This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File:                     3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier:          ukT0zXOPyuUSi/ct9z0KajfgeaFfrrNXDJ1UxgSr8N8=
Subject key identifier:   CE:9F:41:8D:A1:D1:15:C4:84:22:FC:88:E4:25:A3:B8:3C:D7:7A:65
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer:       /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial:       019C42B41CC049AF981A35B5EB04D4AFA770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number:          1811
Signing time:             Mon 09 Feb 2026 14:00:25 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:25 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:25 +0000
Files and hashes:         1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: 5Oux/tQ/cRe4KmGrWgAsn480L3ORVtxTsiN525nF9aY=)
                          2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:1c:c0:49:af:98:1a:35:b5:eb:04:d4:af:a7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
        Validity
            Not Before: Feb  9 14:00:25 2026 GMT
            Not After : Feb 10 14:00:25 2026 GMT
        Subject: CN=ce9f418da1d115c48422fc88e425a3b83cd77a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:34:e2:e5:c5:5c:4f:0d:38:ba:16:92:6f:
                    ee:e8:a2:c6:17:5c:2f:32:ab:a2:7e:49:9e:24:c0:
                    a0:92:76:ba:ed:28:97:5f:6a:3c:3c:a8:be:fd:6b:
                    d1:bf:59:a3:90:a6:65:29:b0:81:43:a0:78:04:87:
                    cb:09:c6:83:30:a9:09:bb:f4:f8:58:9d:5c:72:cb:
                    b8:e0:9c:25:8b:90:c0:b0:4e:44:48:15:62:12:ac:
                    e6:53:0c:0b:67:6a:26:54:c9:f2:d4:fe:d7:5d:13:
                    0e:47:0e:84:16:ea:b4:ca:6f:d8:40:62:0d:b7:45:
                    40:e2:93:b0:77:cc:39:65:31:ce:ba:b5:5c:e9:a4:
                    a7:93:9c:46:16:dc:76:63:a6:63:cd:7f:00:80:78:
                    71:7e:d1:09:75:cb:67:06:75:b8:3a:06:16:e4:a1:
                    f2:80:ff:40:03:e7:b1:0c:62:04:6e:1f:a3:2e:98:
                    8d:cc:06:f9:b0:3b:73:e2:aa:0c:25:fb:74:28:f2:
                    26:cc:b3:10:c5:fc:58:5e:0e:b4:3e:e5:3e:78:51:
                    07:3a:64:fa:c0:43:93:27:c8:84:ab:44:3b:84:24:
                    09:49:d2:ad:bf:56:90:b2:83:37:b1:2a:6d:76:00:
                    f7:61:3d:c1:41:4f:8e:48:37:a5:02:e6:61:49:93:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9F:41:8D:A1:D1:15:C4:84:22:FC:88:E4:25:A3:B8:3C:D7:7A:65
            X509v3 Authority Key Identifier:
                keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:0b:33:09:52:84:16:82:7a:c7:fc:c9:fa:4d:dc:9e:b6:
         44:ce:6c:f4:34:33:3b:ad:44:bd:d9:09:38:df:33:03:16:fa:
         ff:e8:3e:e3:60:67:af:6d:21:a2:be:ff:8c:1e:1c:28:6b:63:
         dc:ef:6d:5c:bd:44:06:86:85:e1:02:bf:f3:3e:6a:56:cb:70:
         d1:96:ff:18:19:26:1b:23:75:1e:8b:34:d0:60:b0:6b:91:93:
         79:4a:0f:68:fe:a2:3e:fc:20:a8:40:91:46:37:64:38:b9:40:
         a9:fb:c9:02:5d:59:30:e0:3b:de:f8:05:56:0c:61:42:37:53:
         d4:96:4e:58:d1:57:a1:61:24:24:19:f5:26:9f:ae:c2:30:cb:
         a4:26:36:d4:e1:7c:8d:e9:9a:f1:85:86:9a:ac:ab:36:a0:0c:
         4a:06:e1:ba:da:eb:77:6a:f2:4a:18:ee:39:e7:59:ff:6a:49:
         30:e9:c7:80:7d:9b:2f:d4:53:01:02:94:3b:2d:27:31:17:e8:
         b4:aa:e8:af:20:be:b0:a1:fb:d9:62:b2:b8:7b:bc:c1:0a:eb:
         a9:ef:38:44:04:e7:a5:43:81:45:58:29:3e:5e:18:c6:a7:0d:
         2d:49:69:93:07:72:fa:eb:46:71:09:af:c4:92:5d:e2:42:0f:
         7a:35:3d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtBzASa+YGjW16wTUr6dwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi
ZWM4OTQwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD
EyhjZTlmNDE4ZGExZDExNWM0ODQyMmZjODhlNDI1YTNiODNjZDc3YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRs04uXFXE8NOLoWkm/u6KLGF1wv
MquifkmeJMCgkna67SiXX2o8PKi+/WvRv1mjkKZlKbCBQ6B4BIfLCcaDMKkJu/T4
WJ1ccsu44Jwli5DAsE5ESBViEqzmUwwLZ2omVMny1P7XXRMORw6EFuq0ym/YQGIN
t0VA4pOwd8w5ZTHOurVc6aSnk5xGFtx2Y6ZjzX8AgHhxftEJdctnBnW4OgYW5KHy
gP9AA+exDGIEbh+jLpiNzAb5sDtz4qoMJft0KPImzLMQxfxYXg60PuU+eFEHOmT6
wEOTJ8iEq0Q7hCQJSdKtv1aQsoM3sSptdgD3YT3BQU+OSDelAuZhSZNlgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6fQY2h0RXEhCL8iOQlo7g813plMB8GA1UdIwQY
MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct
YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4
LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHokLMwlS
hBaCesf8yfpN3J62RM5s9DQzO61EvdkJON8zAxb6/+g+42Bnr20hor7/jB4cKGtj
3O9tXL1EBoaF4QK/8z5qVstw0Zb/GBkmGyN1Hos00GCwa5GTeUoPaP6iPvwgqECR
RjdkOLlAqfvJAl1ZMOA73vgFVgxhQjdT1JZOWNFXoWEkJBn1Jp+uwjDLpCY21OF8
jema8YWGmqyrNqAMSgbhutrrd2ryShjuOedZ/2pJMOnHgH2bL9RTAQKUOy0nMRfo
tKroryC+sKH72WKyuHu8wQrrqe84RATnpUOBRVgpPl4YxqcNLUlpkwdy+utGcQmv
xJJd4kIPejU9KA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:13 2026 by rpki-client