This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File:                     b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier:          AacIHdSZr/I1IOJ6BUVVVKogtfa4Ql9ZNZ7V0w2O8y0=
Subject key identifier:   1A:18:4F:8A:D0:F8:09:31:03:19:26:37:4E:66:1A:A0:CC:D7:CC:89
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer:       /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial:       019C43C71EAF2F78D7DE09F45B55DCAD99EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number:          0F37
Signing time:             Mon 09 Feb 2026 19:00:48 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:48 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:48 +0000
Files and hashes:         1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: ssrJ0UWGYYhLTOnMICPgMCZAnOg4gA9jmBSFitLbqK4=)
                          2: fTfLjB5qDCOrEt1AZqetNR0UP1s.roa (hash: ewzik2ZHIXp5O/f5G7R3qSZhEso+zQPbJgvnDCm9k4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:1e:af:2f:78:d7:de:09:f4:5b:55:dc:ad:99:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
        Validity
            Not Before: Feb  9 19:00:48 2026 GMT
            Not After : Feb 10 19:00:48 2026 GMT
        Subject: CN=1a184f8ad0f80931031926374e661aa0ccd7cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:9d:ab:dd:ae:21:a2:22:40:ca:98:90:89:
                    c3:cb:6d:79:61:5b:c5:e3:66:91:2d:de:bd:95:25:
                    f3:16:d1:58:04:d3:e1:ff:5e:b1:34:49:1c:b4:83:
                    b8:05:2c:32:09:67:63:2c:cd:8c:3f:0b:de:dd:7e:
                    88:65:00:c5:a1:ea:68:af:64:1b:39:6d:15:50:4b:
                    21:1b:2e:e0:3f:5f:65:30:f8:57:d4:99:79:a3:e9:
                    46:ab:ae:22:65:c7:8c:db:8c:ba:f4:bf:a4:a8:d9:
                    df:e0:3a:ba:8b:ac:76:4c:62:c7:6b:71:78:4b:bf:
                    73:79:56:5b:2d:59:1b:76:60:cf:81:7e:4e:98:08:
                    0a:33:e4:24:0c:04:15:e7:2b:61:e8:db:c3:3d:20:
                    f3:1c:60:95:09:c1:3a:96:5e:8b:98:3b:a1:57:6c:
                    98:48:6c:c9:ce:ad:05:0b:ea:19:88:39:8d:43:33:
                    49:79:30:eb:c6:a6:d7:38:47:8d:e4:56:ba:df:bc:
                    04:9d:92:e1:6a:ef:92:da:cf:71:f9:e9:e7:7a:b8:
                    3f:1e:b1:e9:6f:a5:1b:e2:d0:d0:a1:c2:65:ff:be:
                    50:e2:b2:1a:40:cb:46:63:6c:43:97:c5:8f:f7:d0:
                    fa:46:28:a0:a9:49:ce:5f:6c:7b:ef:d6:74:92:fb:
                    dd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:4F:8A:D0:F8:09:31:03:19:26:37:4E:66:1A:A0:CC:D7:CC:89
            X509v3 Authority Key Identifier:
                keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:00:f0:b3:9e:bf:58:01:ed:3c:2d:b4:f1:e8:d3:86:0c:48:
         55:8f:91:46:5c:83:af:ba:25:f0:51:a5:12:18:30:b2:aa:7d:
         8d:36:5e:2b:1e:e9:9d:c7:7f:be:ec:bf:01:81:96:f6:c2:ea:
         24:6b:a0:a7:d2:fa:6c:af:56:6a:97:be:00:98:da:e4:21:8d:
         08:db:db:c2:79:c6:03:e0:83:3f:9f:19:d9:8f:90:b4:13:09:
         1d:49:2c:cc:bd:bf:00:f0:62:29:c4:54:55:88:2b:2c:4c:42:
         d7:ef:d2:a7:55:9f:a5:c5:8a:2a:6d:be:1a:23:a8:3e:0c:14:
         b1:94:6c:62:6f:b6:d8:10:be:78:f9:54:d3:8d:b6:02:4a:07:
         77:a1:d2:86:ec:a8:c9:e6:ae:e1:42:66:17:41:66:e4:6e:60:
         4a:93:0e:b5:7a:5d:99:d6:19:50:e4:61:09:90:61:0d:30:cd:
         c8:2c:8a:3a:c3:38:07:70:1a:25:82:11:4d:76:9e:57:f6:8d:
         7d:ac:aa:c2:05:75:28:fb:32:03:b6:a3:ab:37:39:23:f6:6f:
         fe:a1:e3:8f:be:3b:32:2e:66:59:25:fb:15:b1:8e:2e:fc:23:
         a4:6a:83:7a:5c:85:ef:e8:25:97:6f:27:2c:39:86:a9:b7:a7:
         e0:5b:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:14 2026 by rpki-client