This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          N0UWbS9WfJGDZ18lmXpFYFxCJbVDITM2p0f25JwGg7k=
Subject key identifier:   5F:7B:B7:86:6D:B4:0A:71:7D:E2:BF:E5:B1:4D:75:B5:90:E4:C4:F5
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       019C42B4169077E7FB573376F5043B7E4649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          0F44
Signing time:             Mon 09 Feb 2026 14:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:24 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: 2Erwf40OINyyNINGQvlyo6o6GgxzaZHLcfG4Vb/YakQ=)
                          2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:16:90:77:e7:fb:57:33:76:f5:04:3b:7e:46:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Feb  9 14:00:24 2026 GMT
            Not After : Feb 10 14:00:24 2026 GMT
        Subject: CN=5f7bb7866db40a717de2bfe5b14d75b590e4c4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:c5:6c:45:0d:d0:3e:ed:ca:6d:34:4d:55:
                    dd:a0:71:20:8f:dc:d6:30:50:81:3c:fb:1d:d9:d1:
                    25:9b:ce:a6:dd:fe:1f:75:c4:0b:79:84:a1:69:58:
                    59:b7:67:46:b4:fc:62:55:26:b2:ce:31:6a:f6:c3:
                    38:0f:ff:16:b5:7f:6d:f5:87:fc:07:c5:bc:b1:21:
                    a8:4a:1d:d3:f8:52:15:a5:7c:c4:6a:1b:ea:45:c2:
                    c6:f3:2b:bd:9d:5f:1e:3d:75:44:0f:24:14:41:5b:
                    ab:67:59:4c:11:ed:49:ec:0d:f3:a6:44:d7:ba:b9:
                    c5:0f:01:b1:d6:e4:1b:03:12:81:ca:eb:d6:33:8f:
                    1d:96:2c:4a:96:a5:9d:87:9d:a4:f5:71:67:c7:27:
                    c6:57:09:4d:28:12:8c:7c:a5:d5:d5:96:95:f2:83:
                    8a:ff:06:19:03:8f:03:03:07:88:24:b0:1b:48:b3:
                    79:14:33:7d:04:9e:f3:c9:23:fe:47:d4:ee:d7:20:
                    6f:76:bb:42:dc:a4:a0:4c:ca:72:1e:d9:97:f5:b0:
                    7c:99:e6:e8:77:fe:5f:81:f7:47:15:b1:50:aa:45:
                    66:a6:b1:1d:78:30:92:fd:c0:70:72:c8:67:35:09:
                    b4:88:df:a4:02:32:d9:f7:75:d5:2d:a7:a9:c3:90:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:B7:86:6D:B4:0A:71:7D:E2:BF:E5:B1:4D:75:B5:90:E4:C4:F5
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8b:ad:3f:c9:af:f4:f0:38:24:e5:59:0e:5c:54:3f:e3:75:
         ac:84:e8:54:b1:6b:75:44:d0:cd:a4:5b:0e:15:3b:f5:1c:86:
         cd:b6:06:a6:2e:fa:bd:ef:0e:68:83:f2:73:09:ac:87:56:2f:
         d4:46:8b:fc:af:e4:85:b2:09:fd:4f:65:c5:9e:fc:01:2a:64:
         19:4b:16:ef:85:50:9b:3e:a6:60:a5:3e:1d:ee:d4:b3:fb:92:
         bd:b2:13:2e:a5:10:00:b8:b7:9d:54:fb:d8:ae:66:75:a1:7f:
         27:75:b7:6f:41:8f:91:58:3d:33:1e:12:02:b3:c1:e4:4c:cb:
         fb:fe:f2:2f:1d:d9:eb:23:ea:12:d8:1a:7d:9c:61:f6:ed:33:
         8f:c1:d8:6c:54:4a:cf:c4:f9:1c:d9:21:2e:4b:a0:88:27:39:
         2f:3d:68:73:43:53:ed:7c:4c:c4:44:28:0d:41:1f:28:a4:52:
         24:0e:1f:91:32:14:01:a0:6b:ed:1a:3c:9d:65:98:16:fb:4f:
         74:29:24:4f:8f:1b:16:b4:c9:87:a5:c1:3e:be:b2:ad:1e:1a:
         e1:21:75:18:9e:46:7b:1e:94:70:e4:69:ff:af:fa:a2:4f:90:
         f1:76:cd:1b:f8:7f:ec:6c:92:5f:b6:dd:48:8e:b7:5b:22:e3:
         9b:2e:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:01 2026 by rpki-client