This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File:                     3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier:          VF5wW82D4CNTefFktU1GiS3BXRCXm9P1BX9MqEdmH74=
Subject key identifier:   62:15:19:36:5C:B3:10:FF:72:AA:92:56:EA:DE:E0:B5:CE:F2:B3:41
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer:       /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial:       019C40FD454BAEA2441C87DBA2774B3D5619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number:          180F
Signing time:             Mon 09 Feb 2026 06:01:05 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:05 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:05 +0000
Files and hashes:         1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
                          2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: VuBhmNmYH/JqFeiBJo4I0vHjmr7Jeen4k1igh1o0Wzc=)
                          3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
                          4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
                          5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:45:4b:ae:a2:44:1c:87:db:a2:77:4b:3d:56:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
        Validity
            Not Before: Feb  9 06:01:05 2026 GMT
            Not After : Feb 10 06:01:05 2026 GMT
        Subject: CN=621519365cb310ff72aa9256eadee0b5cef2b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:5c:4f:f3:c6:8b:d2:e6:f7:77:05:10:01:
                    0c:fa:2e:a2:62:ce:99:bd:fc:e2:6f:28:61:37:69:
                    cc:db:99:21:ef:4e:a1:0e:89:18:04:b4:ab:18:49:
                    13:a0:f3:70:df:cd:c4:c3:cd:67:fe:fe:0a:2a:a0:
                    dd:8c:f9:9f:56:f7:12:a7:b8:46:4f:78:a2:77:84:
                    4a:0b:b7:00:55:e6:54:b0:e8:d1:25:25:08:14:48:
                    ad:80:0d:0a:59:8f:2f:60:16:f8:78:fa:9e:16:18:
                    6e:00:a2:47:35:ed:ea:70:c6:1b:91:30:17:20:f0:
                    3a:c6:c8:b2:11:f8:08:43:c3:df:5a:db:10:c9:30:
                    c8:d8:8f:41:cf:7c:ff:70:e5:6f:85:b4:f4:e6:39:
                    a4:9d:66:f2:c3:bd:fe:bb:5f:b5:f2:ce:b1:8c:c0:
                    b3:76:31:b9:3d:a7:5d:06:7c:a0:52:9d:0d:34:56:
                    14:d5:c8:0b:87:98:dd:f2:46:2b:39:cb:3a:c9:ff:
                    0c:7c:48:be:1c:27:77:33:8f:02:dd:4e:d0:5b:e3:
                    29:7e:16:3c:b1:55:91:c5:3a:81:9f:06:c3:63:d4:
                    18:5f:39:df:f2:3b:81:5c:00:c1:75:35:33:8e:e6:
                    89:65:21:60:fd:42:6c:0d:9a:79:1b:59:c0:9f:d8:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:19:36:5C:B3:10:FF:72:AA:92:56:EA:DE:E0:B5:CE:F2:B3:41
            X509v3 Authority Key Identifier:
                keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:91:a0:37:e4:a1:86:17:25:36:97:89:63:3b:6a:c7:49:
         95:b6:8d:03:7d:6c:fd:b9:d9:2f:bc:af:9d:56:ad:87:82:d5:
         f6:0d:40:01:7a:1b:d3:70:67:79:d5:68:a0:b9:af:9a:42:94:
         40:60:e9:17:4a:36:60:b2:21:6a:80:f2:54:9d:ea:1e:4d:11:
         68:a0:0b:26:0f:9f:a6:0b:8c:f4:bd:7b:20:87:20:87:39:4c:
         4c:c6:00:a3:8a:b8:fd:df:bd:58:45:54:20:09:a0:2f:3c:f7:
         9e:10:6b:31:c0:69:ac:d9:59:ab:76:41:f5:a1:8a:82:7b:0f:
         65:bf:b3:5a:57:3a:b2:d9:31:b2:70:f7:0c:00:e0:46:6c:88:
         e7:55:2b:17:7c:03:33:fe:4b:47:43:39:1f:a5:af:8b:25:b2:
         51:43:71:9f:b3:b9:89:29:2e:0c:db:2a:87:4a:fa:e3:e4:c1:
         01:45:0a:25:d1:38:e1:e0:0a:e0:a2:ec:36:45:2b:a3:a6:76:
         77:68:07:a9:3a:f1:e1:c3:4e:34:44:8b:bf:13:b7:8b:4c:73:
         cb:52:78:a9:0f:12:57:d3:52:34:d7:4e:6c:40:4d:b7:e6:28:
         37:0c:85:b8:6f:93:d8:dc:73:23:e2:97:3a:4d:92:ac:94:e2:
         96:90:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:53 2026 by rpki-client