This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File:                     S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier:          uuGJDIm+DMeQXO8KhRjjbKdObwmt8NMR589wuVIa9C8=
Subject key identifier:   42:74:D3:DA:DF:A8:5B:1C:F2:8B:8C:2B:4B:12:E4:DD:F5:6B:AF:63
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer:       /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial:       019C4358D8F366C78121F469E384FCF2037D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number:          1813
Signing time:             Mon 09 Feb 2026 17:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:22 +0000
Files and hashes:         1: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
                          2: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: Mqbx2AOw2c0wSEGJ952+H2pjPYMoos37Uid5e/z3XME=)
                          3: nrZgqd06tq3-TkmE8GvRCD0Cb7I.roa (hash: IUqtPA4/rBBGflH10rVAdWMwA0mA9sN2XLQ3y4ih8sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:58:d8:f3:66:c7:81:21:f4:69:e3:84:fc:f2:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
        Validity
            Not Before: Feb  9 17:00:22 2026 GMT
            Not After : Feb 10 17:00:22 2026 GMT
        Subject: CN=4274d3dadfa85b1cf28b8c2b4b12e4ddf56baf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:c9:37:e9:08:b8:b5:a5:97:16:11:7d:84:
                    d0:27:68:22:e9:5b:a2:b6:b6:5b:6f:dc:82:dc:e2:
                    22:1a:d1:23:84:52:cb:64:2b:fe:04:d7:b2:01:8e:
                    b4:42:e9:6e:e8:e2:1d:9f:b7:63:a1:80:ea:30:22:
                    58:5b:b0:a5:1b:76:51:9c:8c:00:10:ab:58:3a:67:
                    48:a4:c6:98:8b:4d:30:a7:ca:29:63:1c:f6:08:1c:
                    b6:0a:1b:94:8e:a4:b6:dc:1e:b9:06:c2:4e:44:3d:
                    ec:e8:56:31:85:e2:af:b1:f8:f4:ca:5c:49:6b:9a:
                    fe:bb:ab:dd:18:7b:26:88:44:d5:2f:74:68:9a:35:
                    4d:b5:1f:a9:91:ae:fe:2c:17:d0:15:9b:d1:4a:f9:
                    a1:e6:9d:12:d1:17:d0:d6:12:7f:1b:46:92:66:12:
                    d4:1d:fa:6f:23:f8:a4:1e:c1:aa:ee:df:36:e0:65:
                    1a:f8:50:6e:70:cc:1b:55:d2:6b:08:51:ab:61:34:
                    f4:c7:ff:c0:27:8b:a0:d3:40:ee:17:c9:d6:52:da:
                    81:63:02:12:89:1c:31:41:77:c7:7a:94:9f:71:fe:
                    a0:e2:ef:e4:eb:94:2a:5b:5c:ca:6b:30:37:8e:16:
                    32:43:9e:ce:18:a8:8e:fc:bb:b1:2a:ba:d3:84:84:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:D3:DA:DF:A8:5B:1C:F2:8B:8C:2B:4B:12:E4:DD:F5:6B:AF:63
            X509v3 Authority Key Identifier:
                keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:f4:ef:3f:4c:58:1b:61:52:31:62:ca:54:55:26:0b:6f:
         48:7a:a4:5c:9b:1f:f9:3d:49:af:fa:bc:71:a5:ef:79:fc:6b:
         d5:7e:19:fb:5d:d9:f9:7c:42:20:b9:0b:ef:61:48:63:38:3f:
         88:63:86:67:10:2f:d1:18:af:72:db:d3:d8:d0:bd:e4:ed:af:
         0f:c1:f0:6e:6f:b5:9f:79:e7:01:07:8e:aa:0b:cc:b1:20:10:
         12:2e:ff:c6:82:26:bf:58:fa:38:d5:3f:fb:86:3e:04:0d:4e:
         84:9a:de:7c:e0:05:52:75:49:41:57:71:77:16:31:6a:8a:cd:
         1b:fc:44:84:54:4a:4b:aa:df:19:b4:55:7d:47:59:8a:de:6f:
         38:48:47:0b:64:55:6f:1a:de:0e:0e:f5:1c:36:4f:4c:83:4b:
         fc:4f:a7:a5:a1:cf:13:fe:5d:38:33:41:24:ea:0a:c8:ce:3d:
         02:ab:40:1f:fd:54:50:5e:5d:ad:a9:57:0b:5e:10:55:db:20:
         61:35:cf:73:9c:50:07:d3:30:1b:dd:2f:e3:b9:25:08:a8:fb:
         a3:49:fa:8b:9d:bf:e5:c3:51:43:e4:76:7e:04:99:b1:70:ad:
         f3:9c:a7:2b:1f:05:4a:b0:2d:7a:e5:b2:3c:73:01:91:c4:9f:
         4d:44:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:26:15 2026 by rpki-client