This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          BibG92mX8u4EUsYiQ/Y7YP2OjkgxTUAAXj5fpy9NuZA=
Subject key identifier:   E4:0D:DC:75:5F:5D:DD:A6:06:9E:E5:42:5A:6E:5F:51:94:D3:D1:69
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       019C44D9FE4605BC3F21E54A28017FA79CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          1812
Signing time:             Tue 10 Feb 2026 00:01:02 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:02 +0000
Manifest next update:     Wed 11 Feb 2026 00:01:02 +0000
Files and hashes:         1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: tJDxVj1sSk248LW4Nm07v0awKNc4u+i56GDiJuEs0Is=)
                          2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:d9:fe:46:05:bc:3f:21:e5:4a:28:01:7f:a7:9c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: Feb 10 00:01:02 2026 GMT
            Not After : Feb 11 00:01:02 2026 GMT
        Subject: CN=e40ddc755f5ddda6069ee5425a6e5f5194d3d169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:02:a6:74:28:12:74:72:5f:cb:7a:ad:f5:
                    e2:30:25:21:27:33:a7:e3:d9:94:8c:27:3a:9b:35:
                    57:ab:3c:20:b6:50:9a:b8:c5:67:d0:36:d7:fc:4c:
                    62:7e:07:ea:47:39:36:ea:0f:07:64:e9:5e:90:98:
                    69:1e:91:5c:5f:26:76:cc:bc:06:c9:90:bb:1b:fe:
                    65:4c:c2:fc:70:3d:99:52:73:30:b6:da:b0:27:e4:
                    de:5e:16:cc:6b:07:e1:3e:d9:93:60:3c:46:07:e5:
                    29:5c:fc:c5:68:0b:11:0e:0b:81:1d:18:82:4b:9a:
                    19:75:59:05:4f:dc:85:86:1a:6e:3b:42:92:a0:8e:
                    95:d6:40:9f:c6:a9:84:f4:d0:5a:ad:b3:2f:1c:89:
                    36:36:6a:36:98:a2:13:b7:a3:88:5f:31:00:0b:4a:
                    f3:0c:ba:09:f0:6b:a4:c5:ba:78:0a:0c:3c:70:a9:
                    d0:aa:9e:56:4a:c2:21:70:bb:aa:66:df:54:0d:1f:
                    17:9a:5c:aa:22:2a:f6:7a:46:02:e9:71:b1:1a:50:
                    7c:91:d4:42:a4:fd:de:4d:9c:0d:11:4b:ca:92:6d:
                    b0:2a:0e:c9:7c:6a:25:a5:13:08:ee:83:89:3c:7b:
                    47:93:59:9a:0a:c0:61:c2:7b:91:d1:0d:5e:5e:80:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:DC:75:5F:5D:DD:A6:06:9E:E5:42:5A:6E:5F:51:94:D3:D1:69
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:b2:74:17:73:62:37:04:24:06:eb:74:83:0e:d6:6b:fa:
         21:fe:44:61:c9:c3:03:4f:98:a2:a9:aa:28:25:80:95:5b:1d:
         0b:15:92:64:c8:bb:5a:f3:e0:d3:b4:77:9b:a1:4a:e8:cd:c9:
         c6:41:33:8e:88:e0:33:29:7e:63:c5:fc:36:5d:2e:7f:f8:7a:
         b7:20:67:6d:d0:27:66:ce:67:b5:95:f5:ed:1b:c6:39:9c:a6:
         e2:07:41:72:b7:84:0c:c4:ca:a4:4a:83:6c:d9:19:1f:6a:66:
         ce:67:8c:61:da:ae:91:32:da:5b:c0:3f:e8:99:2b:a8:92:dc:
         d0:63:29:9f:be:3a:a5:c4:e2:67:85:fd:52:64:03:72:cb:d2:
         6b:ed:a2:34:8b:41:d3:23:20:90:34:e6:e2:d9:aa:e0:c5:32:
         18:9c:9b:08:3f:63:4b:ec:6b:2f:ab:7e:2e:93:46:47:7a:c9:
         a6:4a:4f:93:b5:5e:f8:f7:4f:a5:61:d1:19:0e:e9:92:cf:45:
         4b:92:e3:a8:62:45:27:98:67:c8:ad:ee:36:28:24:3a:3b:df:
         92:29:61:77:ac:b9:58:1b:28:cc:29:1b:12:83:25:be:39:91:
         98:0b:89:dd:3d:51:aa:41:34:d1:ae:78:cf:68:19:8c:43:0d:
         a7:12:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:24 2026 by rpki-client