This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File:                     rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier:          3eZscPzX8j0/PvLLaTXGptyusP4JGL72u8zDxpu+rG0=
Subject key identifier:   21:43:21:75:03:27:3E:A9:B3:D0:19:75:7E:20:06:BC:FB:F9:A7:C4
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer:       /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial:       019C43229AC74896DC72DB2AAB2A53345092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 16:01:07 +0000
Manifest this update:     Mon 09 Feb 2026 16:01:07 +0000
Manifest next update:     Tue 10 Feb 2026 16:01:07 +0000
Files and hashes:         1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
                          2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 67MOafPO1+WYL0CgoXgy/4omKb4KU5zZfpRY8hlVA9k=)
                          3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:9a:c7:48:96:dc:72:db:2a:ab:2a:53:34:50:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
        Validity
            Not Before: Feb  9 16:01:07 2026 GMT
            Not After : Feb 10 16:01:07 2026 GMT
        Subject: CN=2143217503273ea9b3d019757e2006bcfbf9a7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:42:17:9c:a8:30:4a:09:2e:55:dd:bd:3d:
                    c2:65:d0:7a:40:f1:5e:6d:d9:e4:00:9d:6f:11:7c:
                    ac:cf:7b:fa:a3:94:23:2b:d8:86:c6:a6:2c:d8:4c:
                    09:6e:fa:c9:71:05:4a:16:87:bf:ab:b6:d4:89:fd:
                    a6:a0:19:cc:db:12:90:f9:ad:19:76:80:03:5c:e2:
                    45:9a:a6:76:0f:ea:f9:7f:78:79:77:70:da:40:12:
                    73:0f:fb:8e:e3:73:39:d6:26:c5:aa:93:18:ae:c6:
                    58:a9:38:3b:98:17:d0:70:57:eb:4a:1d:4a:f3:93:
                    90:8d:9c:16:08:35:38:96:41:10:40:48:d3:40:10:
                    ae:92:8a:64:32:05:5a:de:72:84:fa:48:d5:c5:e9:
                    95:6d:d7:13:74:31:bb:42:30:1c:c2:11:0f:44:8f:
                    bf:44:29:77:ec:bf:e5:0d:58:d1:2c:7a:4c:bb:3f:
                    4a:8e:4d:e7:46:eb:d4:d8:37:75:90:aa:74:79:a9:
                    b1:88:b1:23:58:9b:2c:04:a4:32:d1:59:3f:23:f8:
                    9a:0f:e2:5a:e5:d9:ee:d6:59:85:87:67:d7:a0:98:
                    f8:ea:40:58:84:17:cc:22:ce:d5:f8:c7:2c:e5:3f:
                    83:5a:0b:fc:72:d3:cc:8b:aa:3c:f3:4f:9e:00:b0:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:43:21:75:03:27:3E:A9:B3:D0:19:75:7E:20:06:BC:FB:F9:A7:C4
            X509v3 Authority Key Identifier:
                keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:d9:47:c8:dc:ab:cd:f7:32:87:6b:7f:c3:c7:66:1f:7b:
         f4:7c:46:a8:f7:ae:a9:d3:79:3e:80:6f:06:a5:83:f3:e0:46:
         d0:bf:17:25:b3:16:0e:c0:49:95:6f:e8:5b:50:62:3d:a1:d2:
         17:44:a9:32:6a:43:2f:45:02:e0:3c:8f:8a:72:9d:d8:be:a8:
         e9:df:c8:5f:c6:41:6a:8a:d9:2c:25:73:0c:99:63:3a:4b:76:
         3a:d0:a0:6a:80:cb:c3:d4:57:ba:37:18:f6:78:77:da:96:9c:
         c0:33:a7:a1:3f:88:2e:4a:8e:6f:5c:3d:64:73:4d:8f:90:0c:
         63:81:cf:48:60:75:fd:8a:81:8d:24:c8:2a:cc:6f:1f:db:d3:
         af:ed:b7:6d:3a:a4:17:03:0d:e6:85:16:cb:be:5e:7d:ab:3e:
         1e:bb:43:9e:08:e2:c1:04:e8:6f:36:88:65:a5:ef:d4:33:b5:
         f7:ba:01:3d:17:99:a6:3e:01:aa:dc:9e:86:e8:09:f5:06:ad:
         35:43:09:de:ca:7d:cf:92:f9:a6:a6:d7:61:bd:06:e9:80:c0:
         17:98:96:8e:27:25:8a:6b:90:d4:80:61:36:c8:3a:68:ff:5a:
         9c:c9:37:36:b9:ae:58:04:0d:a6:db:f7:97:36:02:63:c8:61:
         5a:e1:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:42 2026 by rpki-client