This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File:                     1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier:          nPKOIUm284nj45LrjmYR7BSvdIIP7m5ZN55cL98HcWY=
Subject key identifier:   F2:C7:87:53:9D:EB:9A:38:A0:C7:71:07:8E:2C:E9:DA:D0:36:D0:EB
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer:       /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial:       019C42B4875FBDB0E8B0AAD671F8517BEDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number:          12
Signing time:             Mon 09 Feb 2026 14:00:53 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:53 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:53 +0000
Files and hashes:         1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: Hdl/wif+CIStlN+NhpEEB8YDuB8v67uEkOj90eivApw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:87:5f:bd:b0:e8:b0:aa:d6:71:f8:51:7b:ed:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
        Validity
            Not Before: Feb  9 14:00:53 2026 GMT
            Not After : Feb 10 14:00:53 2026 GMT
        Subject: CN=f2c787539deb9a38a0c771078e2ce9dad036d0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:0b:bf:a8:dc:ba:2b:5b:f3:43:8f:48:f4:
                    10:67:00:b3:c8:d3:b2:17:ab:12:c4:1b:3f:89:58:
                    5a:30:a6:9d:0b:16:0d:7c:5a:b5:db:21:f0:33:83:
                    d3:60:67:6f:ec:e0:74:31:fd:8a:f0:51:15:ba:2c:
                    44:25:77:96:0d:a9:ec:8d:66:ba:e7:93:00:99:cf:
                    59:b8:30:3c:88:d6:2b:d9:61:40:79:ed:90:1d:0f:
                    ed:b1:2c:1b:92:92:4a:f2:2c:9a:7d:f1:24:9e:ea:
                    38:e1:47:37:d4:cd:74:e4:1e:28:83:80:3b:41:fc:
                    7e:0d:1c:bb:88:3c:f1:ee:3b:cb:13:e0:bd:80:22:
                    b2:0a:a3:d3:8d:0b:98:ce:6e:c3:2b:2f:27:0a:7e:
                    75:94:52:28:a0:43:67:b1:46:66:10:a3:7b:7f:4e:
                    d1:f4:f4:4f:f5:85:6f:98:d8:88:5f:48:5d:6a:80:
                    4e:73:49:64:92:c0:93:a7:b6:34:65:6b:b0:47:08:
                    d6:61:8e:89:51:2a:6c:96:82:91:50:ee:fc:4c:99:
                    80:50:cd:04:a1:4e:da:47:8f:1e:fc:b9:14:56:f9:
                    ed:e8:64:d6:94:e0:51:e0:01:84:a3:88:a3:4a:84:
                    8c:68:8f:50:7c:13:7a:a1:05:1f:ca:40:9c:74:e8:
                    c3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C7:87:53:9D:EB:9A:38:A0:C7:71:07:8E:2C:E9:DA:D0:36:D0:EB
            X509v3 Authority Key Identifier:
                keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:81:71:8c:41:5a:2d:4c:9d:2e:23:95:bf:dc:8c:61:c2:
         b2:30:36:9b:cc:d6:1c:bf:a1:65:3f:79:da:ea:9c:db:2a:27:
         cf:fc:02:d8:03:bf:76:1d:f8:fd:36:58:ec:51:6f:fe:30:9f:
         f4:f3:a5:82:d6:17:2d:63:a1:30:67:52:42:46:72:94:66:51:
         8a:36:95:a0:bb:a2:0f:73:1f:86:44:a8:7a:5d:e6:9c:9c:86:
         2a:1f:5b:23:1b:bf:f5:1a:be:e0:45:bd:df:8d:b5:ca:d9:fd:
         8e:d0:70:fb:3d:20:30:9e:d9:2a:04:74:b8:95:9c:fb:a3:4e:
         71:c0:3c:3c:ad:d8:e4:0e:86:03:27:e4:0c:61:7f:60:9b:c0:
         d8:d0:21:bb:86:76:c3:cd:98:21:85:12:0b:90:b9:a1:44:41:
         0b:26:9e:50:f3:8a:a9:42:64:9a:a4:0f:b7:07:d3:5d:d9:b7:
         f7:25:8f:e3:74:3c:67:7d:60:59:ec:21:9e:e6:e6:8a:8e:d5:
         58:c5:f2:29:4d:93:ea:39:fe:ce:ed:7d:06:f6:4b:1c:19:0c:
         10:8c:4e:af:c8:e9:fd:35:0f:17:cc:58:eb:20:61:3a:d9:bf:
         43:5a:05:6d:51:78:fc:f4:e7:55:a6:a7:f1:38:d5:2e:c4:db:
         ef:4e:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:21 2026 by rpki-client