This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File:                     3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier:          35vyyrhA88QKeV2zYyxrB7K97MVYbCliwdABHoGgBIQ=
Subject key identifier:   26:32:4E:6B:F4:FB:FB:54:48:B2:10:73:A3:96:3C:6E:33:41:0D:39
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer:       /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial:       019C427E26950C4A572B4B7A87829AB502AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number:          0794
Signing time:             Mon 09 Feb 2026 13:01:29 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:29 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:29 +0000
Files and hashes:         1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: ZTqNaAlwBMT5nuPNlifazfWVDil2p7f0w6O7uJxW9ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7e:26:95:0c:4a:57:2b:4b:7a:87:82:9a:b5:02:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
        Validity
            Not Before: Feb  9 13:01:29 2026 GMT
            Not After : Feb 10 13:01:29 2026 GMT
        Subject: CN=26324e6bf4fbfb5448b21073a3963c6e33410d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:37:a3:2f:0f:da:ad:4c:f5:af:f8:26:da:
                    94:94:eb:1c:f3:73:51:f7:f1:98:5d:6b:86:69:5e:
                    3e:5a:5f:ee:98:8e:ca:cf:d8:73:89:e4:2e:04:22:
                    e8:05:31:f5:83:25:3e:36:20:4f:ee:ae:4c:02:48:
                    e4:6f:07:ff:8d:33:fd:a2:92:dc:89:19:eb:34:ed:
                    94:fe:a1:6c:8d:2b:fd:0d:97:1a:f3:db:5f:52:e9:
                    78:68:25:60:2c:7b:2c:d8:75:18:67:45:7f:fa:93:
                    76:cc:83:29:ff:12:98:fa:2f:58:e3:1f:63:43:5a:
                    09:cc:91:ef:77:65:18:8c:65:37:e1:c9:22:4f:d5:
                    eb:5c:e5:63:05:bb:a5:7a:bc:fa:eb:ce:b7:c5:63:
                    dc:ac:1b:9c:9d:93:c2:4e:8a:ed:08:27:d5:6e:9f:
                    06:5c:24:46:ca:62:ab:9e:40:7c:3f:a6:6e:be:c1:
                    ef:01:77:5c:7d:7a:e4:ac:fa:20:3d:a2:9f:aa:b4:
                    48:e2:f5:dd:c8:eb:c9:65:fa:77:52:09:a4:47:3c:
                    45:20:a8:3d:a5:b7:dc:0a:d2:0c:fd:44:82:e2:c7:
                    1b:83:d8:8e:5e:20:94:41:84:5b:f7:b4:e4:08:ac:
                    c1:1d:96:7b:3b:c1:40:42:62:df:5d:e5:a1:6a:94:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:4E:6B:F4:FB:FB:54:48:B2:10:73:A3:96:3C:6E:33:41:0D:39
            X509v3 Authority Key Identifier:
                keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f2:2f:76:0a:e6:0b:0e:6a:10:10:51:ce:de:93:51:03:4d:
         b0:27:63:86:2b:6a:4a:95:05:13:d0:4e:79:dd:b7:9b:69:6e:
         38:81:5c:54:17:d5:20:fb:73:31:95:c2:e9:1b:9e:1a:5a:3b:
         35:56:45:e0:33:22:26:4f:cd:3c:5e:a8:e7:40:70:b0:cb:8d:
         8d:de:ad:e3:42:d4:8b:71:2b:c2:15:30:8e:e2:ea:ee:ce:d1:
         0a:a3:e3:74:db:49:e9:b1:54:8d:0e:0f:cd:d4:da:3f:4e:ac:
         cf:17:b9:03:3a:2d:cb:5a:6c:ae:d1:f8:42:49:04:51:5d:0c:
         78:23:a5:c2:00:b5:2b:4f:a5:2a:e4:96:2a:0e:17:1d:97:b2:
         7f:f4:61:ef:f4:5b:06:70:85:62:e4:78:dd:2e:2f:14:34:7a:
         67:1f:b8:49:fd:10:8f:ab:60:04:01:39:d9:46:6e:03:c0:91:
         8b:9e:7b:a9:02:52:03:76:a8:88:65:42:97:e9:94:03:4e:4f:
         ff:31:82:4e:1d:6f:7b:78:64:c1:16:72:e4:1b:82:b5:be:15:
         06:e4:17:01:a8:6d:8d:7b:f7:d3:9b:4d:ae:55:a6:15:c9:34:
         95:15:1b:f3:b7:ff:15:75:24:82:b8:ce:ff:e7:99:1d:4c:3a:
         a1:3a:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:11 2026 by rpki-client