This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          GqmdRJ+cFbUy0YTxvJv8NaRmgxZOiMotK+UQKvdVv5M=
Subject key identifier:   9D:72:71:91:D2:CA:EE:6F:FF:05:D8:9F:A4:74:C3:8E:9B:0C:BE:0D
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       019C43FE1C96BDA8CDEF1F5A5795CD4439C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          0ED1
Signing time:             Mon 09 Feb 2026 20:00:52 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:52 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:52 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: VrN0brhFwkwa2YfkiqWPCNggyiiwgroiBMSqBNDlr94=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fe:1c:96:bd:a8:cd:ef:1f:5a:57:95:cd:44:39:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Feb  9 20:00:52 2026 GMT
            Not After : Feb 10 20:00:52 2026 GMT
        Subject: CN=9d727191d2caee6fff05d89fa474c38e9b0cbe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:20:7a:b7:fe:97:ea:d4:0b:bf:4d:e3:e9:4e:
                    d3:a2:88:cb:0f:c6:45:b2:b1:91:7b:3d:35:de:39:
                    a0:81:f1:05:95:a0:e4:b9:0c:77:1b:61:de:14:96:
                    00:9b:97:8f:8b:8f:3c:36:49:23:6d:e8:36:75:58:
                    ac:9e:3c:e2:1f:46:de:17:3c:32:8e:71:f1:2d:e0:
                    52:e1:13:1d:71:9f:97:ad:17:9b:1c:cb:8e:61:2f:
                    62:53:58:12:96:77:4f:a9:5c:81:29:5e:a4:69:a9:
                    a9:53:d2:02:7c:e4:a2:e6:e5:13:13:b2:8c:d3:6a:
                    24:fc:11:f5:41:a2:5d:b1:88:69:e3:07:34:6b:70:
                    a4:c8:1a:9f:78:d0:76:29:76:88:52:6a:69:cc:a1:
                    8b:98:c5:b5:38:99:2b:87:ac:f4:43:31:6f:d4:ac:
                    0b:47:eb:09:c6:29:9a:45:0f:2b:f8:e6:35:69:6d:
                    43:8a:20:ca:37:3e:02:15:87:94:0e:d3:14:92:34:
                    c0:62:b1:38:e5:8e:89:20:24:48:ad:f2:6f:6c:61:
                    ef:44:ca:db:12:ad:68:d5:3d:f9:32:b6:36:0d:3e:
                    9a:21:51:7a:67:1e:c5:b4:4c:c0:ee:71:23:7b:47:
                    7c:fb:91:06:1c:f7:2a:99:a9:7c:8f:0f:73:b1:04:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:72:71:91:D2:CA:EE:6F:FF:05:D8:9F:A4:74:C3:8E:9B:0C:BE:0D
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:ad:e5:12:0a:24:5f:f6:06:6f:4c:ee:f1:22:f4:dc:76:
         a3:16:48:0f:31:aa:59:8a:0b:05:9d:81:85:f7:cb:08:ae:02:
         f6:7d:2b:28:f8:13:c4:45:6d:8b:b3:6f:68:af:fc:2b:26:29:
         c5:81:7c:e9:2e:84:01:a6:55:4c:9f:e0:2d:d9:e1:97:12:bc:
         04:a7:56:a0:3a:13:4c:af:69:dc:fa:d9:9c:34:7f:3a:65:12:
         a5:8b:bb:56:37:a1:00:26:82:f9:a7:e4:44:91:3a:9e:22:ba:
         43:ba:ab:f0:f4:34:9a:43:1a:ad:58:53:c6:ab:64:ff:93:7f:
         30:f6:52:e6:3c:42:4b:8f:4c:88:15:cb:e4:3e:2f:b0:31:1a:
         22:06:1c:e7:3b:0c:d1:22:7b:0c:b8:b6:71:62:ba:58:69:f2:
         20:ec:d2:3c:b6:d0:a9:29:d5:ec:7e:04:38:29:b2:a1:af:6a:
         a7:b7:c3:ac:0b:52:fc:33:f7:60:0c:ec:5e:b6:63:a1:66:1e:
         6e:7f:04:9a:34:58:26:50:24:a8:57:2d:88:9a:c8:4b:eb:4a:
         65:10:c0:f9:ad:e2:cd:79:f8:ad:c1:dc:f9:b9:8c:e6:8e:4e:
         71:d9:e8:9f:f5:3f:e0:bc:c0:5d:a4:80:33:e0:7f:6c:97:83:
         d2:39:2a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/hyWvajN7x9aV5XNRDnIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4
MTI2ZWYwHhcNMjYwMjA5MjAwMDUyWhcNMjYwMjEwMjAwMDUyWjAzMTEwLwYDVQQD
Eyg5ZDcyNzE5MWQyY2FlZTZmZmYwNWQ4OWZhNDc0YzM4ZTliMGNiZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yB6t/6X6tQLv03j6U7ToojLD8ZF
srGRez013jmggfEFlaDkuQx3G2HeFJYAm5ePi488Nkkjbeg2dVisnjziH0beFzwy
jnHxLeBS4RMdcZ+XrRebHMuOYS9iU1gSlndPqVyBKV6kaampU9ICfOSi5uUTE7KM
02ok/BH1QaJdsYhp4wc0a3CkyBqfeNB2KXaIUmppzKGLmMW1OJkrh6z0QzFv1KwL
R+sJximaRQ8r+OY1aW1DiiDKNz4CFYeUDtMUkjTAYrE45Y6JICRIrfJvbGHvRMrb
Eq1o1T35MrY2DT6aIVF6Zx7FtEzA7nEje0d8+5EGHPcqmal8jw9zsQQxtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1ycZHSyu5v/wXYn6R0w46bDL4NMB8GA1UdIwQY
MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt
MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl
LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENCt5RIK
JF/2Bm9M7vEi9Nx2oxZIDzGqWYoLBZ2BhffLCK4C9n0rKPgTxEVti7NvaK/8KyYp
xYF86S6EAaZVTJ/gLdnhlxK8BKdWoDoTTK9p3PrZnDR/OmUSpYu7VjehACaC+afk
RJE6niK6Q7qr8PQ0mkMarVhTxqtk/5N/MPZS5jxCS49MiBXL5D4vsDEaIgYc5zsM
0SJ7DLi2cWK6WGnyIOzSPLbQqSnV7H4EOCmyoa9qp7fDrAtS/DP3YAzsXrZjoWYe
bn8EmjRYJlAkqFctiJrIS+tKZRDA+a3izXn4rcHc+bmM5o5Ocdnon/U/4LzAXaSA
M+B/bJeD0jkqVA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:42 2026 by rpki-client