This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File:                     3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier:          S7QABszyeIRHh6R1i26r1//8Hj9VJtuqzN6dRd3sv1M=
Subject key identifier:   B2:C1:15:F4:16:6A:9B:0D:29:D4:44:9F:C8:55:C2:C0:0C:EA:27:79
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer:       /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial:       019C3EA128D508ADED277E07E80F46BEF760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number:          13D7
Signing time:             Sun 08 Feb 2026 19:01:14 +0000
Manifest this update:     Sun 08 Feb 2026 19:01:14 +0000
Manifest next update:     Mon 09 Feb 2026 19:01:14 +0000
Files and hashes:         1: 0HMgqo-FcUlAKpe-2jf9Wu7Y3cM.roa (hash: IcM8BqqGd2XpBsfYCw1lBVRkzq96ORvdNJYqHRjdG1s=)
                          2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: ppH9tgMy7X3zctFLZSB0Zga9+EvXtevk3nCx8hQSbvw=)
                          3: I_2uBgWEYrZpxVfbGv4JxwzCcyY.roa (hash: qgF8NOZ9qWrLEJeLRlgLcrNdcOz8VEStjBkpeeXYypo=)
                          4: TCb5uFhPdPPt5s0zbZfU0CT_KnY.roa (hash: 3tVk5RYg9temA1jbnQb/lg9ElUgEcrVoHItu4Xp5xlA=)
                          5: neAhPNqPa8HLmM-II12T6MhnRb0.roa (hash: KTQ++iMfH5Y6RkGSvY75vXuysELHRP99mTfhnNvwTDY=)
                          6: niq9BskF1-HN8N01Uhq18XKJ3sg.roa (hash: GiVP0AjWLBC5JdIWnvOs7uMSDjkL+up32iiNPv79Y3M=)
                          7: rtLM2zS6nbxN5Zl36aO-CimL6ts.roa (hash: AeNxSI4pe7d7Yrc4Y69TuhscjVaBxvQX11kEuGrkDRk=)
                          8: w-GXL-Q7Dc2KxDH7fwkov8aIyYY.roa (hash: zTQYCrtBiXxDXQP7Se/5A2Fh+8c3daxQ1a11n75yE/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3e:a1:28:d5:08:ad:ed:27:7e:07:e8:0f:46:be:f7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
        Validity
            Not Before: Feb  8 19:01:14 2026 GMT
            Not After : Feb  9 19:01:14 2026 GMT
        Subject: CN=b2c115f4166a9b0d29d4449fc855c2c00cea2779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:0e:ab:58:a9:00:bd:30:89:58:b2:6b:23:
                    7c:9b:78:6a:3b:c4:fd:6c:c6:96:3b:5c:73:61:90:
                    72:e1:60:97:82:56:7f:e4:3b:4d:ea:82:f3:a9:fe:
                    c0:f3:0e:22:08:41:5c:f0:7d:8d:0d:cf:fe:a3:00:
                    63:ea:36:c5:b2:a0:86:44:d9:3b:ac:bd:83:dc:6c:
                    5e:96:2d:c5:48:f8:6e:64:87:87:b9:2f:4f:e3:2d:
                    31:cc:7d:43:0a:71:2d:8a:f1:28:44:4a:1b:f2:bb:
                    f6:bd:78:3d:58:08:b4:c8:91:3d:3c:fe:29:25:9a:
                    b2:fc:bb:83:15:b6:f3:88:b7:bd:25:92:d6:15:ee:
                    1f:19:43:3f:af:ba:37:0e:f1:38:ab:0d:af:01:ce:
                    69:3d:0c:2a:f9:7c:2b:05:24:ca:2f:f0:c6:32:66:
                    81:5b:27:f0:d8:c4:c9:b6:57:ff:e8:77:fc:8c:cc:
                    8f:af:29:01:28:82:39:3c:29:8c:c8:a4:8a:f9:1c:
                    f5:17:ae:ae:9b:6a:c5:cd:4a:93:c3:ec:f7:f9:75:
                    01:77:8f:db:fd:16:ae:5d:93:d1:34:93:30:bf:b0:
                    60:85:2f:dc:be:2e:6c:04:83:b4:c2:12:76:50:d6:
                    ca:12:3f:dd:36:3f:71:a6:3f:58:fb:a7:49:86:b5:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:15:F4:16:6A:9B:0D:29:D4:44:9F:C8:55:C2:C0:0C:EA:27:79
            X509v3 Authority Key Identifier:
                keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:ef:21:17:7b:fb:5e:7f:73:8c:65:56:e8:de:0e:77:a3:
         7e:32:61:ed:d5:85:61:61:45:70:65:92:cf:14:60:0a:df:c6:
         54:8c:48:15:47:02:eb:a1:40:5d:53:a9:7f:a0:2b:d5:98:44:
         ed:48:77:99:cd:a2:71:3e:4a:f5:44:d4:36:de:63:13:7c:37:
         d3:5e:6e:82:ab:f7:e2:5a:80:a9:cf:a6:f2:65:dc:af:df:ea:
         f9:e0:7f:52:cc:4f:d3:65:16:b9:69:0d:db:b0:38:7d:1b:31:
         1b:84:77:0c:33:c3:46:e2:f5:cf:df:37:9c:d4:b3:a4:63:13:
         49:a3:27:4e:66:d8:90:26:30:fb:7f:a6:75:7b:66:14:2e:57:
         f5:90:21:8a:92:3e:53:36:a9:bf:1d:91:c0:82:7f:31:e2:f2:
         12:0a:b9:a2:80:af:13:10:4b:0a:18:44:1a:d3:63:d3:a5:50:
         65:4f:aa:74:df:66:55:25:70:56:3e:4f:b5:a5:f9:73:08:dc:
         98:eb:b6:89:f9:d4:4b:7f:56:7d:75:bd:d5:a5:ef:32:cd:12:
         25:bd:01:77:6c:48:66:5f:dd:b9:60:2b:4c:18:54:69:9f:ab:
         18:f3:16:47:6c:ed:ea:8c:84:a2:4c:7d:23:b1:8a:13:bc:f7:
         b6:a9:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 22:02:26 2026 by rpki-client