This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File:                     n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier:          Vtv3DV91tgnyrKLFu1k9nKxQJsCFyoEwldcG2T3Zy4M=
Subject key identifier:   46:32:F3:86:0C:BD:63:B0:4C:B8:CC:25:E0:FF:E2:D1:C7:A6:15:B3
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer:       /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial:       019C42EB5B409A095B3A8E8EAE784EC0A24B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number:          0C1E
Signing time:             Mon 09 Feb 2026 15:00:46 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:46 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:46 +0000
Files and hashes:         1: 0hVeTF2nAdH91iTO48OxEkht79k.roa (hash: nzFagvuCRYhuTPVfckXmQ2+P0jcP0uf+Gm7rafFIPmc=)
                          2: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: Mug+0yyPmD+3AXemV2g0BwOQeo8CBpX3XHureusFCVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:5b:40:9a:09:5b:3a:8e:8e:ae:78:4e:c0:a2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
        Validity
            Not Before: Feb  9 15:00:46 2026 GMT
            Not After : Feb 10 15:00:46 2026 GMT
        Subject: CN=4632f3860cbd63b04cb8cc25e0ffe2d1c7a615b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:12:87:d0:bb:05:11:f8:da:d0:00:c4:ec:
                    5e:2d:02:2f:50:47:85:66:0a:05:b7:87:ed:2b:28:
                    c4:17:2c:3a:5a:45:71:f2:2a:82:ff:a5:a7:db:c8:
                    68:eb:df:61:95:32:8a:47:96:0f:95:b6:b3:cb:e2:
                    99:b4:e1:6c:d9:34:02:c6:4c:08:05:9d:d6:e7:22:
                    70:2f:80:df:0b:fc:05:c5:e3:55:52:2f:99:7b:ac:
                    4f:a9:11:1e:a8:09:3b:ea:59:a7:5f:a8:1d:17:79:
                    0b:2f:dd:94:9f:2c:d8:95:a7:29:47:ea:99:2b:d3:
                    c4:06:27:23:f7:6f:29:35:bc:60:11:2a:94:17:16:
                    05:8b:30:52:dc:4c:46:22:de:a7:b2:80:58:99:6e:
                    30:d5:f2:4c:52:82:b2:54:fe:51:d8:ca:fe:d6:4c:
                    0b:1c:69:51:9c:11:79:56:bd:86:01:0c:d9:13:2c:
                    ec:77:c3:15:0e:a6:0c:7a:78:d8:6a:f0:d4:6c:20:
                    78:63:7b:e8:4d:c1:7e:64:0e:34:66:28:33:68:46:
                    cb:70:54:f8:a9:96:0c:ca:63:32:2c:cd:ae:09:d1:
                    40:60:71:74:75:41:40:2b:e6:a8:1c:f6:70:6f:9d:
                    18:8a:ef:b5:ef:c2:2b:80:2f:0c:fe:96:84:76:20:
                    04:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:32:F3:86:0C:BD:63:B0:4C:B8:CC:25:E0:FF:E2:D1:C7:A6:15:B3
            X509v3 Authority Key Identifier:
                keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:15:95:c1:48:2c:2a:75:fa:a8:49:c3:65:93:e8:6d:b2:
         e8:8a:d8:dc:af:1d:a0:34:0e:b4:22:dd:52:6c:63:46:c0:f5:
         16:74:5b:23:c1:f6:c0:23:73:ce:56:b0:49:6d:23:8c:23:e7:
         64:56:c5:31:7f:fe:c5:1f:2f:46:03:84:44:a1:09:ea:d7:15:
         51:f5:4b:b7:51:7f:78:bc:ef:0a:9e:ff:13:c9:d3:26:9a:1d:
         a7:a3:a9:3a:75:80:4f:29:7d:08:d0:04:ef:42:41:ae:88:3a:
         fe:9d:31:c7:8e:5e:1f:59:75:19:b5:f4:45:5e:dc:a1:71:d8:
         dd:cb:db:f1:86:d8:bf:fb:14:bd:34:b3:31:35:c4:dd:6f:7f:
         2d:6e:f0:d1:c0:5b:f3:46:5d:d1:f5:bc:21:03:d4:05:73:4d:
         2c:64:1f:9e:84:2c:64:28:99:34:ca:fd:34:b5:39:8e:b1:95:
         8e:35:07:c8:2a:7f:8b:f6:eb:60:b7:83:f3:f6:fb:ed:dc:fd:
         04:9f:ec:9e:2b:b4:17:4a:af:a7:01:14:33:ef:d1:c2:6b:6c:
         f9:38:ef:ef:45:fe:94:a1:77:0c:56:fb:dd:7d:bb:0a:81:7a:
         a9:9d:8b:35:d6:6e:4d:be:ed:ec:fc:ab:35:c8:5e:01:a7:41:
         43:16:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:10 2026 by rpki-client