This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File:                     PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier:          gD6tBUi5GiGnI52l2p1zQtu65GwELPSpxmCgptUJDoU=
Subject key identifier:   F8:B4:D8:20:04:76:EA:90:F7:2B:25:A6:B0:EB:8F:36:3B:74:6C:EB
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer:       /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial:       019C42EB360AE756BA3AB65CE7E3D49A84F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number:          1025
Signing time:             Mon 09 Feb 2026 15:00:36 +0000
Manifest this update:     Mon 09 Feb 2026 15:00:36 +0000
Manifest next update:     Tue 10 Feb 2026 15:00:36 +0000
Files and hashes:         1: J1ZNlvpAp8dQYGMOD7UX0oUYBcI.roa (hash: EeG9YUdg/cA88sV9yS1ysCVKGj6cTXLlHbFYfJXwIrI=)
                          2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: KykW6mOb7Loy4olKOwFxxN3GhRV5WcWS1Yf2z7utYC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:eb:36:0a:e7:56:ba:3a:b6:5c:e7:e3:d4:9a:84:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
        Validity
            Not Before: Feb  9 15:00:36 2026 GMT
            Not After : Feb 10 15:00:36 2026 GMT
        Subject: CN=f8b4d8200476ea90f72b25a6b0eb8f363b746ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:79:42:ba:5e:bc:1e:c8:f9:a5:41:3c:f2:
                    fd:62:e3:d2:24:08:f5:fe:0e:84:b3:3a:73:6e:62:
                    8a:24:51:63:77:f3:f9:61:d5:11:80:26:74:1e:c9:
                    f1:d4:73:b3:26:0d:41:02:64:08:c2:cf:36:2c:4a:
                    11:f7:f2:89:35:22:d2:0f:b3:a0:ec:cf:6c:1d:bd:
                    b6:f8:3a:3c:36:7a:9b:03:97:8e:d0:03:e7:c3:9b:
                    ab:03:26:b5:29:19:a4:1c:94:78:88:e8:83:25:ad:
                    95:cb:6c:87:57:8d:3b:51:29:a6:21:47:e2:25:1d:
                    9d:65:32:96:69:ec:19:be:5c:79:e4:9f:29:71:81:
                    0c:09:45:ab:38:66:57:da:0c:7e:4d:b7:14:b7:7d:
                    b9:6d:0f:5d:94:c6:80:2b:da:f0:e7:30:ae:a4:6e:
                    3b:91:fe:ce:10:f8:7f:4d:5d:80:e5:6a:67:7a:f2:
                    ad:b3:df:22:38:d4:68:91:db:f6:c6:b3:a3:e2:56:
                    c6:b1:82:2b:8a:0e:9c:06:4b:96:d9:43:bc:6f:c9:
                    8a:ad:8c:a6:a4:97:75:fe:66:c6:62:6d:5f:30:70:
                    e1:df:83:fb:3d:9c:b4:c4:2b:4e:f9:88:98:39:d9:
                    17:ff:01:b5:9e:6e:0d:22:c9:d7:97:95:77:0d:32:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B4:D8:20:04:76:EA:90:F7:2B:25:A6:B0:EB:8F:36:3B:74:6C:EB
            X509v3 Authority Key Identifier:
                keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f8:a5:20:2d:e2:90:fe:89:da:59:90:98:3d:32:0b:c1:d7:
         94:c7:ab:6f:a3:a9:a5:12:8b:a7:0d:af:f5:39:f1:39:e1:f9:
         4f:41:9c:76:3d:fe:a1:f6:91:5e:9b:75:34:18:c6:d1:df:9a:
         b7:1e:0f:64:52:bf:da:c1:d8:fc:f0:c4:c2:40:f0:5a:2e:7d:
         51:3e:fb:62:b5:05:c0:ea:27:8d:58:4f:1a:f9:8f:72:2b:9d:
         cd:17:b5:8e:35:86:04:e1:2e:68:62:37:98:c5:11:c1:c0:df:
         cb:5a:fe:26:9e:e8:0d:d7:c4:5e:b9:a6:05:74:82:ec:87:5b:
         7e:3d:ca:a9:f2:37:74:e7:3a:29:a2:e1:76:ac:0f:d3:7c:5e:
         c0:10:c6:75:77:a7:28:61:a4:e4:79:59:8d:ee:0f:b7:59:5d:
         c9:45:b4:c4:4d:35:6b:6f:d6:ec:c5:f2:88:97:8a:3d:71:20:
         64:3b:65:ce:5c:6f:dc:0f:38:6d:0a:86:62:ba:d9:26:fa:ca:
         0f:88:cb:04:80:86:b8:c3:0b:cd:b6:c5:67:eb:1a:4a:08:a1:
         d4:af:54:0e:34:9c:5c:e6:52:e6:69:cd:b3:ff:b2:da:26:e9:
         67:38:6c:61:35:4d:aa:f1:9d:fa:b5:7f:74:7a:fb:ce:ab:aa:
         66:8d:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:22 2026 by rpki-client