJKff+vN5QpUKOLNknLVKr8UFOu4=)
                          2: 6Eq2K8I-fGAn8TcsmA8SQ1sP8XQ.roa (hash: IMW7BuOpk5K8cLHby0V1FGlX0Kl80xH/PG0dmv5BRa0=)
                          3: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (hash: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls=)
                          4: Y_vUb7xxnEJ_ubUo_5ddtVYFcqE.roa (hash: K9yqS9A7xFeAsAleB3jRUr3PxaQlF2IYyX8ECmCgYiQ=)
                          5: qxrIUacDBXHJek6j0Nv7mnsRC1o.roa (hash: CfRfJJiJ6Hyf/sFNZprZ5Q2eEd/fc1DwfF6aEDqorAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:0f:52:3d:5d:f2:4a:64:a0:41:df:8b:48:42:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Feb  9 14:00:22 2026 GMT
            Not After : Feb 10 14:00:22 2026 GMT
        Subject: CN=fdecb46d5b98a945f6977ec2a49a72c3923f6585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:f7:9b:fa:3f:72:27:e0:b3:7f:53:2a:58:
                    6e:a6:7a:17:dc:20:c7:01:20:cd:da:a8:bf:04:86:
                    d8:38:29:f7:62:22:82:3b:4a:17:e3:a2:b2:88:e8:
                    f5:84:c0:03:3b:d9:33:0b:86:78:ae:5f:bb:9c:3a:
                    36:81:1a:78:df:8e:df:84:72:57:3b:ef:42:f7:71:
                    8b:a5:bf:c9:90:2f:ff:42:bd:37:5f:43:0c:2a:16:
                    80:87:ff:2b:28:3a:7a:92:54:72:17:e8:82:9f:03:
                    dd:50:06:b3:53:cc:d4:ab:03:64:88:64:d1:22:93:
                    fa:35:02:08:1e:1e:98:91:96:a3:5b:46:ff:91:a1:
                    a6:15:c3:9c:36:c9:22:7d:bf:33:26:6d:0c:83:48:
                    68:55:92:1a:15:35:00:65:bb:69:a7:92:f0:17:a6:
                    e5:81:31:eb:f9:3f:83:23:4a:f8:82:38:a3:a0:14:
                    06:ba:54:94:da:6e:a9:29:7b:e5:82:29:dc:3c:91:
                    43:8e:d4:fa:6f:ba:97:44:47:d9:49:d2:da:4d:47:
                    da:08:26:83:45:7b:bb:61:93:bf:33:f9:ad:2b:84:
                    77:db:9a:4d:74:cd:fd:cc:80:04:dd:78:d2:aa:df:
                    fe:d8:78:19:29:75:32:fa:ae:f2:7a:7a:a7:69:0e:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:B4:6D:5B:98:A9:45:F6:97:7E:C2:A4:9A:72:C3:92:3F:65:85
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:05:6b:13:a9:8b:50:fa:1a:c5:56:f8:60:47:7b:6c:ac:
         c3:6b:4d:df:d8:53:af:53:3d:d5:18:29:1d:bb:de:10:09:d9:
         15:4f:bc:ca:27:e4:7a:86:19:19:88:e7:89:e2:75:c7:80:17:
         76:96:a6:4e:c9:88:49:13:a0:be:72:04:17:c4:09:fd:a2:9d:
         5c:fc:84:8d:48:30:d8:e0:c3:19:8c:ff:4b:be:44:93:b9:f4:
         23:98:89:c1:5f:2e:26:c4:8e:d7:f7:62:a5:87:46:1a:dc:a3:
         f1:48:eb:c0:55:c9:0a:a5:24:46:9b:f0:16:29:19:b0:56:a9:
         35:94:61:a9:08:41:38:c7:e3:19:3f:04:4a:e6:4d:f6:05:b6:
         96:c0:66:bc:32:d6:90:2b:3a:46:68:a2:8d:4d:7c:c7:41:29:
         30:49:3b:c2:ed:76:85:f8:ae:9b:67:33:c9:93:a8:01:8c:af:
         e9:e1:67:45:23:8f:a5:6f:24:09:bd:41:5a:ef:53:b1:40:7e:
         83:13:25:65:3c:7f:4b:01:71:d0:78:15:0b:f7:43:ad:d9:77:
         b7:44:a1:e5:23:5b:07:b8:25:95:cf:a3:9c:ee:cb:99:32:8a:
         22:3d:38:af:6b:4b:e5:d6:49:69:c8:fd:22:42:04:13:e4:df:
         b6:fa:7d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:43 2026 by rpki-client