This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File:                     s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier:          u0gMCiyHPePIHDkINW0bdLaRZM/cZPudYcMx82smzsk=
Subject key identifier:   2B:ED:CE:11:7E:B7:C6:24:42:92:36:D3:F7:ED:93:CC:12:EF:5E:1F
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer:       /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial:       019C427D36D43F177230FC8AA509DA54EED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number:          11ED
Signing time:             Mon 09 Feb 2026 13:00:28 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:28 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:28 +0000
Files and hashes:         1: 7_HY5yB8d3Njtf3VZahbVmixIZU.roa (hash: H45Wi9cbUIzhStJ6D1qNpJlOHim13UV0HCf2YP0fQEc=)
                          2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
                          3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
                          4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
                          5: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
                          6: pZS2FuCyE0ac7bgviGBWTjEjxK8.roa (hash: BY2QLyJHYDD23aKTMOr6Dhb2Ou5jiMnicXO1uDe86kk=)
                          7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: BSfn+X3SR6TV6fc1+R1nHOPMdbBBzSV2qh04fSJ8t88=)
                          8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:36:d4:3f:17:72:30:fc:8a:a5:09:da:54:ee:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
        Validity
            Not Before: Feb  9 13:00:28 2026 GMT
            Not After : Feb 10 13:00:28 2026 GMT
        Subject: CN=2bedce117eb7c624429236d3f7ed93cc12ef5e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:2c:82:56:e1:9a:67:b3:aa:67:8e:03:68:
                    86:47:09:75:3b:91:d6:90:94:d5:dc:bd:f0:3e:2b:
                    e9:76:e3:c8:03:b0:42:1c:95:97:32:4c:df:e2:e7:
                    47:d0:b6:98:5c:57:cb:ef:07:fc:bd:39:fe:43:05:
                    45:79:7c:34:54:ff:59:8e:87:ea:b2:df:30:fb:3f:
                    ff:55:e8:d7:e7:04:6c:77:35:98:51:b7:3a:30:72:
                    14:e4:7a:d3:07:18:21:ac:a3:b1:25:ee:dc:1c:b7:
                    cc:1d:4e:13:52:2d:70:24:ec:93:2d:64:aa:80:c0:
                    68:6d:b6:54:46:6f:9d:d5:b5:45:46:65:8d:cc:66:
                    41:97:29:fd:83:8a:4f:22:56:ce:11:aa:54:41:1d:
                    3f:42:21:91:24:41:91:24:95:11:26:d5:ea:5a:64:
                    d0:64:dd:30:a8:8d:e3:0b:03:11:f7:53:5e:db:74:
                    ed:79:83:1a:da:a4:cd:dc:b5:65:20:96:83:16:4b:
                    0f:62:3a:ae:f5:0b:77:10:ff:e6:bf:5c:09:4f:61:
                    4c:6e:3c:42:c1:97:a0:4e:4b:38:22:9d:20:70:b1:
                    68:73:f3:70:94:93:39:f1:ec:17:86:03:b9:01:b8:
                    e5:f2:55:07:90:34:6f:68:b3:9c:da:3f:88:11:a9:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:ED:CE:11:7E:B7:C6:24:42:92:36:D3:F7:ED:93:CC:12:EF:5E:1F
            X509v3 Authority Key Identifier:
                keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:08:b5:89:bc:3f:02:9a:8a:68:1b:b0:92:1d:67:c0:5e:38:
         65:39:3c:0a:84:72:b8:c5:95:03:97:9b:f8:2d:f3:c7:30:72:
         02:b9:9e:87:46:3d:11:fc:48:d4:af:e9:21:23:40:31:d3:2f:
         d2:b8:b8:84:c2:d8:c9:71:74:af:b4:0c:6d:4b:d8:6f:da:2e:
         09:56:53:04:09:00:e4:1b:53:b5:23:68:a0:fc:23:49:50:e3:
         a8:27:f7:3f:fb:f9:fd:70:1e:f8:b0:a1:66:79:c1:c3:d7:b3:
         59:a5:b1:9b:ca:30:14:98:0d:0f:9e:1e:13:5e:b3:e7:60:a1:
         97:87:fd:0e:2e:b9:13:96:cf:39:12:89:f0:9a:66:d1:59:7f:
         89:1a:57:66:6c:62:22:52:fd:a6:04:01:01:82:18:89:eb:76:
         9a:87:07:ff:a6:5f:47:45:78:da:f3:49:5c:f6:d9:bb:eb:0a:
         8e:12:0e:52:81:dc:11:de:68:68:c3:84:56:51:20:e6:34:75:
         16:80:b2:4e:66:37:1c:47:a4:ae:7c:5f:86:a1:d1:a4:0e:9e:
         63:04:d6:09:14:ad:13:37:e4:e6:72:93:df:61:45:96:33:c4:
         da:d8:de:97:4d:92:fc:3a:9b:a3:42:2e:e2:4d:53:38:cb:6f:
         e4:23:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:46 2026 by rpki-client