This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
File:                     R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json)
Hash identifier:          OykbaVYV/FFvuq52LjrwLFVTkqRtdHdsrP4xeAqr73A=
Subject key identifier:   EF:80:0D:5B:44:E1:26:99:04:87:A6:8A:65:41:54:2E:57:FA:48:A5
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       019C427DDF7008C168A10C0B82300B323EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 13:01:11 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:11 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:11 +0000
Files and hashes:         1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=)
                          2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=)
                          3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=)
                          4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=)
                          5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=)
                          6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=)
                          7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: kwfQ4v0RxNaW2amwK8qtqxIrCl5iMOvopMLNVIhJ/Wo=)
                          8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=)
                          9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=)
                          10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=)
                          11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=)
                          12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=)
                          13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=)
                          14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=)
                          15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:df:70:08:c1:68:a1:0c:0b:82:30:0b:32:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Feb  9 13:01:11 2026 GMT
            Not After : Feb 10 13:01:11 2026 GMT
        Subject: CN=ef800d5b44e126990487a68a6541542e57fa48a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:5c:9e:9e:b5:05:11:22:99:9d:3d:6b:1e:
                    7a:74:10:66:23:de:65:3d:38:f8:b3:0d:dd:4f:15:
                    5f:b8:6a:bf:c6:ec:7d:3e:5b:07:3d:29:77:f1:25:
                    88:78:fd:c7:42:8b:e4:bc:16:2d:35:2f:8c:40:d2:
                    93:84:b6:d2:e7:d9:bc:c1:ff:90:80:43:1b:be:54:
                    e0:c0:4e:fe:df:2c:4e:f8:f3:8d:2f:a6:75:b8:a2:
                    17:d0:67:67:59:65:fc:01:9b:e1:2e:95:6a:6b:c9:
                    02:6f:fe:0b:76:1c:5b:60:5c:08:c4:f5:0c:3f:ea:
                    2b:2f:d8:0b:c8:71:88:fd:b3:9f:8d:0b:57:93:06:
                    3e:9e:4f:04:b1:a1:f3:fc:b1:a9:bb:ec:88:a1:00:
                    cf:e5:06:83:0b:f1:f2:78:5c:0a:ea:fb:16:8c:bb:
                    92:6d:ec:29:04:25:b2:cc:71:21:8a:08:d3:da:c6:
                    8b:94:47:2a:bb:ae:8d:71:f1:6e:ad:b3:36:94:34:
                    3c:30:19:d1:76:f4:24:31:01:6e:5b:57:e4:1a:ca:
                    97:60:dc:ae:4e:a9:e1:51:8e:7e:a9:81:72:e7:d1:
                    b0:31:4a:85:96:37:03:47:0a:54:97:d5:b8:73:fe:
                    ef:16:04:54:bb:c0:91:c0:b4:6c:0b:7a:3b:77:a5:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:0D:5B:44:E1:26:99:04:87:A6:8A:65:41:54:2E:57:FA:48:A5
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:63:4b:5f:c0:a1:43:62:93:61:c4:65:48:12:e9:4e:b3:33:
         1b:8b:27:de:a9:b1:71:8e:c6:d8:3a:7b:50:c3:da:2e:0c:e7:
         17:0b:e0:e9:76:32:07:4f:d6:99:df:19:52:47:68:b2:ad:73:
         c2:11:e2:37:c9:51:4d:e4:80:31:0b:20:c6:dc:cb:5c:e1:b3:
         4e:7d:37:d2:d6:30:39:34:45:26:e6:b8:ae:7c:b3:01:e7:21:
         4f:be:5a:49:a2:a7:27:40:6d:b6:9c:ed:9c:1b:78:bb:ea:37:
         20:8c:22:48:98:6f:b4:82:ee:bf:2e:27:42:56:80:5e:a8:ae:
         71:38:5e:c8:b9:45:65:88:4b:a1:70:be:aa:12:e1:4a:44:8d:
         f5:91:56:69:67:93:5e:27:88:26:e5:86:1e:5f:b3:c7:4d:0d:
         3f:44:cf:e3:cf:85:1c:74:51:83:05:5b:46:57:01:f1:d0:13:
         b7:65:4b:18:bc:37:79:38:05:1b:9a:6f:b3:cb:83:52:88:bb:
         aa:0e:6e:5d:38:c3:18:22:ea:90:99:30:c1:2b:80:60:44:67:
         34:e0:4a:42:38:17:b9:91:af:3c:8b:3a:48:55:31:d5:0e:d2:
         11:3d:7a:7f:78:8d:70:e6:a7:1a:ed:42:62:5d:82:a2:cb:3f:
         53:91:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:48 2026 by rpki-client