This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File:                     3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier:          v504GY0PmW8qNpltdxHsJTQLNzfe7h7d1vhgHydp4gQ=
Subject key identifier:   8C:D9:01:EC:13:3C:87:A9:CC:61:50:E2:04:4F:95:C7:43:09:47:CF
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer:       /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial:       019C4321FA3C88EF553524923470932D2C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number:          05E1
Signing time:             Mon 09 Feb 2026 16:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:25 +0000
Files and hashes:         1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: qvaGSm6mbuioztOfDY8PtmQQsyNNQo37J2+ldsbDuF4=)
                          2: SmafHrnaMWuly5trV1gC3gRhXUk.roa (hash: 48PkkvQ09WAg7AqwCjJuzSMQ1WYgWgSM17QO2PTsJN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:21:fa:3c:88:ef:55:35:24:92:34:70:93:2d:2c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
        Validity
            Not Before: Feb  9 16:00:25 2026 GMT
            Not After : Feb 10 16:00:25 2026 GMT
        Subject: CN=8cd901ec133c87a9cc6150e2044f95c7430947cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:42:ca:91:fb:69:48:64:76:b3:4c:3d:be:
                    44:76:af:d1:c7:39:ea:94:29:b9:37:49:4d:bc:ca:
                    93:f4:76:ea:86:5c:48:7a:6a:f8:30:bf:84:ab:d3:
                    4a:3c:12:1c:67:99:1b:43:ac:08:1a:65:ff:31:7a:
                    4a:44:15:66:d6:cd:e1:2a:8a:b5:da:62:7d:8c:00:
                    1a:07:52:28:cd:19:fc:53:5c:c1:0b:6f:fd:4d:5a:
                    de:8a:71:5b:c5:d3:0d:f6:a8:8f:dc:8e:b3:09:5e:
                    6a:3e:b8:5a:e3:7b:a0:08:05:20:6d:6d:02:25:79:
                    86:b4:8c:0c:c8:79:1c:c2:3d:35:b8:f5:9b:38:30:
                    9a:9d:2b:d0:ca:b8:f6:e0:71:92:d9:f7:ec:c6:e9:
                    2d:5b:28:e7:59:ab:2c:fc:0a:fa:43:10:87:b6:e5:
                    70:0c:90:f3:ae:41:16:cb:a3:bf:dc:f0:18:51:3b:
                    81:b4:d4:32:b7:ac:a0:ea:7f:fc:3e:2a:ed:21:89:
                    2a:b6:8e:3d:a5:f9:6e:0b:25:c4:d6:31:7b:17:75:
                    1f:50:07:be:f6:b5:ec:b8:a6:ff:b5:68:7b:d5:57:
                    61:93:cd:87:ed:7a:9e:56:d5:50:6b:38:1a:7e:38:
                    8f:6f:15:06:58:85:64:22:6a:46:db:db:09:82:c7:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:01:EC:13:3C:87:A9:CC:61:50:E2:04:4F:95:C7:43:09:47:CF
            X509v3 Authority Key Identifier:
                keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6d:88:24:d9:f7:38:e6:34:98:1c:6c:ee:18:0c:f0:9f:4d:
         7a:96:a4:d5:9f:47:fc:db:71:28:74:ca:a0:ec:fb:b5:0e:42:
         4b:8d:16:16:a2:57:db:c8:6f:7f:e3:27:fd:74:e7:e0:49:fe:
         4a:88:12:25:be:e7:16:3a:f2:03:38:50:7b:d1:4a:ee:b7:a7:
         5f:c7:c2:d5:58:81:aa:68:35:ee:72:b6:7a:47:80:eb:9a:a8:
         80:95:45:de:6b:51:56:18:7f:ed:33:6c:f8:79:e8:e7:a5:6b:
         e9:36:72:04:9e:f8:54:ff:e2:e0:e7:36:ae:62:40:8d:d2:6a:
         a8:c8:e9:5e:dd:49:a1:f8:a9:d4:48:31:a7:db:4a:db:3b:16:
         f3:5b:96:63:29:cd:55:14:75:3f:74:b1:cf:b3:b0:cf:e9:3c:
         a6:83:f3:9c:a0:35:70:e3:01:03:cf:57:8b:6d:c0:1d:39:88:
         a7:d3:e9:3c:5f:b7:c5:c7:b7:ab:0f:ac:4a:6b:24:2b:fc:81:
         b5:37:b0:b0:f7:a9:76:4a:9a:bf:24:48:80:29:41:3c:3c:36:
         5b:93:88:99:cc:61:ff:8e:77:c3:0a:15:28:3a:58:1c:9d:ab:
         9f:d9:0a:60:d1:14:32:6e:8b:fd:b8:11:39:78:7a:e2:4d:be:
         ff:f0:99:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIfo8iO9VNSSSNHCTLSxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGVkM2VhM2JhNjczYTgwOGNmNWU2YWRjYjUxZWE3ZjMz
ZjQyMDMwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD
Eyg4Y2Q5MDFlYzEzM2M4N2E5Y2M2MTUwZTIwNDRmOTVjNzQzMDk0N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38VCypH7aUhkdrNMPb5Edq/Rxznq
lCm5N0lNvMqT9HbqhlxIemr4ML+Eq9NKPBIcZ5kbQ6wIGmX/MXpKRBVm1s3hKoq1
2mJ9jAAaB1IozRn8U1zBC2/9TVreinFbxdMN9qiP3I6zCV5qPrha43ugCAUgbW0C
JXmGtIwMyHkcwj01uPWbODCanSvQyrj24HGS2ffsxuktWyjnWass/Ar6QxCHtuVw
DJDzrkEWy6O/3PAYUTuBtNQyt6yg6n/8PirtIYkqto49pfluCyXE1jF7F3UfUAe+
9rXsuKb/tWh71Vdhk82H7XqeVtVQazgafjiPbxUGWIVkImpG29sJgscsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzZAewTPIepzGFQ4gRPlcdDCUfPMB8GA1UdIwQY
MBaAFNze0+o7pnOoCM9eaty1HqfzP0IDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMt
MTU3MzBlMjQ2YmE2LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM5YmMtNWZhNy00ZmMxLTgxZWMtMTU3MzBlMjQ2YmE2
LzEvM043VDZqdW1jNmdJejE1cTNMVWVwX01fUWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW2IJNn3
OOY0mBxs7hgM8J9Nepak1Z9H/NtxKHTKoOz7tQ5CS40WFqJX28hvf+Mn/XTn4En+
SogSJb7nFjryAzhQe9FK7renX8fC1ViBqmg17nK2ekeA65qogJVF3mtRVhh/7TNs
+Hno56Vr6TZyBJ74VP/i4Oc2rmJAjdJqqMjpXt1Jofip1Egxp9tK2zsW81uWYynN
VRR1P3Sxz7Owz+k8poPznKA1cOMBA89Xi23AHTmIp9PpPF+3xce3qw+sSmskK/yB
tTewsPepdkqavyRIgClBPDw2W5OImcxh/453wwoVKDpYHJ2rn9kKYNEUMm6L/bgR
OXh64k2+//CZDw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:14 2026 by rpki-client