This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File:                     B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier:          n7QFxbnyBhxWh9VMfbwp9mm9cJKd5sDlamIOlIVq5Cg=
Subject key identifier:   EF:0F:06:B4:2E:90:E7:2F:D7:2E:E1:23:65:D4:FB:06:75:90:58:3C
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer:       /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial:       019C420F30BC37A021E1DAC5FF88912CA635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number:          160D
Signing time:             Mon 09 Feb 2026 11:00:17 +0000
Manifest this update:     Mon 09 Feb 2026 11:00:17 +0000
Manifest next update:     Tue 10 Feb 2026 11:00:17 +0000
Files and hashes:         1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: V84Temk4tVvReL+SIaYqSk4JmXjqb8Gf8dvsY4nhSEE=)
                          2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:0f:30:bc:37:a0:21:e1:da:c5:ff:88:91:2c:a6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
        Validity
            Not Before: Feb  9 11:00:17 2026 GMT
            Not After : Feb 10 11:00:17 2026 GMT
        Subject: CN=ef0f06b42e90e72fd72ee12365d4fb067590583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:06:5d:be:a0:bd:c8:bd:45:c9:7f:b5:eb:
                    43:64:f9:b0:af:de:51:f5:20:99:8b:fd:56:a3:96:
                    ef:94:39:01:aa:81:2a:f7:ff:6d:c9:37:63:a0:07:
                    f6:19:7b:01:18:0d:94:72:d7:53:cf:59:c8:fd:ff:
                    e9:91:d9:b5:80:0a:bd:c6:23:d9:82:fd:07:fd:9c:
                    eb:89:8c:2a:bf:64:af:c1:d7:c1:6b:be:f8:e4:b7:
                    21:ed:ae:6c:a9:43:41:f8:b8:85:83:ce:6e:8c:5f:
                    2b:7c:e0:be:49:ae:61:26:72:a9:24:97:e6:38:3a:
                    b6:fb:42:69:71:7b:5e:81:f9:5d:36:09:0d:ed:fe:
                    9d:a0:bd:dc:3f:cc:ed:77:48:c5:30:73:a4:4f:50:
                    8e:39:7a:ed:64:4d:a5:34:31:6f:83:50:4c:d2:88:
                    31:1d:fd:fb:7f:6f:56:f4:28:e7:30:35:63:34:f6:
                    96:44:1c:f9:dc:4a:bc:d2:46:68:f8:35:46:c2:fb:
                    ba:4c:4f:b7:14:cf:77:15:b5:80:20:d9:41:5a:65:
                    68:ef:ab:f1:48:73:a7:21:5f:49:9d:b6:ed:fe:2d:
                    fe:68:9e:a3:4b:66:28:09:fd:a0:0e:e2:09:6f:e0:
                    67:3a:85:e0:d5:2e:e6:ee:a0:58:6b:e6:00:eb:82:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0F:06:B4:2E:90:E7:2F:D7:2E:E1:23:65:D4:FB:06:75:90:58:3C
            X509v3 Authority Key Identifier:
                keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:81:cb:e8:2a:7c:e6:39:6d:67:fd:30:a5:99:91:c0:86:16:
         1a:85:e1:2b:84:2b:6c:49:de:5e:36:88:34:e2:34:cb:00:c7:
         a5:44:29:39:77:8b:4b:50:47:75:ff:59:0e:2e:11:9d:99:c2:
         ae:9b:24:d5:5c:00:ce:00:9a:e3:58:24:1f:03:5a:cc:ad:b9:
         dc:d6:3b:9c:cd:55:fc:a4:6a:27:02:c2:53:b2:87:71:64:dc:
         75:ea:e9:4d:34:66:f4:b3:c8:32:cb:64:4c:2b:d1:b9:db:4f:
         21:01:b8:6d:c6:54:d5:dc:39:44:77:59:99:83:e4:55:8a:d1:
         a6:0d:68:ac:26:39:38:1c:0a:68:64:91:d6:21:cb:b5:f5:cf:
         63:82:cb:40:c1:cc:f1:49:6e:24:50:50:72:57:98:aa:08:a8:
         88:41:c0:29:33:7a:a5:90:2c:60:a0:50:68:50:db:60:55:b2:
         c8:87:3b:50:b8:82:0e:0c:07:60:39:a9:89:ad:97:33:da:87:
         5e:57:a0:d6:34:03:c8:71:af:c2:5f:d8:77:86:60:30:c2:3d:
         0d:21:b8:33:d8:87:4f:c1:18:de:33:56:d1:9d:78:95:ee:49:
         f1:5e:f1:fa:09:30:07:e2:a7:1c:63:61:f5:c5:f9:c4:2e:cb:
         c3:2d:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:33 2026 by rpki-client