This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File:                     AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier:          Hiag8QBAdM6mVFnj5uXRz5OGCejt9I7+htwA1ID73Jg=
Subject key identifier:   9C:A2:39:30:3D:DC:1F:EE:8B:8B:E8:7B:C1:27:F4:B3:13:AB:D9:AB
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer:       /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial:       019C4322DA8FD235E78FFC149DF628B9D7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number:          152C
Signing time:             Mon 09 Feb 2026 16:01:23 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:23 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:23 +0000
Files and hashes:         1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: D0RGVthPd8ys7YR/9On7A1i3jrxKFRxiL6RjO5Yr6Jo=)
                          2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
                          3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:da:8f:d2:35:e7:8f:fc:14:9d:f6:28:b9:d7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
        Validity
            Not Before: Feb  9 16:01:23 2026 GMT
            Not After : Feb 10 16:01:23 2026 GMT
        Subject: CN=9ca239303ddc1fee8b8be87bc127f4b313abd9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:70:01:dd:c6:d1:88:74:6b:02:1a:f4:48:
                    c9:39:4e:c7:52:57:14:0e:5a:c5:73:52:6e:03:d2:
                    47:36:91:3f:4f:10:c3:42:fa:be:c8:1e:8e:72:5d:
                    87:de:04:cb:db:d1:76:e8:1e:3a:28:11:2b:56:e0:
                    36:a0:07:71:18:6d:5b:0f:18:55:61:0d:81:56:40:
                    95:3b:91:ac:c5:1f:f4:d4:1e:b3:62:e7:2f:3f:27:
                    ba:73:df:59:69:2e:4a:e8:2d:d9:2d:64:51:d9:87:
                    e4:a9:b1:26:65:8e:6a:37:b4:a1:37:72:31:f8:a6:
                    8b:4c:2c:b9:84:44:3b:92:c9:3c:4b:8c:2f:5f:2c:
                    5b:c4:69:89:7b:e5:ae:ba:24:8a:96:07:11:96:21:
                    0b:bd:fd:e1:29:d9:f4:c9:e3:13:15:34:eb:24:70:
                    aa:3d:64:25:fe:a5:8b:84:97:5e:bd:a1:fd:b2:85:
                    6e:e3:79:ce:d9:b7:27:1c:07:05:cb:1f:11:df:ea:
                    d4:45:b3:8d:ea:ca:b1:df:20:07:75:8c:03:da:79:
                    d9:83:64:3d:ed:2c:d4:ad:08:ed:6a:ae:a5:e8:04:
                    d2:fe:54:5e:b0:31:3c:df:3d:10:69:a7:e4:71:84:
                    b6:f4:e8:00:3b:5c:3a:09:70:d6:a2:dd:f3:c6:bc:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A2:39:30:3D:DC:1F:EE:8B:8B:E8:7B:C1:27:F4:B3:13:AB:D9:AB
            X509v3 Authority Key Identifier:
                keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:bd:35:1e:45:5e:cb:2c:e0:ae:d7:ae:8a:00:e4:66:22:
         64:ef:d3:b2:c1:b5:ae:cc:8c:09:2b:14:78:5b:19:25:10:98:
         f0:75:e5:7c:c4:d6:dd:b6:dd:84:de:c9:ae:15:43:cd:91:f0:
         a8:53:89:5b:bf:25:2d:93:8b:0a:d6:91:a8:be:cc:ed:34:42:
         56:08:01:19:b2:b4:83:6a:36:46:60:77:b8:cb:ff:80:46:da:
         50:29:cf:6e:dd:48:d4:41:03:8b:b9:78:7a:9f:13:c1:3a:fa:
         59:2c:63:79:d6:ba:e6:63:66:92:5d:86:ce:fb:26:4b:d8:35:
         08:e8:1e:3f:72:a0:6a:c5:e6:18:27:37:8b:ff:92:ea:62:9f:
         d7:af:3a:e4:51:8e:f5:25:50:bd:92:76:15:46:7b:5a:2f:f2:
         58:3d:85:7a:24:50:2b:eb:ce:5f:3d:05:05:5e:34:17:2d:68:
         c7:f3:ea:7c:ca:b8:38:be:3d:be:cd:39:54:8c:ee:01:bc:3f:
         60:d1:db:c0:78:32:9a:4e:cc:fe:6d:85:2b:b6:71:88:7d:fe:
         ed:78:d2:fc:f1:9e:9a:2d:57:d4:44:73:f8:be:8f:04:ea:ef:
         b0:f0:94:04:45:6d:cd:1a:39:db:26:1c:4a:5e:c0:9d:4e:39:
         fa:3f:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:41 2026 by rpki-client