This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File:                     b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier:          9eQ7INxjDmFsee2QO8oZ2A9Jp11CtJyybSrmJBD896s=
Subject key identifier:   4E:88:3D:C6:EC:87:8E:9F:86:00:B7:AF:B2:4A:99:7E:66:7A:B1:4C
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer:       /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial:       019C43FDB1FF827D924092DBEDB87172B45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number:          1816
Signing time:             Mon 09 Feb 2026 20:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 20:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 20:00:25 +0000
Files and hashes:         1: 4XxIYwz7j2kyG3R_CD4kJYaxank.roa (hash: TLEhf+pn1t5mBsVNjIOJ9/5QAhqcShOiU6dpNlwJI8s=)
                          2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: enlq/NMR1Y47zCzAULuaone2Vc4Ij2NiOsN+uX8K2xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:fd:b1:ff:82:7d:92:40:92:db:ed:b8:71:72:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
        Validity
            Not Before: Feb  9 20:00:25 2026 GMT
            Not After : Feb 10 20:00:25 2026 GMT
        Subject: CN=4e883dc6ec878e9f8600b7afb24a997e667ab14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:01:9b:06:20:26:09:98:90:76:f3:70:f6:
                    ad:d0:d2:25:34:ad:2d:57:f7:e6:ae:cf:1d:68:51:
                    ca:8d:40:da:80:4e:2f:a9:17:4a:29:9e:bc:b8:f9:
                    9f:ba:95:4b:31:ea:28:eb:34:7e:82:42:ec:80:d8:
                    d5:1b:85:0b:bd:f6:04:2c:2f:d9:f3:34:f7:c2:73:
                    6c:f8:79:5c:79:86:e2:4c:56:48:cb:62:e0:2a:40:
                    1e:3c:6c:4c:00:db:8e:cf:df:46:52:7a:56:b2:1c:
                    8b:97:a8:b7:ff:02:f9:72:4e:61:ae:ab:40:1d:3f:
                    1a:be:9f:b1:f3:05:4f:bb:24:2f:24:15:88:0f:81:
                    9b:25:56:ce:1d:2b:37:24:22:11:6f:18:fd:98:85:
                    32:51:4c:c4:58:2d:ac:d1:8e:21:dc:04:0e:13:a7:
                    62:51:9a:09:24:4e:e8:be:12:e6:f0:c9:1c:b7:54:
                    56:ab:f2:3e:a1:5f:a0:34:f8:8c:30:d9:64:e7:0b:
                    c4:39:bd:c8:4d:22:30:6c:7b:c3:f6:bd:df:16:fa:
                    a0:d8:0f:f5:82:f5:f5:23:da:b9:05:7f:c6:1e:df:
                    7f:da:4a:62:f6:87:30:22:c3:c9:c7:31:10:b8:03:
                    5b:92:63:ca:4d:1e:e7:49:63:b0:94:cb:2f:41:8e:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:88:3D:C6:EC:87:8E:9F:86:00:B7:AF:B2:4A:99:7E:66:7A:B1:4C
            X509v3 Authority Key Identifier:
                keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:36:59:fb:d6:95:4e:bb:47:c5:18:90:8a:ea:71:13:bb:
         33:ba:ba:ea:63:44:50:6d:1a:aa:44:4e:47:5b:51:30:66:3a:
         a4:eb:5c:11:fd:68:7d:8d:82:34:79:85:82:88:20:8e:b2:79:
         73:43:c7:33:9c:7b:3c:1d:9e:05:f9:80:53:fe:8b:ea:e0:54:
         f8:4f:f5:cf:3f:41:e4:cf:04:ae:87:d7:2b:d7:cb:b2:b7:07:
         28:7a:aa:4e:bc:2c:4b:71:9e:09:23:9a:76:aa:b1:38:cb:0e:
         a9:10:9b:1d:19:b3:d3:fb:a0:3f:04:c8:67:d5:67:13:bb:1b:
         f0:b4:a5:23:2f:91:a8:90:69:f3:60:33:92:21:40:cd:89:0b:
         75:a2:2c:d8:ae:1f:95:9c:c6:48:14:d4:b2:7e:97:f5:e9:d8:
         92:3d:93:f5:47:33:67:c0:16:79:23:3f:b3:14:57:84:33:fe:
         de:eb:6b:c8:14:49:77:41:46:8a:4a:45:68:30:37:68:cc:8b:
         94:67:d7:44:fe:31:34:bd:8e:59:05:3f:37:73:4a:b3:47:db:
         a4:30:e9:e9:d9:e1:6c:39:b5:d0:ba:3e:90:af:fb:39:d5:0f:
         bd:18:25:c7:78:4b:b4:60:02:26:48:37:c2:cc:87:3b:55:69:
         c7:28:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:28 2026 by rpki-client