This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File:                     s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier:          t/H21tvMEuhqcD045NbWB0mY+DH4Ts1xIvh7XrVgzoM=
Subject key identifier:   6F:E6:9E:B9:CB:3D:49:85:C0:46:B6:3F:95:D0:DA:B6:95:30:66:0E
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer:       /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial:       019C40FD36F23BBA46066D8B20A3283B8312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number:          1812
Signing time:             Mon 09 Feb 2026 06:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 06:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 06:01:02 +0000
Files and hashes:         1: dtqeW6Rynd2uiXS65wqI97i2PSI.roa (hash: ZHCN5Dvp384mlS+qqUt7NWTOJvWvW2F7gnjX0CX9nTI=)
                          2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: 7s4xCR2b44znmsBivyyKa1Wv1fFFaz30W3lki9TMSYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:fd:36:f2:3b:ba:46:06:6d:8b:20:a3:28:3b:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
        Validity
            Not Before: Feb  9 06:01:02 2026 GMT
            Not After : Feb 10 06:01:02 2026 GMT
        Subject: CN=6fe69eb9cb3d4985c046b63f95d0dab69530660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:81:54:ff:2b:00:1d:83:8e:1d:37:11:25:
                    66:ee:ba:54:aa:53:a9:c5:58:12:d7:58:4f:8e:62:
                    c4:c0:7f:b0:73:18:b2:02:21:55:7f:cf:c1:cf:1a:
                    c1:17:d9:50:16:ed:f3:8d:22:71:d6:1b:79:70:8a:
                    f5:35:62:93:0b:1e:0b:76:20:33:14:6a:01:d9:24:
                    f8:16:c9:03:49:3d:65:bc:28:49:29:6d:e6:0e:57:
                    f5:5c:f3:94:61:5e:58:0a:11:d5:0d:83:c6:6c:6b:
                    30:62:fb:28:6f:03:6d:02:49:21:59:ec:fe:f0:51:
                    7e:34:9b:ff:ee:91:e4:09:63:4f:b8:22:f5:28:14:
                    35:d6:f7:d2:7d:2e:f3:97:a8:56:73:8f:59:b1:2b:
                    ac:ce:59:7f:15:d2:ba:c3:ab:af:76:30:ae:f0:cc:
                    1f:f2:12:e6:d8:b1:98:3e:88:10:9b:21:7d:99:f2:
                    78:d1:48:92:0d:62:3b:b6:f1:45:a2:76:99:6b:af:
                    a4:06:da:d5:29:2f:b0:7c:86:6b:3c:bc:29:fb:80:
                    75:b9:5b:fa:c6:bf:80:5a:f3:1f:17:3d:e0:27:d7:
                    86:56:d6:a3:82:8f:ea:cc:e4:73:60:a3:1b:00:6f:
                    d7:5a:d7:03:b2:3a:e9:09:0c:81:88:34:3d:7c:59:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:9E:B9:CB:3D:49:85:C0:46:B6:3F:95:D0:DA:B6:95:30:66:0E
            X509v3 Authority Key Identifier:
                keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:52:cc:4b:06:0c:40:fb:8a:04:1b:55:6f:93:6b:cc:ea:
         95:5d:c8:ee:3e:be:52:1d:e5:12:95:1d:3a:95:7f:db:3c:8e:
         3d:59:f4:74:d3:0b:5d:90:66:bd:b0:42:3c:30:b6:09:49:47:
         6b:98:6e:1c:fb:f7:d3:70:74:9c:50:9b:04:40:fe:8c:6f:76:
         0a:c0:86:ce:e9:ae:1e:8f:ba:e7:41:d5:2b:e3:db:fb:2f:75:
         15:0e:ae:20:6a:f4:7f:c9:0a:19:b0:db:7d:85:6f:4e:3d:f6:
         ad:8d:01:31:49:b9:dc:e7:43:ce:f2:32:e0:be:58:21:f3:c1:
         22:a6:8b:d8:1a:eb:6a:a3:12:28:70:b3:a9:c0:67:e0:d7:d4:
         3d:a0:be:88:62:e1:6d:0f:b5:70:3c:17:2a:13:d2:01:f6:81:
         f4:3a:15:b1:91:db:da:59:4f:c1:31:e1:d0:68:5e:b8:44:10:
         f4:d9:88:66:ad:69:30:f6:05:57:13:ef:62:f8:75:8a:2a:55:
         a7:d7:84:e4:17:d7:a9:0c:64:e6:e4:b4:89:b7:83:c2:f8:d3:
         90:31:8b:fc:e0:53:3f:26:4d:18:19:2f:e7:88:86:de:42:94:
         a2:39:63:7e:d7:f3:98:0d:ac:17:a7:1d:91:12:69:25:ef:94:
         bd:45:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:22 2026 by rpki-client