This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
File:                     3BZzebWR6VcQz38x3i7HP_v7Wuc.mft (raw, json)
Hash identifier:          KcGhauNcV37qh1OPYbzWpDLIpDHcOT4cK+X4yz8yk1Q=
Subject key identifier:   74:1E:19:98:C7:07:02:C5:A6:C0:DA:0A:5D:48:FB:95:83:81:E5:69
Authority key identifier: DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7
Certificate issuer:       /CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
Certificate serial:       019C4359377AF904333A4EA55CE2A3D32511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
Manifest number:          0932
Signing time:             Mon 09 Feb 2026 17:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 17:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 17:00:46 +0000
Files and hashes:         1: 3BZzebWR6VcQz38x3i7HP_v7Wuc.crl (hash: go8OQ9Fj95n8RJPDcmz90pKIqHlB23D/6riImz/cDEA=)
                          2: 751Hu9ZI3DqojMJGB1I0rXnda_M.roa (hash: YsN2FofLzMH/lt9gntXVVlk6Piw3TDvammcUwDb+SmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:59:37:7a:f9:04:33:3a:4e:a5:5c:e2:a3:d3:25:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc167379b591e95710cf7f31de2ec73ffbfb5ae7
        Validity
            Not Before: Feb  9 17:00:46 2026 GMT
            Not After : Feb 10 17:00:46 2026 GMT
        Subject: CN=741e1998c70702c5a6c0da0a5d48fb958381e569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:00:83:51:ad:c7:50:9d:c8:e9:43:23:82:
                    77:be:b4:60:6b:54:59:43:f2:85:0e:48:99:75:04:
                    a9:47:91:b2:26:19:cc:e5:ad:63:26:ac:15:15:d3:
                    59:37:88:82:3a:7c:df:2b:20:02:dc:84:13:c8:cd:
                    be:31:13:68:2b:fd:41:ed:05:6c:7a:42:80:61:a4:
                    7f:73:1c:65:b2:0c:fc:d9:0c:42:f8:d1:a3:0b:bb:
                    10:30:51:9c:af:dd:ba:fe:bb:0d:6b:fa:fa:cb:9f:
                    e5:f6:05:57:82:99:12:71:9e:6f:5f:f0:ec:ae:d0:
                    d9:49:ca:69:54:31:5f:fe:d9:d1:91:d0:48:7b:43:
                    61:6c:f7:6c:65:78:9b:4e:d7:e0:ee:d9:a3:fd:58:
                    b5:a7:af:df:37:87:45:58:bc:e7:cf:12:d7:5d:18:
                    ac:5d:44:8c:90:d9:05:06:a9:b9:fb:d7:39:09:38:
                    71:f4:0f:aa:95:d1:41:e4:bb:cc:e2:a8:2e:21:76:
                    d4:67:c3:dc:7c:4d:ed:7b:4b:70:95:7a:90:b5:1e:
                    21:5c:73:07:b2:95:b7:78:43:09:cf:96:1a:2a:6c:
                    9d:81:37:fb:ea:1b:3d:6d:b5:20:eb:7f:af:c8:a5:
                    8e:9d:c1:2f:e9:26:ed:52:66:4e:e2:54:c8:0a:bf:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:19:98:C7:07:02:C5:A6:C0:DA:0A:5D:48:FB:95:83:81:E5:69
            X509v3 Authority Key Identifier:
                keyid:DC:16:73:79:B5:91:E9:57:10:CF:7F:31:DE:2E:C7:3F:FB:FB:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BZzebWR6VcQz38x3i7HP_v7Wuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/15abc3-c4e3-4ba9-82ae-5f620b38b908/1/3BZzebWR6VcQz38x3i7HP_v7Wuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:da:5b:29:cc:12:44:f5:69:e1:b8:b2:a4:1f:c1:9f:16:
         c9:b3:a1:3c:4c:5c:7c:3a:3a:2c:1a:63:0a:33:42:79:2d:0a:
         fe:cb:30:67:56:d2:d2:bb:0c:e2:e0:1a:24:64:65:a2:c1:f4:
         df:60:0c:58:0e:b1:65:15:d8:dc:01:76:70:f7:7e:77:71:4d:
         cb:77:75:88:5a:71:f0:e0:47:3e:89:5f:82:4f:22:14:61:8a:
         b9:e7:d5:b6:18:f1:9e:99:b7:0f:60:ed:27:02:76:e1:a3:5a:
         7c:e4:d8:21:b8:93:96:70:16:8e:f4:49:31:32:e2:a1:1e:ea:
         45:a9:73:67:f0:e9:5b:0c:5e:bf:95:d3:37:2a:87:18:32:dd:
         6c:1f:75:3f:b3:d7:42:76:c5:e4:4b:f0:98:6a:2c:49:e9:f6:
         4f:5f:24:7f:a1:63:5a:be:bd:af:55:77:74:98:2f:a4:bb:64:
         02:b2:c9:79:35:bb:03:e8:63:fc:67:c7:e3:d0:56:7e:ae:0c:
         8a:73:43:da:7e:ab:64:9b:a1:b8:02:87:8d:1f:25:34:93:7f:
         ac:e1:54:fe:ba:2a:19:0f:1d:6a:d5:4b:d5:4e:29:d7:85:f9:
         f1:03:ab:10:d1:5f:41:66:be:f1:65:fa:22:d3:2e:c6:5f:89:
         26:03:78:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWTd6+QQzOk6lXOKj0yURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTY3Mzc5YjU5MWU5NTcxMGNmN2YzMWRlMmVjNzNmZmJm
YjVhZTcwHhcNMjYwMjA5MTcwMDQ2WhcNMjYwMjEwMTcwMDQ2WjAzMTEwLwYDVQQD
Eyg3NDFlMTk5OGM3MDcwMmM1YTZjMGRhMGE1ZDQ4ZmI5NTgzODFlNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6EAg1Gtx1CdyOlDI4J3vrRga1RZ
Q/KFDkiZdQSpR5GyJhnM5a1jJqwVFdNZN4iCOnzfKyAC3IQTyM2+MRNoK/1B7QVs
ekKAYaR/cxxlsgz82QxC+NGjC7sQMFGcr926/rsNa/r6y5/l9gVXgpkScZ5vX/Ds
rtDZScppVDFf/tnRkdBIe0NhbPdsZXibTtfg7tmj/Vi1p6/fN4dFWLznzxLXXRis
XUSMkNkFBqm5+9c5CThx9A+qldFB5LvM4qguIXbUZ8PcfE3te0twlXqQtR4hXHMH
spW3eEMJz5YaKmydgTf76hs9bbUg63+vyKWOncEv6SbtUmZO4lTICr+t1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQeGZjHBwLFpsDaCl1I+5WDgeVpMB8GA1UdIwQY
MBaAFNwWc3m1kelXEM9/Md4uxz/7+1rnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUt
NWY2MjBiMzhiOTA4LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xNWFiYzMtYzRlMy00YmE5LTgyYWUtNWY2MjBiMzhiOTA4
LzEvM0JaemViV1I2VmNRejM4eDNpN0hQX3Y3V3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxraWynM
EkT1aeG4sqQfwZ8WybOhPExcfDo6LBpjCjNCeS0K/sswZ1bS0rsM4uAaJGRlosH0
32AMWA6xZRXY3AF2cPd+d3FNy3d1iFpx8OBHPolfgk8iFGGKuefVthjxnpm3D2Dt
JwJ24aNafOTYIbiTlnAWjvRJMTLioR7qRalzZ/DpWwxev5XTNyqHGDLdbB91P7PX
QnbF5EvwmGosSen2T18kf6FjWr69r1V3dJgvpLtkArLJeTW7A+hj/GfH49BWfq4M
inND2n6rZJuhuAKHjR8lNJN/rOFU/roqGQ8datVL1U4p14X58QOrENFfQWa+8WX6
ItMuxl+JJgN4Lw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:58 2026 by rpki-client