This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          XmoVYW9jKTmYPolOUXmbxJyU0xE/op0rQ1ZJM4woEzc=
Subject key identifier:   7C:3E:C5:51:B9:CA:D2:D8:B8:C1:07:BA:03:31:04:2A:76:ED:C3:CC
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       019C42EAF8A9AC16B4CAA72BCFFA0DBC7B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          0867
Signing time:             Mon 09 Feb 2026 15:00:20 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:20 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:20 +0000
Files and hashes:         1: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: VALTp1F1WMzPZrSKF5KRK1X+Td8c1cR65jzcv/3Fe4Y=)
                          2: hBIKQJotb91PfUz83IlhlDln8Os.roa (hash: FZgPmcaU95wHeFAG7MifAFsuelM+Kr14jElFrFSjrsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:ea:f8:a9:ac:16:b4:ca:a7:2b:cf:fa:0d:bc:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Feb  9 15:00:20 2026 GMT
            Not After : Feb 10 15:00:20 2026 GMT
        Subject: CN=7c3ec551b9cad2d8b8c107ba0331042a76edc3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:bf:6c:cb:5d:6a:6b:d9:bd:e4:f6:d9:a7:
                    83:4f:36:3b:5e:e4:fe:20:d6:77:aa:eb:89:32:d2:
                    08:a2:b0:34:6a:a3:14:1c:eb:fb:b0:d0:6f:a4:49:
                    74:e9:7d:a1:7c:43:aa:8e:1d:7a:d9:34:4d:48:23:
                    d7:7e:9a:d1:00:c0:3b:6b:4f:dd:2d:f3:2b:17:7b:
                    d4:24:00:09:6d:07:27:64:b4:b7:34:4b:b6:a7:19:
                    e0:f2:b2:8a:2e:ae:16:51:5f:8d:e4:25:3b:d1:11:
                    17:04:2e:fe:b1:6a:18:03:94:c7:33:9b:27:fe:2f:
                    2b:e0:1e:b8:54:ec:a7:0b:4a:c8:87:97:b1:c7:c1:
                    71:e2:6b:b4:ca:b6:62:70:11:3d:52:64:06:38:7e:
                    cf:ff:30:79:5d:6f:4c:60:5f:65:40:90:11:d6:55:
                    b0:ae:ba:d5:6a:c1:0f:31:e6:f1:35:d5:11:db:2b:
                    d9:c7:1d:5b:44:63:3d:3d:31:5b:ca:4f:be:79:7f:
                    82:cc:dc:2f:46:17:31:8f:aa:63:c4:63:97:40:4e:
                    ee:c0:b9:73:b9:a0:3f:b3:43:e7:05:e8:66:48:29:
                    a6:2f:e8:48:f2:9d:dc:f1:12:42:13:23:c1:ca:de:
                    a5:ca:8e:6a:a3:13:ff:0b:fc:c4:65:01:6e:d8:80:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3E:C5:51:B9:CA:D2:D8:B8:C1:07:BA:03:31:04:2A:76:ED:C3:CC
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:3d:86:c6:aa:b0:e3:31:c5:7c:7b:33:76:83:a8:f8:36:
         1d:13:39:c4:e4:e8:b5:33:45:02:cb:cb:7a:92:80:e2:86:42:
         2d:ae:ee:94:47:43:7e:c1:16:40:6a:7f:4d:f5:d1:5e:4f:be:
         77:76:65:88:39:23:8b:a3:7d:19:3a:b9:4e:e8:58:8d:a1:f1:
         82:e8:91:a6:af:59:e4:d8:17:6b:9c:a5:47:fb:5a:cc:eb:85:
         f1:8a:cd:bc:f9:d0:ec:b8:04:89:2e:ef:d9:2e:e1:a3:a6:5a:
         09:87:6d:e3:83:4f:1d:39:0e:4f:ba:ae:09:70:f9:21:54:75:
         69:11:ff:93:9d:48:d0:4a:27:65:a1:f0:85:35:c9:dd:d4:5a:
         90:d1:80:57:31:ee:d4:07:7b:fa:03:fa:58:36:d2:8c:2c:46:
         f2:67:dd:9d:d7:e5:09:1d:d3:10:35:1f:f0:6e:0e:e0:56:2a:
         be:97:2b:0c:82:71:f3:f1:f9:10:b0:11:ea:e6:bf:49:04:ed:
         bb:46:75:d1:21:c3:cc:af:98:c1:e6:d1:a4:73:2c:c9:7e:48:
         ba:54:3e:41:11:d5:7f:b8:93:3d:68:2b:73:a1:c8:a4:23:7d:
         74:5a:18:57:b3:34:01:53:3f:f7:95:05:8f:1f:55:f2:ca:4f:
         75:ed:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client