This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File:                     3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier:          yHd8wjVvDVu7cIhanQmWg1t5t9W18tityHq6wpJt/Kk=
Subject key identifier:   7B:51:FF:5F:C3:0D:4D:B1:47:55:57:C2:56:29:89:59:75:5F:B8:E2
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer:       /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial:       019C427DAECD1C19871639F4E9A4AF6B8C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number:          0E9E
Signing time:             Mon 09 Feb 2026 13:00:58 +0000
Manifest this update:     Mon 09 Feb 2026 13:00:58 +0000
Manifest next update:     Tue 10 Feb 2026 13:00:58 +0000
Files and hashes:         1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: ERvon5dsAtdzmtpnyqt2vKjsXvLYdrj3TbGSfQRsZvQ=)
                          2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
                          3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ae:cd:1c:19:87:16:39:f4:e9:a4:af:6b:8c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
        Validity
            Not Before: Feb  9 13:00:58 2026 GMT
            Not After : Feb 10 13:00:58 2026 GMT
        Subject: CN=7b51ff5fc30d4db1475557c256298959755fb8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:07:4b:75:25:84:6c:3a:4a:72:34:8b:f4:
                    a8:5d:45:4f:68:b5:bb:34:7f:aa:d1:36:7b:b3:50:
                    f3:42:e0:06:b1:1e:66:11:33:4b:92:b3:37:1b:71:
                    c1:fc:a8:f2:5a:b6:ee:59:d8:68:3c:62:22:c8:e1:
                    8d:2d:4a:eb:7c:a3:72:53:fb:d7:04:6b:bb:97:f2:
                    0b:46:9c:42:6b:fa:61:7d:79:01:f0:1a:c7:7b:3e:
                    34:73:0b:21:ed:26:6a:06:ce:f6:b8:74:a4:95:91:
                    00:c2:60:ba:d7:c1:44:56:5a:10:7a:9a:dc:aa:0c:
                    2b:d8:1e:1a:f8:11:0c:12:fc:8a:4d:a6:e3:fc:33:
                    14:78:f8:f4:f8:a6:f0:cf:11:c2:6e:e6:5e:43:18:
                    63:04:54:29:e5:0a:b9:d1:27:f9:44:9a:34:73:c8:
                    d7:b6:0f:17:cb:79:c0:52:a4:90:15:ee:d0:a0:c0:
                    da:1b:0c:cc:c1:a0:60:76:68:9f:93:09:35:25:1a:
                    95:26:27:64:77:27:0f:01:22:db:00:9a:46:d5:e5:
                    15:fa:71:a2:88:84:f9:be:67:52:11:22:d0:09:f9:
                    19:01:15:1a:58:e0:9f:d6:e1:bd:c7:14:de:01:d0:
                    dc:4c:fb:54:f4:b6:d8:dd:49:84:81:75:23:f1:61:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:FF:5F:C3:0D:4D:B1:47:55:57:C2:56:29:89:59:75:5F:B8:E2
            X509v3 Authority Key Identifier:
                keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:43:3f:ac:74:bd:e7:61:d6:ff:28:0e:6b:cc:50:5b:52:
         8a:c5:59:48:4e:ed:f6:23:bf:6d:6a:a6:5e:8a:b2:99:26:fe:
         a3:7b:fd:af:6c:b0:5b:c6:be:d0:27:df:40:4e:40:d5:3f:0b:
         98:35:84:71:57:50:55:e7:ed:1f:08:a1:22:71:d1:aa:4f:41:
         54:1e:14:bf:24:0f:30:88:2d:9e:06:c6:37:f1:fb:7c:c6:84:
         1a:74:b7:e9:c8:e3:27:66:36:76:d0:e7:b5:3b:b0:ce:70:d7:
         d3:e3:fa:39:b1:ae:3a:01:1c:07:62:7a:1f:dc:6d:4d:82:7d:
         f4:e3:23:30:6f:cf:b9:28:00:2f:67:c3:fb:e9:c8:6e:e2:c2:
         17:95:da:3d:7e:2e:68:9c:26:50:9c:f1:a4:cd:a6:3b:b2:8f:
         1f:10:1d:09:61:31:29:fe:a0:c2:a4:65:5e:0b:50:45:f3:2d:
         45:ec:ee:8b:bc:85:dc:92:83:09:05:ee:f2:26:d6:b1:0e:fa:
         da:be:20:6d:df:4d:c9:04:e0:5f:39:9d:ed:f3:6e:7d:a8:b0:
         83:0a:b7:e4:c7:de:0d:b9:d1:b6:a2:f1:18:67:46:c3:72:fb:
         ab:af:c5:71:09:53:86:b2:f6:41:e0:ab:24:98:d7:14:14:5b:
         b3:6c:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:21 2026 by rpki-client