This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File:                     bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier:          8lCZ+kab9FVSTLyAk+PdygGq/VUhlrBOT5/LWxxbNq8=
Subject key identifier:   CA:99:3F:CD:7F:C3:55:72:9A:F4:45:C9:D5:F5:B4:54:38:38:C9:0F
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer:       /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial:       019C42EB4C86F3F0580930852C31BE3C7C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number:          0C74
Signing time:             Mon 09 Feb 2026 15:00:42 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:42 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:42 +0000
Files and hashes:         1: Ur12tMXP6krqdgPYJeyWQySwWuA.roa (hash: WAu5x/fHLD+hAA2/qHGeg9Ko8e7jyGO8J9Ruzc1IZ60=)
                          2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: nk17RfpDx0U/+qKeDb43EW46oOPn6ofJ7F3qJLICdJE=)
                          3: o43yV46tUCettjH0kRv7oqNolP8.roa (hash: RBU44rx424a90gKy+6zTDM6bwGFn0Mmg9XsrebbEcho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:4c:86:f3:f0:58:09:30:85:2c:31:be:3c:7c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
        Validity
            Not Before: Feb  9 15:00:42 2026 GMT
            Not After : Feb 10 15:00:42 2026 GMT
        Subject: CN=ca993fcd7fc355729af445c9d5f5b4543838c90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:61:de:89:36:b1:13:f8:fe:48:c8:30:2f:
                    a2:c5:4a:d1:e7:83:93:1a:75:02:c3:ee:a9:d2:ff:
                    d0:3f:44:98:38:91:12:fd:7c:a7:c3:29:dd:96:01:
                    5b:09:08:00:a3:5d:78:fd:43:ac:9a:cf:72:11:68:
                    b8:39:af:bb:c8:a4:bf:21:2f:8d:3b:89:bc:4c:df:
                    28:be:d2:78:ed:d0:98:a7:6b:a6:41:56:e1:c9:e3:
                    ea:be:a2:51:2b:c5:59:9c:27:9f:aa:34:0c:ad:08:
                    6f:11:44:91:74:8b:7d:b9:cb:1e:bf:1d:60:3a:5f:
                    92:3d:ef:70:4b:e2:60:a1:da:6c:fd:ad:aa:0d:72:
                    c9:d6:f2:b9:f6:97:e2:7c:90:91:9f:57:c8:fd:3f:
                    74:99:3e:1c:db:ce:cb:a1:44:c2:b0:e2:4a:15:a0:
                    35:2e:65:64:6d:14:64:87:ac:64:bc:b8:63:6f:c7:
                    a5:cc:aa:2b:3d:63:4f:61:01:44:72:c8:78:30:78:
                    a2:7c:43:cd:5f:4d:a2:e3:49:0a:9d:12:44:66:dd:
                    37:90:a4:49:5d:10:31:3f:bb:73:58:f5:f5:70:df:
                    92:87:8d:96:17:3a:a3:7e:72:48:e3:cf:02:48:81:
                    6c:9f:ef:56:01:4d:f0:65:71:dd:c2:7e:1e:50:1d:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:3F:CD:7F:C3:55:72:9A:F4:45:C9:D5:F5:B4:54:38:38:C9:0F
            X509v3 Authority Key Identifier:
                keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:49:e2:00:7a:ed:17:21:9f:8e:ab:3a:aa:c2:61:a0:0c:a0:
         bc:99:3e:f9:db:51:00:c7:1a:27:2d:d4:21:96:e6:9d:d2:6d:
         2d:69:7f:83:aa:de:79:55:5c:8f:47:65:ca:e8:fa:e6:fc:e4:
         2b:ab:05:23:d5:31:39:ec:22:02:13:fa:62:9e:5b:c2:54:f8:
         6e:06:c3:53:1e:d6:ef:8e:c5:8e:9c:bd:ce:68:94:20:c5:f6:
         d9:54:15:c2:8f:90:14:1b:b4:39:fa:ef:47:b5:56:80:aa:f0:
         3b:55:d8:8f:37:47:51:6e:69:58:48:00:b9:bf:ee:0b:3a:e3:
         ce:e1:8f:b8:8a:c5:54:d2:55:25:3d:0b:5e:75:f4:9c:19:91:
         58:e1:10:66:1d:26:c4:b4:6d:61:89:01:4a:86:11:13:7b:1a:
         dc:45:93:ae:04:05:9f:8c:6b:f0:55:b9:c6:3e:80:c9:ce:cd:
         0a:bd:c5:12:73:44:67:87:af:be:b1:6f:e5:3b:f2:99:c7:62:
         0a:91:fe:2f:5e:01:5b:69:2b:bc:aa:e3:d2:2a:f2:a7:03:fe:
         6e:79:5c:91:ed:8b:09:7c:1d:0e:cb:2b:c9:58:df:e8:c3:85:
         65:65:04:1b:fb:67:7d:0d:36:81:2c:ab:99:f2:3c:52:55:a8:
         b6:80:92:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:05 2026 by rpki-client