This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          DGqd0SH+4ARYt+ukcsqrt9nL2WiSf/4wv94+p49bEAE=
Subject key identifier:   49:C9:67:06:7F:C5:69:28:B8:E8:D4:FB:56:35:56:C2:A1:F1:59:70
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       019C42B490A0F54749244F6E732922AFFB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0888
Signing time:             Mon 09 Feb 2026 14:00:55 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:55 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:55 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 3P+fsvvC9bdPVi/4qIawdf0HtKCwJk3teqbeR4ZkdlQ=)
                          2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:90:a0:f5:47:49:24:4f:6e:73:29:22:af:fb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Feb  9 14:00:55 2026 GMT
            Not After : Feb 10 14:00:55 2026 GMT
        Subject: CN=49c967067fc56928b8e8d4fb563556c2a1f15970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:c8:f2:07:00:d0:08:48:a0:a7:51:c8:fa:
                    f4:5f:1e:c4:a5:bd:b8:a6:de:4e:1f:9e:66:8b:94:
                    97:f9:ce:c1:74:58:b9:41:27:19:51:4f:b2:1e:b8:
                    4e:81:5c:5c:c7:c5:ca:e8:f1:da:9c:0d:8e:bd:13:
                    33:26:50:dc:1a:f7:bc:d5:36:2a:a4:0b:bc:0a:fa:
                    e4:08:09:d3:a0:ee:19:cc:44:bf:82:69:0e:27:1a:
                    f7:eb:29:9d:68:91:da:91:fa:d1:0b:7c:0e:63:82:
                    af:08:26:05:56:63:f4:36:58:b0:9e:01:c0:41:47:
                    58:11:2f:85:cd:40:ca:3e:e8:b7:44:50:f5:b5:40:
                    d2:30:2b:c7:31:d4:9e:d9:c9:03:5d:b2:5b:78:94:
                    15:36:c9:0b:76:2b:6f:fc:78:e5:81:9f:1c:f0:e3:
                    da:f0:c8:d4:61:96:81:1e:cd:3c:bc:70:76:fc:90:
                    2e:be:17:4d:36:f7:e5:aa:b4:89:c3:32:31:d5:21:
                    f7:27:19:44:d9:29:ec:6c:72:55:69:e3:1c:57:1d:
                    49:7c:6a:f0:16:62:e1:79:a7:7b:1c:58:aa:28:71:
                    82:84:1a:32:c5:87:93:9c:32:19:88:31:e2:90:4f:
                    1e:de:5b:a2:00:bd:04:31:69:6c:c4:9e:69:c2:a0:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:67:06:7F:C5:69:28:B8:E8:D4:FB:56:35:56:C2:A1:F1:59:70
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:19:a2:9e:bf:f3:36:23:72:e2:22:e3:95:8c:0f:22:ef:5e:
         47:01:f3:16:42:1e:85:24:f2:b2:22:f1:f5:13:e1:ff:21:07:
         de:e0:a3:8c:e3:2d:6f:cd:79:66:dd:2e:42:a8:f7:4f:8f:2f:
         fe:62:48:28:b3:97:33:28:94:93:bf:4e:89:d6:b2:08:5c:67:
         82:bc:bc:c8:bd:45:d3:44:27:22:12:5a:d2:c7:68:fc:ff:7e:
         97:6d:12:f2:f4:98:4c:3c:c3:a8:d4:24:83:c6:08:5c:ad:8a:
         87:65:f7:87:16:08:33:e4:6a:8e:09:83:aa:b6:b1:a7:47:05:
         bd:c5:cc:9c:23:b1:78:b8:22:2f:b9:83:06:22:98:72:b5:77:
         37:35:5c:c9:bf:ca:9e:6c:dc:58:7a:5e:43:91:c8:b0:d5:a1:
         d0:b9:50:0e:fe:af:73:da:ea:23:5a:e4:63:b4:90:fc:8b:8f:
         16:6b:44:b3:f7:91:8c:41:26:12:95:1a:4b:cf:f3:fc:1f:bd:
         91:fa:46:f7:0f:9e:dd:b6:a8:23:28:47:b1:ba:04:6d:af:6d:
         5a:c1:5f:c2:6f:b1:94:da:2c:fe:ab:65:f8:25:77:ff:4f:a0:
         0c:56:d9:0c:3c:d6:4b:5b:e9:1c:cc:da:e9:82:50:3c:6e:ca:
         7c:56:79:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:18 2026 by rpki-client