This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File:                     3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier:          rSGmRFy0onBqnYCOCCN2nsD4aNLNdtEj3DRH9tLBWuI=
Subject key identifier:   9B:5A:AC:AB:27:33:CB:BB:0A:8A:BF:1F:94:8F:3A:F1:89:77:22:CE
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer:       /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial:       019C443476832E13A6B2A22FD686760344EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number:          050A
Signing time:             Mon 09 Feb 2026 21:00:14 +0000
Manifest this update:     Mon 09 Feb 2026 21:00:14 +0000
Manifest next update:     Tue 10 Feb 2026 21:00:14 +0000
Files and hashes:         1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: C5F4XvQm444M+CRJg7lz4yTewcmuRsjQyxrxw9u2jss=)
                          2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
                          3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
                          4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
                          5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:34:76:83:2e:13:a6:b2:a2:2f:d6:86:76:03:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
        Validity
            Not Before: Feb  9 21:00:14 2026 GMT
            Not After : Feb 10 21:00:14 2026 GMT
        Subject: CN=9b5aacab2733cbbb0a8abf1f948f3af1897722ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:d2:ab:2b:74:23:67:3b:92:20:31:f4:e4:
                    2e:80:98:f7:d1:7d:eb:c6:1d:d9:a2:fb:32:41:e0:
                    b0:e1:ba:8b:3d:5a:e8:13:2e:4d:ab:18:e1:7d:b4:
                    3f:51:7d:0e:1b:7a:79:87:09:80:5f:ed:a6:f7:25:
                    45:4b:b0:bf:e1:45:63:38:95:ac:d0:29:35:0d:2f:
                    f0:6a:2e:e6:5f:7b:86:61:b2:a2:9a:3c:b7:7e:6e:
                    df:08:2f:9d:e1:f8:40:06:86:99:d3:75:a6:0a:77:
                    db:8a:34:b2:b5:3c:64:4c:c6:a6:04:22:79:24:ed:
                    96:d3:e5:96:d1:40:6a:cb:2b:e0:f8:f9:d6:8a:90:
                    b3:78:64:f9:de:dd:07:ed:cf:54:a6:b2:9e:8f:8b:
                    c4:75:f9:d1:e3:80:55:20:0e:e3:c0:1a:1f:29:65:
                    e0:db:d9:d9:dc:98:8a:ab:a3:98:f5:db:5b:b7:73:
                    45:b3:0d:42:ef:70:8a:fe:c2:45:26:a0:c7:27:9d:
                    16:a5:fd:f7:61:a2:87:e9:a2:f1:e4:ff:24:79:08:
                    8c:26:23:af:22:1d:86:22:82:87:40:c8:f2:99:e0:
                    89:e4:07:21:29:88:b7:67:2a:99:a9:0d:c3:ab:48:
                    a0:7d:21:10:a1:87:fe:0b:f3:32:df:49:cc:fb:57:
                    40:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:AC:AB:27:33:CB:BB:0A:8A:BF:1F:94:8F:3A:F1:89:77:22:CE
            X509v3 Authority Key Identifier:
                keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:90:1d:2f:1c:fe:fc:f8:c3:b5:7e:34:6e:43:86:44:97:c6:
         39:02:cf:04:43:00:2e:ee:17:ca:eb:51:1e:b8:e0:97:7a:03:
         b5:0d:8b:f7:98:2d:6a:44:73:99:82:32:fe:cc:bf:81:35:02:
         14:ce:48:ac:c0:e9:3b:26:ed:77:a1:ec:53:96:e9:7a:af:a8:
         77:f1:03:c0:6e:77:fa:9f:c8:12:03:cd:e2:6b:a9:4b:de:b3:
         16:0c:14:9a:c3:cf:07:d2:74:4c:11:24:c9:83:1b:83:77:8a:
         50:ee:20:29:aa:fa:a1:e8:04:fb:95:d1:bb:80:18:fb:c4:af:
         93:35:f0:14:f8:50:2b:ac:ad:0f:61:eb:b7:7c:14:98:a9:e3:
         61:eb:07:5f:71:05:11:f7:a9:07:1d:e6:3d:a0:bf:6d:4b:45:
         d9:7e:ac:77:c0:80:b6:7e:76:ed:de:68:e6:1e:a7:81:bf:74:
         1c:9a:7c:a1:70:13:14:e9:14:52:04:49:d3:cf:0f:c1:06:53:
         b0:13:26:9a:64:e2:5c:0e:6b:6c:d7:38:c3:c8:cf:bb:97:28:
         8f:c6:53:fb:ba:67:d9:f0:5a:5b:b7:25:94:7b:0a:39:20:69:
         53:7e:d7:37:f9:c1:eb:ad:29:45:fd:c6:a5:94:89:c9:92:eb:
         9c:70:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:33:10 2026 by rpki-client