This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          aC8HCNGOsreKE/+t9TITppFKgsTke6gWypH7K89R8ns=
Subject key identifier:   38:9B:26:C7:A6:A6:2C:6C:D4:99:5B:DA:F4:4C:A2:20:BE:9F:0D:1B
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       019C43C719B2B4B5972D8A9D4D499602A1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          1810
Signing time:             Mon 09 Feb 2026 19:00:47 +0000
Manifest this update:     Mon 09 Feb 2026 19:00:47 +0000
Manifest next update:     Tue 10 Feb 2026 19:00:47 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: 2WW1u8WG84u/ZsZc8z5R1GCxCnlPwTlS7C1YFGSM42I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:c7:19:b2:b4:b5:97:2d:8a:9d:4d:49:96:02:a1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Feb  9 19:00:47 2026 GMT
            Not After : Feb 10 19:00:47 2026 GMT
        Subject: CN=389b26c7a6a62c6cd4995bdaf44ca220be9f0d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:c0:77:15:ee:0c:85:4b:69:9e:82:43:52:
                    d1:b5:ca:ae:2a:f9:67:f3:1d:bd:37:35:2a:fd:e3:
                    49:73:1c:21:ef:4d:f6:c0:cd:3a:99:05:7d:dd:f4:
                    0e:cb:cb:e0:cd:b1:94:7c:7e:57:b5:35:a9:c4:a2:
                    12:6a:e2:95:0a:3f:9e:66:39:4f:68:15:b9:ca:3d:
                    b6:44:e8:ce:21:87:17:ec:47:dc:e1:9b:57:10:13:
                    39:f5:77:8b:07:fd:56:c3:4b:d9:8e:e6:e1:e7:12:
                    f2:58:a6:5e:85:d1:c3:d1:6f:7a:65:ba:98:f6:6e:
                    b3:25:55:76:72:f7:1d:bf:c1:41:a2:3f:5d:fa:5e:
                    a8:d7:9b:7e:42:e0:37:a7:b2:93:34:c7:fd:5a:69:
                    25:8d:c3:df:b7:37:08:d4:79:d3:a1:60:27:b1:8d:
                    f2:19:c7:11:36:89:0d:1a:f3:57:e7:2d:d4:32:02:
                    d0:d5:50:7c:88:28:a8:e9:d2:1c:37:ea:56:6b:17:
                    05:0e:1a:e5:bd:08:36:a3:9a:70:18:f3:5c:ec:bd:
                    e5:ba:dd:e2:c0:d7:af:64:a0:53:b9:ee:5f:65:c9:
                    cd:18:38:53:48:5b:49:8a:b9:52:36:4b:a9:79:5a:
                    11:e5:af:5f:35:7d:0c:76:95:bc:0f:eb:3f:f8:ac:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9B:26:C7:A6:A6:2C:6C:D4:99:5B:DA:F4:4C:A2:20:BE:9F:0D:1B
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4d:e0:1d:39:34:3e:90:57:e2:f3:3d:c6:28:bf:ad:a2:36:
         42:e9:ad:38:65:f2:7a:0b:6c:72:f4:e8:27:03:61:89:48:9d:
         3f:66:e0:33:33:ed:4f:bb:99:b7:44:1d:41:60:6f:92:fc:80:
         20:20:4f:91:0d:6c:45:99:0d:b1:d4:2c:cc:f2:15:88:18:27:
         d8:dd:c8:9e:35:e8:05:17:57:6e:95:6e:6b:52:13:4e:33:c3:
         c1:77:48:3b:aa:30:ed:2c:cc:37:8a:ac:64:4c:a9:88:f3:af:
         f9:ca:24:40:35:be:c2:ff:69:40:1a:71:20:7b:4d:dd:db:e0:
         76:da:d5:1c:d7:2b:8e:5a:0c:d7:66:63:39:5b:dc:4d:58:b1:
         f7:b4:1e:d1:df:81:4a:a4:5e:51:b1:e6:b3:c2:08:c0:7f:8c:
         5a:76:8d:82:8e:58:9e:ab:5a:3b:e3:e4:69:ee:fe:7c:84:de:
         3f:de:e2:55:cc:7c:9e:a5:93:07:9e:9a:27:8d:ad:5e:72:02:
         dd:b8:ef:62:d0:1b:eb:78:37:ec:ab:77:9d:77:3a:be:72:e7:
         a9:51:50:82:9f:72:63:46:46:91:d8:b2:9f:d7:cd:64:59:e7:
         3a:96:c7:74:5a:31:e6:3e:22:07:83:a5:64:d2:6f:dc:98:61:
         cd:fc:a3:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxxmytLWXLYqdTUmWAqG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi
YzZjYzMwHhcNMjYwMjA5MTkwMDQ3WhcNMjYwMjEwMTkwMDQ3WjAzMTEwLwYDVQQD
EygzODliMjZjN2E2YTYyYzZjZDQ5OTViZGFmNDRjYTIyMGJlOWYwZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0crAdxXuDIVLaZ6CQ1LRtcquKvln
8x29NzUq/eNJcxwh7032wM06mQV93fQOy8vgzbGUfH5XtTWpxKISauKVCj+eZjlP
aBW5yj22ROjOIYcX7Efc4ZtXEBM59XeLB/1Ww0vZjubh5xLyWKZehdHD0W96ZbqY
9m6zJVV2cvcdv8FBoj9d+l6o15t+QuA3p7KTNMf9WmkljcPftzcI1HnToWAnsY3y
GccRNokNGvNX5y3UMgLQ1VB8iCio6dIcN+pWaxcFDhrlvQg2o5pwGPNc7L3lut3i
wNevZKBTue5fZcnNGDhTSFtJirlSNkupeVoR5a9fNX0MdpW8D+s/+KxOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDibJsempixs1Jlb2vRMoiC+nw0bMB8GA1UdIwQY
MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt
YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy
LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIU3gHTk0
PpBX4vM9xii/raI2QumtOGXyegtscvToJwNhiUidP2bgMzPtT7uZt0QdQWBvkvyA
ICBPkQ1sRZkNsdQszPIViBgn2N3InjXoBRdXbpVua1ITTjPDwXdIO6ow7SzMN4qs
ZEypiPOv+cokQDW+wv9pQBpxIHtN3dvgdtrVHNcrjloM12ZjOVvcTVix97Qe0d+B
SqReUbHms8IIwH+MWnaNgo5YnqtaO+Pkae7+fITeP97iVcx8nqWTB56aJ42tXnIC
3bjvYtAb63g37Kt3nXc6vnLnqVFQgp9yY0ZGkdiyn9fNZFnnOpbHdFox5j4iB4Ol
ZNJv3JhhzfyjXQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:43 2026 by rpki-client