This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File:                     L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier:          n496qNS1NWUCpMRTHjc3iyr4C94FxEWFX+bOBb7KApk=
Subject key identifier:   D9:0A:DF:A7:41:3C:66:7E:14:D7:25:DD:34:85:84:9E:73:D9:55:94
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer:       /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial:       019C4358C5B01F8710BFBF3F65C305680CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number:          0DE3
Signing time:             Mon 09 Feb 2026 17:00:16 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:16 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:16 +0000
Files and hashes:         1: G9p0ZqoMQwRhL8Rw931Y7IDvL9I.roa (hash: felwcBy1trqJlfgkKZ8Njtq1KvtD2UmM0AyTZrNQ0nY=)
                          2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: Dnenkj6SG+GvyWYurn+iPS06R01BaW39udqWWiPuato=)
                          3: NQm98rb_Ce1FD2kYuLzSyRfHS3k.roa (hash: 0FuRCkyL3oox4mVwcN4bero8WE9ytQ/qMwHkxt0D5lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:c5:b0:1f:87:10:bf:bf:3f:65:c3:05:68:0c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
        Validity
            Not Before: Feb  9 17:00:16 2026 GMT
            Not After : Feb 10 17:00:16 2026 GMT
        Subject: CN=d90adfa7413c667e14d725dd3485849e73d95594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:2f:c3:3d:a5:34:46:ae:70:9b:b4:8b:69:
                    e2:50:72:3f:71:2c:a8:3d:35:a0:90:12:9e:4e:76:
                    c9:18:73:17:ae:5f:56:68:dd:40:46:ba:5f:6d:37:
                    b6:cf:38:6c:4d:a7:c6:8b:41:e8:4d:7f:f4:be:3d:
                    ec:59:5b:f7:d4:39:33:ba:c2:42:97:28:53:ec:ed:
                    5d:8c:c2:41:16:19:66:83:ed:68:ff:a2:f9:d6:3d:
                    fc:ef:1a:d2:ed:71:a8:05:4a:a7:e7:17:ea:80:4e:
                    b9:3f:80:1e:c7:14:66:4d:d4:d0:3d:ae:b2:7e:7f:
                    17:7d:a4:d8:fe:b7:19:00:db:59:db:56:5c:83:41:
                    06:8e:69:59:b2:26:c5:dc:47:06:0e:b6:30:a5:65:
                    65:a2:8d:b0:11:57:2a:98:f0:1b:3a:d8:30:fa:73:
                    1d:ee:55:7d:8e:ae:c3:55:43:df:2f:d0:d9:7e:6c:
                    4f:f6:90:54:e6:f8:29:8e:92:c5:a5:e4:09:b0:22:
                    fc:ec:70:75:84:03:88:1d:d1:70:df:52:62:ae:08:
                    f4:f3:d7:2f:e1:f7:fa:5b:7b:15:9f:e4:07:e5:05:
                    bc:cf:52:0e:d2:88:f1:b4:c8:4c:c3:6b:db:5e:45:
                    51:62:3b:eb:a8:80:87:9a:04:aa:fb:d0:a6:62:01:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0A:DF:A7:41:3C:66:7E:14:D7:25:DD:34:85:84:9E:73:D9:55:94
            X509v3 Authority Key Identifier:
                keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a1:7f:cc:c0:2c:17:0c:ff:23:68:9d:2b:f3:53:7f:d6:e8:
         64:d2:d2:23:e2:20:4d:94:96:83:3a:7e:68:1f:e6:59:b2:91:
         20:ac:e9:92:8b:67:92:24:ec:e0:ba:80:9b:df:de:1a:1e:da:
         08:74:d9:b0:e6:de:c1:71:2e:77:87:a2:93:73:65:41:95:4a:
         2e:28:06:11:7a:6b:f2:d4:fe:56:c6:f4:d2:e1:20:ae:03:a9:
         7e:e5:96:fb:1b:ca:02:0a:ba:ea:2d:8f:b1:ba:2b:25:63:93:
         28:74:15:05:21:6f:b0:00:34:d6:77:5e:b7:10:f4:e5:ea:a7:
         de:1f:a0:e5:4f:05:ed:43:58:ab:64:8a:87:f2:8c:a5:98:f5:
         72:4f:ee:ea:1b:49:c3:cb:c9:16:4b:71:51:69:5f:e6:e8:03:
         b4:f0:9e:61:47:43:43:89:db:91:d7:47:a4:24:cf:06:1d:b1:
         57:d4:4e:e0:7d:e6:94:56:a7:d9:ba:79:77:e4:de:a1:9b:e8:
         72:31:74:82:7e:46:b4:6e:3f:c8:3d:b9:92:73:84:e0:fa:89:
         63:53:ab:66:87:d4:8b:87:ef:80:08:bc:63:40:64:60:2d:b9:
         ed:b1:a1:90:35:92:22:2c:2e:da:df:c2:88:35:32:06:49:20:
         68:c1:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client