This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
File:                     RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json)
Hash identifier:          jc5/Cqz8pltZLRRLhZMEW392aDU7S6Tc39npTAXXSxw=
Subject key identifier:   33:FC:DB:3F:69:5B:92:6C:3F:E7:A0:A2:A8:41:2C:BB:BA:0C:9E:92
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Certificate issuer:       /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial:       019C4358F632F192A0D700CAEDBA41C58F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
Manifest number:          14C3
Signing time:             Mon 09 Feb 2026 17:00:29 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:29 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:29 +0000
Files and hashes:         1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: YeP9jrljqxYNPF2JZ+gsh94CELtbLlxZ0ztXanpcA7A=)
                          2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=)
                          3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:f6:32:f1:92:a0:d7:00:ca:ed:ba:41:c5:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
        Validity
            Not Before: Feb  9 17:00:29 2026 GMT
            Not After : Feb 10 17:00:29 2026 GMT
        Subject: CN=33fcdb3f695b926c3fe7a0a2a8412cbbba0c9e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:4c:64:a0:61:73:5d:00:3f:39:0b:6b:10:
                    cd:78:88:1b:89:55:3b:a5:58:fd:3d:2f:24:cd:d6:
                    b9:3d:a1:fe:66:59:0d:c5:81:83:21:32:91:92:0c:
                    36:5e:09:4e:20:ac:a0:3f:9e:69:51:36:de:4c:a9:
                    41:d3:08:02:2d:11:29:d0:47:70:cc:ba:79:cd:0e:
                    45:e2:28:83:7e:17:52:14:ef:6d:a8:ee:c3:e1:e2:
                    da:bf:85:fa:41:7f:b4:fd:00:3b:0c:da:e6:7b:ed:
                    cd:55:33:ba:2a:cd:34:95:54:e7:5f:32:51:a9:99:
                    6b:ce:73:89:34:06:4d:5f:49:e4:88:1b:1b:ba:d3:
                    84:c3:80:c6:a7:b7:5f:6d:35:bc:80:76:4f:92:d0:
                    6a:2b:36:07:38:08:f7:0d:de:78:29:a8:89:4a:d5:
                    48:68:4c:9d:b8:60:09:a9:f9:54:2d:37:f5:81:00:
                    33:4d:0e:70:fd:a7:a5:85:ae:80:58:64:4c:5f:dc:
                    d4:e4:7d:26:9a:f1:f7:15:d0:11:18:60:93:8a:98:
                    2c:41:c3:14:06:18:d7:ea:a1:93:ad:13:89:fb:81:
                    cb:31:ac:ec:69:17:cf:fb:10:92:6c:a6:b5:3b:96:
                    e1:70:5f:50:9c:e3:bf:e8:7c:74:7d:2c:86:4c:62:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FC:DB:3F:69:5B:92:6C:3F:E7:A0:A2:A8:41:2C:BB:BA:0C:9E:92
            X509v3 Authority Key Identifier:
                keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:60:5c:fe:8e:dc:ba:53:15:d3:2e:a6:ee:f8:6f:f3:65:
         e4:ae:fd:88:ab:c8:74:5f:9a:b7:91:2d:a4:34:12:d6:29:03:
         cc:65:f8:13:b8:53:b1:a5:cd:b3:f0:cf:87:a1:25:b4:54:d3:
         4e:d3:a6:d8:27:33:1b:a2:9e:87:b7:31:60:0a:65:19:18:90:
         35:89:97:b2:4d:a2:fb:24:00:0e:66:c3:0e:79:e6:dc:a2:94:
         55:5e:d9:2f:cf:cd:55:50:db:db:09:a4:16:1a:3e:f0:99:3a:
         2c:04:c3:fb:3e:dd:bc:2f:e7:b1:0c:a6:35:4c:43:6f:94:5c:
         d7:5a:f8:73:b5:7e:a0:d6:e9:28:e2:3d:54:df:d9:b2:05:98:
         25:2a:2c:f9:e7:c7:f6:b0:c7:6e:2a:35:82:a3:b9:18:ab:5b:
         4a:e7:e6:81:15:36:b2:cf:b7:22:a3:d0:bf:a3:97:1c:60:8c:
         61:9e:f7:a1:cf:e2:5d:63:df:5c:4e:90:90:2b:1f:58:53:96:
         a9:f4:fd:1b:a3:50:6c:bf:3d:6d:00:54:2c:11:9c:ee:d5:fa:
         b1:52:a0:11:ab:51:0d:03:8f:70:65:f4:ff:48:47:4e:b6:b9:
         8c:a2:bc:33:d3:1b:c8:21:3a:c8:0c:61:fb:dc:91:d3:3f:fe:
         c8:48:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:38 2026 by rpki-client