This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File:                     3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier:          21m1YKF8nXBk9Lfaoo7Aupt73tTDX2FEHD5NxvrMFa4=
Subject key identifier:   39:D4:AC:FD:86:B1:0A:43:DE:47:CA:3F:11:95:35:DC:DA:A4:8A:B5
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer:       /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial:       019C427DBAFA026D1638ABAACCF5D3A4ABA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number:          06FF
Signing time:             Mon 09 Feb 2026 13:01:01 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:01 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:01 +0000
Files and hashes:         1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: Nrbo/tAk0JzttXd1rUrPvLR71w/fn2UmPdBcEETp0eI=)
                          2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:ba:fa:02:6d:16:38:ab:aa:cc:f5:d3:a4:ab:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
        Validity
            Not Before: Feb  9 13:01:01 2026 GMT
            Not After : Feb 10 13:01:01 2026 GMT
        Subject: CN=39d4acfd86b10a43de47ca3f119535dcdaa48ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:bd:2c:c4:46:73:5c:11:aa:54:aa:1a:cc:
                    77:ef:9f:86:22:2a:43:eb:5d:dd:c6:2f:a6:c7:dd:
                    42:fe:e4:3d:3f:96:90:e2:8c:5d:3a:19:99:05:02:
                    3b:de:75:f8:c1:26:d2:de:35:84:ee:5a:77:ff:d7:
                    e1:22:fd:85:17:3c:df:b4:53:a1:9a:4c:69:92:0f:
                    75:15:f3:e7:7b:2e:05:1f:d4:f8:c8:d5:2c:4f:19:
                    51:a0:33:80:97:5b:db:5b:6b:53:59:55:47:98:f1:
                    6d:9d:a0:da:14:10:de:c0:18:c7:06:2c:46:80:c8:
                    97:28:d5:e7:d7:6c:72:81:bf:49:74:7b:56:3c:0f:
                    89:09:7d:0c:a2:97:ae:dc:b1:88:5f:8a:de:c3:da:
                    73:6d:4f:90:37:58:0e:e6:0e:fa:1d:db:84:a8:a5:
                    3d:df:f3:7c:dc:9e:dd:99:6e:25:a4:86:c8:d6:2c:
                    ac:2e:4e:a2:28:28:42:06:06:79:1c:2f:f2:12:91:
                    ca:69:f4:2c:39:a9:a1:0a:64:72:6b:fc:18:10:bd:
                    b7:8e:5b:66:76:e6:35:d2:58:0c:60:56:1a:c9:2d:
                    6d:32:10:50:3a:8a:82:07:fd:5a:06:d4:db:f9:a4:
                    13:43:70:ee:a3:8f:4c:4b:48:e5:07:b6:de:39:9e:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:AC:FD:86:B1:0A:43:DE:47:CA:3F:11:95:35:DC:DA:A4:8A:B5
            X509v3 Authority Key Identifier:
                keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:94:40:9e:d4:03:f4:3a:80:7b:aa:92:2c:a6:c8:b6:39:
         4d:1d:2e:3f:21:f5:ab:3a:0d:a6:2f:da:75:15:ac:fe:ef:b0:
         6c:01:d1:86:72:66:4c:55:e7:c1:ea:a4:f9:5e:fb:c3:04:1f:
         a1:f6:50:a6:d1:1a:ce:ba:5f:6f:4d:4f:fb:97:18:4c:38:4e:
         ae:5a:90:8f:00:fd:ad:e4:fa:34:40:23:e6:58:23:94:91:9a:
         4a:09:cc:7a:5c:c4:96:43:df:4f:c2:d5:ca:94:f1:7a:6f:0c:
         8f:6a:9d:27:27:b9:fd:34:65:88:e4:8e:10:31:f4:20:0a:72:
         c7:82:4d:ff:05:1f:ee:52:f0:20:b9:0f:c6:30:04:ca:43:4d:
         bb:a6:84:b4:b5:a9:6b:50:33:7f:9a:5e:81:06:bf:e7:c0:85:
         59:15:82:4d:70:28:cf:e0:ec:a1:49:a2:99:0c:36:2b:a1:9f:
         17:a1:40:ba:63:02:0b:b9:57:43:1b:e0:4e:da:2d:56:46:86:
         13:ae:16:66:83:01:39:64:cd:11:7c:9a:df:3e:2b:6f:de:15:
         19:27:e9:c3:51:94:e4:53:b4:9a:2a:85:ac:00:8c:ab:9e:e8:
         26:cd:97:8b:6d:96:20:c9:6e:cc:d1:d0:79:c0:84:31:ee:bd:
         e4:ef:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:14:01 2026 by rpki-client